What monitoring watches

Monitoring watches your domain and team email addresses continuously. Email settings (DMARC, SPF and your mail servers) are re-checked every 5 minutes. New certificates for host names under your domain and for look-alikes of your name are seen within minutes of being logged. Newly registered look-alike domains are checked hourly; every other category below is re-checked daily. Anything new is alerted the same day.

Monitored categories

• Credential exposure: passwords, hashes and session tokens found in monitored breach databases.
• Paste sites: credentials and corporate data on public paste boards.
• Look-alike domains: new domains made from your firm's name. We report the registration date and whether the domain can send and receive email or has a website and ask whether it is yours.
• Keys in your website code: API keys and secrets left in the code your own website sends to every visitor.

What we do not monitor

• The contents of your private mailbox, files, or systems. Monitoring is external-only.
• Phone numbers and physical addresses (unless they appear in a breach context tied to your domain).
• Social media activity.

Customize what you receive

You can pause individual categories from the Settings page on your dashboard. See Tune your monitoring alerts.