Free check

See what an attacker already knows about your business

Type your website and your email address. In about a minute you will see what is visible from the outside, in plain words. Nothing is scanned, nothing touches your network; this is what anyone can find.

Nobody is told you ran this: not the address you type, not the business, not its IT people. No email goes to anyone. We keep the domain and the address so we can follow up if you ask us to; the address is only ever sent to the breach service, which does not store it.

What we look at

What a stranger can already find

The same places an attacker looks first, checked the same way, and written up so the owner can read it.

Passwords already leaked
Whether your email address has appeared in a public breach, and which ones. Criminals try leaked passwords against email and banking logins automatically.
Whether your email can be faked
Most small businesses never set the record that tells the world to reject mail pretending to be them. It is the mechanism behind most invoice fraud.
Doors open to the internet
What the internet’s scanners have already recorded as open on your website host, and on your office connection once we have visited.
Your website and your name
The certificate, the encryption, the software version it announces, and which lookalike domains one typo away from yours have been registered.
Whether you are already flagged
Whether security vendors mark your domain as dangerous, or your mail server sits on a blocklist. Either one is a sign something has already happened, and why your email may be going to spam.

Start with one visit

Tell us about the business and roughly how many computers. We will come back with a price and a date.