Cyber exposure management · People · Process · Technology
See your exposure before attackers do
Breached passwords, infostealer logs, dark-web chatter and lookalike domains — every identity exposure your business faces, pulled into one live console. Built for small teams, not security departments.
7-day free trial on every plan · cancel anytime
- Employeej.rivera@acme.com2h
- VIPdropbox.com5h
- Externalm.chen@acme.com1d
- Customer8,420 records1d
Check your domain's exposure
See how many of your organisation's credentials have leaked. Free, no sign-up.
The platform
Three pillars. One platform.
Cyber exposure isn’t one problem — it’s three. ExposureIQ covers all three, starting with the one that matters most today and adding the rest without making you re-onboard.
People
LiveIdentity & credential exposure
Continuous monitoring of breached credentials tied to your employees, founder accounts, vendor identities, and brand keywords. The first thing an attacker looks for.
Process
ComingHow you actually operate
Security gaps in workflows attackers exploit — shared accounts, vendor access patterns, weak offboarding, MFA blind spots. The human-shaped vulnerabilities scanners miss.
Technology
ComingWhat's reachable and risky
Public misconfigurations, exposed services, outdated dependencies, attack-surface drift. Know what the internet can see of your stack before someone proves it to you.
Roadmap order: People → Process → Technology. Customers from the first pillar carry forward — no re-onboarding, no data migration.
The console
Every angle of attack, in one place.
No agents, no scanners to babysit, no security degree required. Add a domain or an email and ExposureIQ pulls together everything an attacker already knows about you — across these surfaces.
Attack surface map
See your whole identity exposure as one map
Every leaked credential, breach, lookalike and dark-web mention — mapped from your organisation outward to the people, services and domains where they surfaced. One picture, refreshed continuously.
- Employees, customers, partners and VIP individuals
- Stealer logs and breach corpora, deduplicated
- Collapsed by default — expand any branch to drill in
External services & breaches
Find every service your people reuse a work password on
We resolve leaked credentials to the third-party services they were captured on, and fold in historical breaches — so you can see exactly where your team's logins are floating around, and which were password-exposed.
- Per-domain stealer-log and breach split
- Filtered to your confirmed staff email convention
- Filter-aware CSV export for any view
| Service domain | Exposure | Employees |
|---|---|---|
| lifesum.com | 14 stealer | 14 |
| linkedin.com | 6 stealer25 breach | 31 |
| canva.com | 9 stealer | 9 |
| dropbox.com | 4 stealer18 breach | 22 |
| mailchimp.com | 5 stealer | 5 |
Personal & VIP monitoring
Protect the people attackers target first
Founders, executives and board members get compromised on their personal accounts, not just their work ones. Monitor any individual address against breach databases and infostealer logs — we tell you whether a password was captured, never the password itself.
- Breach and stealer-log hits per address
- Password-exposed signal — plaintext is never shown
- Scans on add, daily, and on-demand
| Stealer | dropbox.com | Exposed |
| Breach | LinkedIn 2012 | hash only |
| Stealer | coinbase.com | Exposed |
| Stealer | paypal.com | Exposed |
Brand & chatter
Watch your name where you can't.
Exposure isn't only credentials. Track mentions of your brand and codenames across underground forums, and catch lookalike domains impersonating you the moment they're registered.
Dark-web keyword monitoring
| Keyword | Mentions |
|---|---|
| Acme Inc | 68 |
| Project Echo | 23 |
| acme.com | 19 |
| AcmePay | 7 |
Phishing & lookalike domains
| Lookalike domain | Signals |
|---|---|
| acme-login.com | New domainPhishing feed |
| acme-support.net | New domain |
| acmepay-secure.co | Cert logMalware feed |
| acme.com-verify.io | New domain |
How it works
From signup to first finding in minutes.
No agents to install. No SDKs to ship. Just tell us what to watch and we’ll surface anything that puts your business at risk.
Add what to watch
Drop in your company domain, the personal & VIP emails you care about, and any brand or codename keywords. Onboarding takes under two minutes.
We scan continuously
ExposureIQ checks 430+ billion leaked credential records, paste sites, and dark-web channels against your assets — around the clock.
Act on what matters
Hits land on your dashboard with source, context, and recommended next step. Slack and email alerts when something needs your attention now.
Pricing
Honest pricing for every size of team.
Each tier builds on the last. 7-day free trial on every plan — card required, cancel any time.
Startup
7-day free trial · card required
Employee + third-party credential monitoring.
- ✓1 domain
- ✓3 VIP emails
Growth
7-day free trial · card required
Everything in Startup, with more breathing room.
- ✓+ 1 domain
- ✓+ 2 VIP emails
Business
7-day free trial · card required
+ Customer exposure monitoring.
- ✓5 domains
- ✓5 VIP emails
Enterprise
7-day free trial · card required
+ Dark-web monitoring.
- ✓10 domains
- ✓10 VIP emails
- ✓5 keywords
Compare features
| Feature | Startup | Growth | Business | Enterprise |
|---|---|---|---|---|
| Domains monitored | 1 | 2 | 5 | 10 |
| Personal & VIP emails | 3 | 5 | 5 | 10 |
| Employee exposure view | ✓ | ✓ | ✓ | ✓ |
| Third-party exposure view | ✓ | ✓ | ✓ | ✓ |
| Customer exposure view | — | — | ✓ | ✓ |
| Dark-web monitoring | — | — | — | ✓ |
| Dark-web keywords | — | — | — | 5 |
| Real-time alerts | ✓ | ✓ | ✓ | ✓ |
| Email notifications | ✓ | ✓ | ✓ | ✓ |
| 7-day free trial | ✓ | ✓ | ✓ | ✓ |
FAQ
Questions, answered.
What about process and technology monitoring?
ExposureIQ is built around three pillars: People, Process, and Technology. We're laser-focused on the People pillar right now — credential exposure is the most immediate, most actionable kind of exposure for small businesses. Process and Technology coverage land on the same platform as the next workstreams; your data and configuration carry forward, no re-onboarding.
How is ExposureIQ different from free tools like Have I Been Pwned?
HIBP is great for one-off checks of a single email. ExposureIQ is continuous monitoring across the assets you actually care about — domains, personal & VIP emails, and dark-web keywords — with structured notifications, an audit trail, and the right context to act. Designed for businesses that need to know about exposure the moment it surfaces.
Where does the leak data come from?
We aggregate breach and dark-web data from a continuously-updated index of 430+ billion leaked credential records, plus our own enrichment. Sources include public breach dumps, dark-web channels, paste sites, and stealer logs.
How quickly will I be notified when something matches?
New findings appear in your dashboard within minutes of being indexed. Email notifications go out continuously; webhook integrations into your existing alerting (Slack, PagerDuty, etc.) ship in a near-term update.
Can I cancel anytime?
Yes. Cancel from your account settings and your subscription ends at the close of the current billing period — no clawback, no surprise charges, no calls to a sales rep. The 7-day trial cancels with one click before any charge lands.
Why do you ask for a card to start the trial?
Two reasons. First, it filters for serious evaluators — the people who actually want to use ExposureIQ in production, not just look around. Second, it means you don't have to remember to come back and enter a card on day 7 if you decide to keep going. You can cancel any time during the trial in one click and we won't charge a penny.
Is my own data secure?
We store only the assets you explicitly add (your domains, monitored emails, keywords). All data is encrypted at rest and in transit. Authentication is handled by AWS Cognito and we never see or store your password. Read more in our Privacy Policy.
Do you support single sign-on or audit log exports?
Not in the v1 of the Business plan, but both are on the roadmap as part of a future Enterprise tier. If you need them now, get in touch.
Ready when you are
Know what’s exposed before someone else does.
Spin up an organisation, add an asset, get your first finding. The 7-day free trial covers it end to end.