Has your firm’s data already leaked?
Free checks for your firm’s domain, an email address and a password against public breach records. The lookups run in your browser and we never see them.
Each check below sends a single query from your browser straight to public breach records. Nothing passes through this website, nothing is logged by us and nothing is stored.
Only check addresses and domains you are responsible for: your firm’s, your staff’s, or a client’s with their permission.
Your firm’s domain
Two questions in one: has a service run on this domain appeared in a public breach, and can someone send email that looks like it came from you?
An email address
Finds the public breaches an address appears in: yours, a colleague’s, or a client’s address you look after.
A password
Your browser turns the password into a fingerprint and sends only the first five characters of it. The password itself never leaves this page.
A clear result is not a clean firm
Public breach records only show what has been dumped and catalogued. The quieter leak is client data pasted into AI tools and personal accounts every day, which no breach list will ever show.
The Exposure Check is a 20-minute call. We run the verified domain search for your staff’s addresses, and tell you what the AI Exposure Audit would look for in your firm.