Stop account takeover before it starts.

Frequently Asked Questions

• Why BreachID if we already have security tools?

  Most security tools focus on activity inside your environment. BreachID focuses on exposed credentials and dark web signals that often appear before account compromise.

  It helps teams move from detection to remediation with less noise and clearer ownership.

• How often does BreachID scan?

  BreachID scans daily across all plans and alerts on newly discovered exposure records tied to your monitored scope.

• What is a “Breached Email” in licensing terms?

  A Breached Email is one unique email address found in one or more breach records. Repeated exposure of the same address still counts as one unique breached email for licensing.

• Do you monitor customer credentials as well as employee credentials?

  Yes. BreachID includes Customer Credential Exposure to help identify leaked credentials your customers use on your platform, even when the leak originated elsewhere.

• Do you store full leaked passwords?

  No. BreachID does not store full clear-text passwords. It minimizes sensitive retention while still enabling validation and remediation workflows.

• How does BreachID support compliance and cyber insurance?

  BreachID provides audit-ready evidence and reporting that demonstrates continuous monitoring and response capability for governance, POPIA-aligned controls and insurer due diligence.

• What should we do when exposure is detected?

  Immediately enforce password resets, revoke risky sessions, verify MFA posture, and investigate the source context. BreachID reporting is designed to support this workflow quickly.

• What if we outgrow a plan limit?

  You can move to a higher tier or a custom package to increase monitored domains and breached-email capacity while keeping historical visibility and reporting continuity.