Dark Web Domain Monitoring
Leaked Logins and Dark-Web Posts That Name Your Domain
Every 24 hours the platform checks each of your domains for leaked logins and for dark-web forum posts that name it. Nothing is installed.
$4 per domain per month • No proof of ownership needed
What It Looks For
Leaked logins linked to your domain, found in stealer logs and other leaked data, and dark-web forum posts that name it.
Severity Follows Whose Login It Is
Each alert is graded when it opens, and the grade doesn't change.
- CriticalStaff logins, which may open your company email or an admin panel
- HighCustomer logins, whose owners may not know they have leaked, and new dark-web posts that name your domain
- MediumLogins of third parties connected to your domain
Password strength is shown next to each record but never moves the grade.
- Staff loginm••••@acme-example.comCritical
- Customer loginj••••@example-mail.comHigh
- Third-party logins••••@supplier-example.comMedium
- Dark-web mention2 new forum posts name acme-example.comHigh
How the Checks Run
Every check runs automatically on the platform's own infrastructure, with nothing to set up. The platform finds the leak, grades it and delivers the alert. You change the password.
1. Checked Every Night
Leaked logins are checked every night, and the dark web within the next 24 hours. A new domain is checked soon after you add it.
2. Re-Checked When New Records Appear
When the data service reports new leaked logins for a domain, that domain is checked again straight away.
3. Alerts by Email, Portal and Slack
Leaked-login alerts are emailed as soon as they're found, with the next steps, and sent to Slack once you connect it. Dark-web posts appear in the portal.
4. The Site Each Login Was For
Each record shows the username, the site it was used on when known, its password strength and the date it was added, so you can tell a webmail password from a forum one.
5. A Warning When an Old Password Comes Back
If a staff login reappears with a password already reported, the alert says so and shows when it was first seen.
6. Passwords Are Never Stored
Leaked passwords are never kept. For staff logins only a one-way hash is stored, which is how a returning password is spotted.
What You See
In the portal: each leaked record and the site it was for, a password-strength breakdown, and a preview of every dark-web post that names your domain.
Reset the Password, Then Close the Alert
Reset the password, or get the account's owner to. The portal keeps track of the rest.
- Acknowledge, then resolve. Mark an alert as seen, then as dealt with. The portal records who did each and when.
- No duplicate alerts. New records for a group that already has an open alert update that alert and notify you again.
- Only your domains. You see the domains on your own account and nothing else.
- 4 new records foundSince the last check
- Alert sentHigh, with the next steps
- AcknowledgedRecorded with who and when
- ResolvedMarked as dealt with
Reselling it? Your customers get the same alerts under your brand, and in your WHMCS client area if you run the module. See the White Label page
What It Costs
For your own domains, dark web monitoring comes with every plan.
Starter
$19 a month
1 domain included
Up to 10 endpoints
Professional
$49 a month
5 domains included
Up to 50 endpoints
Business
$179 a month
15 domains included
Up to 250 endpoints
Any other domain, with or without a plan, is $4 a month. Resellers pay $1.50 per domain per month, wholesale.
Frequently Asked Questions
Where does the data come from?
From a specialist breach-intelligence service that indexes stealer logs (logins taken from infected computers by malware), leaked password lists and dark-web forums. The platform queries it for each of your domains and runs no crawlers of its own. It can only report what that service has indexed, so no check, this one included, finds every leak.
Will I get alerts for old leaks?
Yes, once. The first check alerts on every leaked login already on file for the domain, however old, and after that an alert means new records have turned up. The dark-web search starts with posts from the last 30 days.
Do I have to prove I own the domain?
No. Add any domain you are responsible for and the first check runs shortly after. Nothing is installed and nothing has to be added to the domain itself.
Are passwords stored?
No. For staff logins the platform keeps only a one-way hash, so it can tell when the same password comes back. The portal shows the account and the site each login was for, never the password.
Can I buy or resell it without endpoint monitoring?
Yes. It has its own per-domain price, for your own domains or for resale, and you don't need endpoint monitoring to use it.
Start With One Domain
$4 per domain per month for your own domains, or $1.50 wholesale when you resell it.
Start MonitoringOr create a partner account to resell it