Help · Monitoring

What monitoring watches

Categories monitored, sources covered, and what is out of scope.

Last updated 2026-10-04 Monitoring Questions [email protected], subject “Help”

Monitoring watches your domain and team email addresses continuously. Email settings (DMARC and SPF), newly registered look-alike domains and new host names certificated under your domain are checked hourly; every other category below is re-checked daily. Anything new is alerted the same day.

Monitored categories

  • Credential exposure: passwords, hashes, and session tokens found in monitored breach databases.
  • Paste sites: credentials and corporate data on public paste boards.
  • Look-alike domains: new domains made from your firm's name. We report the registration date and whether the domain can send and receive email or has a website, and ask whether it is yours.
  • Keys in your website code: API keys and secrets left in the code your own website sends to every visitor.

What we do not monitor

  • The contents of your private mailbox, files, or systems. Monitoring is external-only.
  • Phone numbers and physical addresses (unless they appear in a breach context tied to your domain).
  • Social media activity.

Customize what you receive

You can pause individual categories from the Settings page on your dashboard. See Tune your monitoring alerts.

Did this answer it? If not, email [email protected] with the subject “Help”. A person answers within 4 business hours.