Identity exposure & dark-web monitoring
The Identity exposure module finds leaked credentials, breached passwords and exposed account addresses tied to your domain, for you to resolve once the account is secured.
Who it is for
- Organisations whose staff use work addresses on their domain, and who want to know when those appear in a breach.
- Security leads who want a list of accounts to reset, and a record of which are dealt with.
What you get
| Capability | Where in the app | Guide |
|---|---|---|
| Scanning authorised for your domain | Project settings | Run your first scan |
| Dark Web Discovery scans for your domain, on demand or on a schedule | Tasks › Scans | Scans and runs |
| Leaked and breached credentials found for your domain | Dark web › Exposures | Identity exposures |
| Resolve an exposure once the account is secured, one at a time or in bulk | Dark web › Exposures | Identity exposures |
| Reveal a leaked password | Dark web › Exposures | Identity exposures |
From setup to result
- Authorise scanningProject settings
- Run a Dark Web Discovery scanTasks › Scans
- Review leaked credentialsDark web › Exposures
- Reset the account and resolveDark web › Exposures
Good to know
Is this a separate tool from the attack surface scan?
No. Select New Scan in Tasks › Scans and choose Dark Web Discovery as the scan type.
Plans
Some scan options depend on your plan; see pricing.
Did this answer your question?
Attack surface (CTEM)
The Attack surface (CTEM) module scans your domain from outside to show what an outsider can see of your organisation, and which exposure findings to triage and fix first.
Cloud posture (CSPM)
The Cloud posture (CSPM) module shows pass and fail configuration results for the cloud and identity services you connect, such as Microsoft 365, mapped to framework controls, and tracks a fix or an exception for each failing check to a decision.