Know when your team's passwords leak.
When another website is breached, the usernames and passwords stolen from it often end up for sale on the dark web. If staff reused a work password there, attackers will try it on your Microsoft 365. On Secure+, we monitor for credentials from your email domains in known breach data and act when they turn up.
How it works
Watch
Your email domains are monitored for credentials that appear in known breach data on the dark web.
Alert
When a match turns up, we're alerted.
Act
In support hours, we check the account, make sure the password is changed and look for suspicious sign-ins.
Learn
Patterns, such as the same accounts turning up in several breaches, feed into training and your reviews.
Where it helps
Real situations this covers for businesses like yours.
A shopping site your MD used is breached
Their work email shows up in the leaked data, and we make sure the password is changed before it's tried on Microsoft 365.
An online service your team uses is hacked
If staff signed up with their work email, we're alerted when their details leak, and we make sure they change the password.
An old leaver's account appears in a breach
We confirm the account is disabled and can't be used.
A client asks how you protect their data
Credential monitoring is one more control you can point to.
Which plans include it
Prices exclude VAT. Plans require Microsoft 365 Business Premium (or equivalent), billed separately at Microsoft's list price - we manage and right-size your licences. See full pricing.
Common questions
What is the dark web?+
Parts of the internet that aren't indexed by normal search engines, where stolen data such as usernames and passwords is often traded.
What do you monitor for?+
Usernames and passwords from your business email domains that appear in known breach data.
What happens when a leaked password is found?+
We're alerted, and in support hours we check the account, make sure the password is changed and look for suspicious sign-ins.
If MFA is on, does a leaked password still matter?+
Yes. MFA makes a leaked password much less useful, but attackers still try it, and the same password may unlock other services. Changing it closes the gap.
Which plans include dark web monitoring?+
Secure+ only. Every plan includes MFA and Conditional Access, which protect against stolen passwords.
Works alongside
Want this looked after for you?
Free Microsoft 365 security audit - Cancel anytime in your first 3 months