Domain Monitoring
Watch customer domains for leaked credentials and dark-web mentions, and understand the category severities.
Domain monitoring watches a customer's domain for leaked credentials (from breach dumps and stealer logs) and dark-web mentions. It is sold in domain slots: a customer's subscription quantity sets how many domains they can monitor.
What a finding means
| Category | Severity | What it means |
|---|---|---|
employees | critical | Credentials on your own domain's mailboxes (staff accounts). |
customers | high | Credentials of users who registered on your services with the monitored domain. |
third_parties | medium | Credentials exposed through unrelated third-party sites. |
Findings arrive as domain alerts of type credential_leak or dark_web_mention. Each alert counts how many newly-affected accounts appeared and links to the underlying records, including password-strength context where available.
Working an alert
- Acknowledge the alert so it is marked as seen.
- Force password resets (or other cleanup) for the affected accounts.
- Resolve the alert once handled. An alert must be acknowledged before it can be resolved.
Free lookup tools
The portal also includes a free one-time domain search and a breach check for emails, usernames or domains, useful during sales conversations to show a prospect their current exposure before they buy monitoring.