Skip to main content
Get Started ↗
DARK WEB EXPOSURE SCAN

Check Whether Your Business Credentials Have Been Exposed

Request a one-time check of your business domains and email addresses against known breach data. An ITS specialist runs the review and sends you the findings.

Request a Scan ↗ See All ITS Tools ↗
WHAT IS CHECKED

What the Scan Covers

The scan checks the business identifiers you provide against known breach collections and dark web sources. Results depend on the information submitted and the data available from those sources.

Business Domains
The domains your staff send mail from, checked against known breach data and dark web sources.
User Email Addresses
The mailboxes you name, including shared mailboxes and addresses nobody has signed into for a while.
Priority Accounts
Leadership, finance, and administrative accounts that may present greater risk if their credentials are exposed.
Exposure Context
Where each exposure appears and what was in it, as far as the source records it.
New Versus Known
Whether a finding is fresh or a copy of one already circulating, so old listings do not restart finished work.
What to Do About It
Which accounts to reset, which sessions to revoke, and where multi factor authentication is missing.
HOW IT RUNS

How the Dark Web Exposure Scan Works

After you submit the request, an ITS specialist reviews the business identifiers you provide against available breach and dark web sources.

Step 1

You Tell Us What to Check

Submit your company name and the domains or email addresses you want checked. Use the message field to include any additional context, such as a domain you no longer use.

Step 2

An ITS Specialist Runs the Check

An ITS security specialist checks the identifiers you provide against available breach and dark web sources, then reviews the findings to determine whether they appear new or previously known.

Step 3

You Get the Findings and a Call

We send you what was found and what we suggest doing about it, and offer a call to walk through it. If nothing turns up, we tell you that too.

Request a Scan
Two ITS engineers working through an issue at a monitor
WHAT YOU RECEIVE

What You Get Back

You receive a written summary outlining the accounts involved, what each source indicates was exposed, and the recommended order for addressing the findings.

What the summary includes

  • The identifiers reviewed and the sources checked.
  • Each finding, along with the available context provided by the source.
  • Whether a finding is new or repeats something already circulating.
  • The password resets, session revocations and multi-factor gaps we suggest closing first.

This is a one-time check of the exposure visible at the time of review. Dark web monitoring is ongoing and is designed to identify new exposure as it appears.

Request a Scan
FAQ

Questions About the Scan

Do I get results on this page?

No. There is nothing on this page that scans anything. You send a request, an ITS specialist runs the check, and the findings come back to you afterwards.

How is this different from dark web monitoring?

This is a one time check of where you stand today. Monitoring is continuous, so you hear about a new exposure when it appears rather than when you next ask. If you want the ongoing version, read about dark web monitoring.

What do you need from me?

Your company name, a business email address, and the domains or mailboxes you want checked. Add the domains in the message field on the form. No passwords are required.

Does finding nothing mean we are safe?

No. It means the identifiers we checked did not appear in the sources we checked, on the day we checked. Breach data surfaces late and no source is complete. A clean result is useful, but it is not a clean bill of health.

What happens if you do find something?

Then the useful work starts. Exposed credentials get reset, active sessions get revoked, and accounts without multi factor authentication get it. We tell you which accounts to start with, and we can do the work with you if you want that.

Who at ITS sees what I send?

The security team that runs the check, and that is where the results stay. Sean Harris, our Chief Risk and Compliance Officer, owns how we handle what you submit. Our Privacy Policy sets out how long we keep it and what we do with it.

REQUEST A SCAN

Check for Exposed Business Credentials

Tell us who you are and what you want checked. An ITS specialist reviews the information you provide and usually sends the findings within two business days.

Read About Dark Web Monitoring ↗

Request Your Scan

List the domains and mailboxes you want checked in the message field.