What Every Package Includes
Compromised credential detection
Stolen employee passwords from stealer logs, phishing kits, third-party breaches and combo lists. Some stealer log alerts include the malware family, such as StealC or Vidar. We crack password hashes to plaintext where we can.
Full-text search of leaked files
Search the text of files from ransomware leaks, third-party breaches and unsecured databases for any term, such as your company name. We send an alert when a term you monitor shows up in a new file.
Webhook and email alerts
Push findings into your SIEM or SOAR via JSON webhook. Or get HTML email alerts for security teams without an integration layer.
Full API access
Every endpoint and every data source available via REST API. Plus our skill for Claude Code, Codex and Copilot, for plain-English queries.
What Sets Your Price
Watchlist size
Number of domains, subdomains, and assets you can monitor. Scales from one company domain up to hundreds of client domains.
API query quota
How many API calls you need each month.
Alert latency
Time from when we index a leaked credential to when we send the alert to your inbox or webhook. Faster alerts cost more.
Premium dark web market coverage
We add invitation-only forums and markets to your package on request.
Domain takedowns
Tell us how many typosquat and phishing takedowns you expect to need each year. We price them into your quote. Our team handles each takedown.
