Company

About LeakTrace.

The outside record of trust between businesses. LeakTrace is the independent outside watch for owner-run firms and the people who run them. Attackers now use AI to read a firm from outside the way a search engine does: the website, directories, search results and what AI assistants say. We read it first: we discover every way in we can see from outside, validate every finding with a check anyone can re-run, close each opening before it is used, and monitor it: email settings, look-alikes and new host names every hour, everything else every day. Every finding is human-verified before your assessment is released.

Check my firm How it works
Read-only, from outsideNothing tested or logged intoEvery paid assessment human-verifiedIndependent of whoever does the fixes
Founded
2025
Hosting
In the United States
01 · What we do

One outside reading, for three kinds of reader.

For a firmThe External Cybersecurity Assessment: the full outside watch on your firm, the proof for every finding, and the fix, then a continuous watch.Business → For a personThe Personal Exposure Briefing: the breach records tied to your email address, and what to do about each.Individual → For an association or networkA private summary across the firms you work with, sent only to you.Networks →
02 · How the work is bounded

Read from outside. Human-verified.

72 h
From your confirmation to the reviewed assessment
Delivery is inside 72 hours of confirmation
0
Systems we log into to do the work
Every check reads what is already public
1
Desk for everything: [email protected]
A person replies within 4 business hours
03 · How we work

Six principles every decision is measured against.

01
Before the incident
We work before a breach, not after. If an incident has already begun, we are not the right service.
02
Public sources, read the way attackers read them
What we read is what your firm already shows the public internet. No simulated threats and no synthetic data.
03
A check and a fix for every finding
Every finding comes with the check that proves it and the fix for it, step by step.
04
Kept until you ask
We keep what we hold until you ask us to delete it, and then we delete it. We do not sell it or share it.
05
Canadian and US privacy law
A Canadian firm, hosted in the United States. We follow PIPEDA and US state privacy law. We hold no third-party certification.
06
No scaremongering
We state what we find, sourced and documented. If there is nothing to show, we say so plainly.
04 · What we are

One layer, watched and closed.

We check everything your firm shows on the public internet, from the first reading to the last fix.

A read-only outside watchWe read what your firm shows the public internet, the way an attacker’s tools do. On monitoring, email settings, look-alike domains and new host names are re-read every hour, with an alert within the hour, and everything else every day. Not a pen test: we never attempt entry and log into nothing.
IndependentNo one who sells fixes pays us, so every finding is there because it is true.
Human-verifiedNothing releases on its own. Every paid assessment is human-verified before release, inside 72 hours of confirmation.
Fixed from our stepsYou get the fix for each finding, step by step, and we re-check each one from outside until it is closed.
Agent against agentAttackers point AI at firms, and LeakTrace reads them first.On a paid assessment, our AI agents work your firm from outside, stage by stage, and it is human-verified before release.After you buy, AI chooses follow-up checks, picks when to re-check from outside, and sorts new changes by which needs you first.No AI agent can state a finding without a fixed outside check behind it.The assessment comes with an AI security agent on your dashboard: ask it about any finding in plain English and it answers from your own firm's findings.Our AI agents work from outside only. They never log in, never install anything, and never touch your internal systems.The one change they can make, to your email records, happens only when you approve it.What each AI agent does, and what it can never do.
We close itWe give you the fix for each finding and re-check from outside until it is closed. The one change we can make ourselves is to your email records, and only when you approve each step, where your DNS host allows it. Where it does not, you get the exact records to paste. Staged, re-checked between steps, and nothing changes until you confirm.
We do not sell fearFindings come with their evidence and a plan. No countdown timers, no inflated scores, no invented statistics.
05 · Where we use AI

Where we use it, and where we do not.

We send a language model only a firm’s already-public findings and business context. Never raw credentials or payment data.

Where we use it
  • Sorting findings by severity, type and business impact
  • Drafting the plain-English explanation of each finding
  • Answering questions about your own findings, and only yours
  • Filling in business records from public sources
Where we do not
  • The assessment documents: human-verified before release
  • Rules mapping: human-verified on every assessment
  • Decisions about a customer: people handle every account
  • Anything that could invent a finding
06 · Contact

One desk.

Everything reaches [email protected]. A person replies within 4 business hours.

LeakTrace Inc. (getleaktrace.com) is not affiliated with the water leak detection companies or the product that share the name.

Reply
Within 4 business hours, from a person
Contact
Contact page, with the right subject for each kind of request
See your firm the way an attacker’s AI sees it.
For a firm For a person