Incident Response
Incident response around the clock. When a cyberattack hits, our team responds right away and limits the damage to your…
ViewDefensive Services
Leak check for companies
Stolen credentials are one of the most common ways into a corporate network. They often sit for months in data sets from earlier breaches or in the logs of malware that grabs passwords from infected computers. The leak check shows you which addresses on your company domains turn up there before an attacker uses them.
Scope
What we check
01
which known data breaches affect up to three of your company domains, with the name and date of each breach
02
which of the addresses you give us appear in those breaches, for example the accounts of management, IT administration and accounting
03
on request, the private addresses of your management, with the consent of the people concerned
01
Result
What you get
A report listing the affected breaches and accounts, an assessment of how urgent each finding is, and the next steps: reset passwords, check multi-factor sign-in, examine affected computers. We go through the results with you.
02
Approach
How we work
We use a specialised leak database and only query whether a domain or address appears in a breach. We neither retrieve nor store passwords. We do not buy data and do not move around in criminal forums ourselves. We only check domains that belong to you, which you prove with a DNS record.
03
Ongoing
And afterwards
A leak check is a snapshot, and new leaks keep appearing. On request our SOC takes over the monitoring and alerts you as soon as one of your addresses shows up again. Multi-factor sign-in and security awareness training tackle the problem at its root.
Tell us your company domains and we will send you a quote.
FAQ
Frequently asked questions
Do you see our passwords?
No. We only query whether an address or domain appears in a breach. We do not retrieve passwords. If there is a hit, you reset the password yourself.
Is this legal?
Yes, as long as only your own domains are checked and no data is bought or passed on. That is why we require proof of ownership and only check private addresses with consent.
What do we do if there is a hit?
Reset the account password, including everywhere it was reused, and turn on multi-factor sign-in. If an account is affected repeatedly, the person's computer should also be examined, as malware may be running on it.
How often should we check?
New breaches appear every week. A one-off check shows where you stand today. If you want to stay up to date, have the domains monitored continuously.
Defensive Services
More in this area
Quantum Cryptography (QaaS)
Harvest now, decrypt later already affects data encrypted today. Cryptographic inventory, assessment by lifetime and hy…
ViewAI Threat Detection
Signatures catch what is known. NeoI catches deviations from your normal state, so attackers who use only legitimate to…
ViewFirewall & Intrusion Detection
Firewall, segmentation and intrusion detection as one architecture that we plan, implement and operate. With Valar as a…
ViewTabletop Exercise
We play through a realistic cyberattack at the table with management, IT and business units. Afterwards you know what w…
ViewContact
Reputation takes years. Destruction takes seconds.
Talk to us before somebody else does. The first conversation is free and we reply the same business day.