Each review is quoted as it was published, with the reviewer’s role and line of work. We never name a reviewer or their firm.
4.9 of 5 on G2
Our insurance broker had never seen anything like it
The one page summary for the insurer, dated, with a reference the underwriter could check on their site. Our broker said no client had ever sent her one. Behind it there's a lot more. The full technical document, the plain English version for the owner, the open ports and the software versions on our site and the look-alike domains with who registered them and where their mail goes. The monitoring then watches our mail records every few minutes and the names like ours as they get registered.
What it solved
Escrow fraud. Proving to lenders and the insurer that we actually looked. Our premium conversation went very differently this year.
Market and customer insights analyst, manufacturing · October 2026 · via G2
Turned security findings into productive client conversations
I was worried an outside report would make my company look bad. It did find a few open items, but the wording gives our team credit for closing them, and the lookalike domains aren't something we could have prevented anyway. It ended up turning into billable work for us.
What it solved
Gives me a solid reason to open security talks with clients who normally refuse to pay for audits.
Director, financial services · October 2026 · via G2
Helpful detection, even if one flagged domain was ours
They flagged two domains. One of them was actually an old name we bought during a rebrand years ago and forgot we still owned.
What it solved
The second domain was definitely fake. Having that heads up meant we could warn our client accounting teams before any bogus project invoices went out.
Owner and technical support specialist, consulting · October 2026 · via G2
Simple, clear, and backed by real support
Simple report, clean layout, and a real support person answered when I sent a question.
What it solved
Fixed our mail configuration so billing and appointment emails in our clinic name can't be spoofed anymore.
Practice lead · October 2026 · via G2
Catches spoofed domains before attackers can use them
The lookalike domain monitoring caught spoofed setups before our clients even noticed them. We handle IT for around 60 manufacturing plants, and LeakTrace flagged three lookalike domains with live mail servers targeting vendor invoices. Spotting those fake domains early gave us time to run takedowns before any wire fraud happened.
What it solved
It automates brand protection and adds an easy margin boost to our security packages. Plus, our clients get clean threat summaries to hand to their leadership.
Director of client technology · October 2026 · via G2
Caught a lookalike domain before it could be used against us
They caught a domain registered just five weeks ago that copied our firm name almost letter for letter. It had full mail records set up to send and receive email, but no actual website attached to it. That kind of setup is rarely an accident, someone was clearly getting ready to impersonate us.
What it solved
It made us send an official written policy to every client right away stating our payment and wire instructions will never change over email.
Chief executive officer, non-profit organisation management · October 2026 · via G2
Replaced our quarterly vulnerability scanning process across 90 clients
The multi-tenant dashboard saved us about 30 hours of manual work this month alone. We manage IT for around 90 law and CPA firms, and perimeter checks for QBRs used to be a pain. We had to schedule maintenance windows and run noisy scans just to get the checks done.
With Leaktrace, we just uploaded our client list and didn’t have to touch their internal setups. It quickly flagged two firms with active Microsoft 365 session tokens showing up in Telegram stealer logs, likely from employees logging in on compromised home PCs.
Being able to show a partner a blurred screenshot of their actual active session token makes the risk real. It also makes it much easier to explain why our security package is worth it.
What it solved
It’s an easy margin win for us. We wholesale the domain monitoring for about $35 and bundle it into our $75/month client security retainers. Our clients also get a clean report they can hand over to their insurance brokers at renewal time.
Development engineer, oil and energy · October 2026 · via G2
Six clinics showed us which one had the problem
I use LeakTrace to help us manage records. Looking at everything across all six clinics together made the difference. LeakTrace found that one clinic had a document store open without a login, while two others could potentially have emails sent in their name. The health privacy concern next to the finding helped get the owner to take action, and everything is now closed and confirmed in writing. I found the initial setup user friendly.
What it solved
The health privacy concern next to the finding helped us get the owner to take action, and everything is now closed and confirmed in writing.
Director of health and wellness, real estate · September 2026 · via G2
We weren't hacked, we were being impersonated
I use LeakTrace to detect authenticity. It showed us this was a completely different problem from a breach and a much cheaper fix. I like that every finding came with a command to check it yourself; our IT provider ran them and didn’t argue. The initial setup was smooth.
What it solved
I use LeakTrace to see what a stranger can see from outside and what an underwriter is going to ask. We now use the same questions with clients.
Head of communication and recruitment, accounting · September 2026 · via G2
Looked at the family, not just the office
I needed to know what the family and the office looked like from the outside once, have it done properly, and fix whatever came up. I found the onboarding process straightforward.
What it solved
I had the principals’ personal domains included with the office, and two findings were on the personal side.
medical practice · September 2026 · via G2
Our scanner said we were fine
I like that LeakTrace found a domain one letter off ours and a file share that opened without a password. The scanner never flagged either because neither is a vulnerability the way those tools think. Somebody at LeakTrace actually read the result and thought about what a person would do with them. Initial setup was smooth.
What it solved
I could tell clients that nothing was installed and nobody logged anything of ours. We got the lookalike taken down and closed the file share.
Group financial controller, renewables and environment · September 2026 · via G2
Finally answered the insurance form honestly
I liked that LeakTrace gave an actual answer for each item and, for the no's, told us what to change. Most of it was settings, so our IT company did it in an afternoon and we didn't buy anything. The form went in with answers I can defend, and having the PHIPA piece next to each item made explaining it to the doctors a lot easier. The initial setup was smooth.
What it solved
I found out from the PDF that two staff passwords from an old breach were still in use.
Practice manager, health, wellness and fitness · September 2026 · via G2
Almost paid for a pen test first
I had two pen test quotes on my desk, both wanted access to everything and about two weeks. A colleague at another firm mentioned Leaktrace so we tried that first since it didn't need anything from us. No logins, nothing installed. Report came back in 3 days. First thing on it was that anyone could send an email as our firm and it would get delivered. I asked our IT guy about it and he went a bit quiet, then fixed it that afternoon. Apparently, a pen test wouldn't have flagged that because it's not really a hole, it's a record we never set up.
What it solved
Insurance renewal really. We had something dated and in writing about what an outsider can see, our broker took it without questions. Might still do the pen test at some point.
Group chief financial officer, manufacturing · September 2026 · via G2