Protecting Brand Trust in the Age of Exposure

Frequently Asked Questions

• How do I choose the right plan?

  Choose a plan based on the number of domains you need to monitor and the number of email addresses associated with your organisation. As a guideline, most organisations have at least one email address per employee, but this can increase depending on multiple domains, customer accounts, aliases, and system usage.

  You can start with a plan that fits your current needs and add more email addresses as required. If you need to monitor additional domains, you can upgrade to a higher plan or contact us to discuss your requirements.

  For more details, feel free to review our Fair Usage Policy.

• How often does BreachID scan?

  BreachID scans daily across all plans and alerts on newly discovered exposure records tied to your monitored scope.

• Do you monitor customer credentials as well as employee credentials?

  Yes. BreachID includes Customer Credential Exposure to help identify leaked credentials your customers use on your platform, even when the leak originated elsewhere.

• Why BreachID if we already have security tools?

  Most security tools focus on activity inside your environment. BreachID focuses on exposed credentials and dark web signals that often appear before account compromise, then structures response actions your team can execute quickly.

  It helps teams move from detection to remediation with less noise and clearer ownership.

  If you need to monitor additional domains, you can upgrade to the next plan or contact us to discuss a tailored solution.

• How does BreachID support compliance and cyber insurance?

  BreachID provides audit-ready evidence and reporting that demonstrates continuous monitoring and response capability for governance, POPIA-aligned controls and insurer due diligence.

• What should we do when exposure is detected?

  Immediately enforce password resets, revoke risky sessions, verify MFA posture, and investigate the source context. BreachID gives you the evidence trail and workflow context to coordinate this response quickly.

• How does licensing work?

  Licensing is based on the number of domains and email addresses you want to protect. Each plan includes a defined number of domains and email addresses. You can easily add more email addresses within your current plan as your organisation grows.

• Can I license based only on detected results?

  No. Detected results reflect only known exposures and do not represent all email addresses associated with your organisation or being monitored by BreachID. Your plan should reflect your organisation’s overall size and unique email footprint, not just detected data.

  For more information, please refer to our Fair Usage Policy.

• Do I need to account for customer email addresses when choosing a plan?

  Not necessarily. It can be difficult to determine upfront how many customer email addresses may appear in your breach data.

  Customer email addresses linked to your domains do count towards your licence, but you can choose a plan based on your current needs and license additional.

• What happens if my plan (subscription) is exceeded or under-licensed?

  If the number of protected email addresses exceeds your plan, additional email addresses can be added to maintain coverage. If you require additional domains, you can upgrade to a higher plan. If you are already on the highest plan, please contact us to discuss your requirements.

  As per our Fair Usage Policy, plans should be representative of your organisation’s unique email footprint. Plans that are significantly mismatched may be reviewed and may require adjustment, upgrade, or suspension.

• What is the Fair Usage Policy?

  BreachID monitors your organisation’s domains and identifies exposed records for email addresses associated with those domains. Licensing should reasonably reflect your organisation’s overall email footprint, based on the domains being monitored.

  Plans (subscriptions) that are significantly mismatched with the organisation’s expected size and email footprint may be subject to review and adjustment. In such cases, we reserve the right to apply service limitations, require plan adjustments or upgrades, or suspend the plan (subscription), in line with our Fair Usage Policy.

• What if we outgrow a plan limit?

  You can move to a higher tier or a custom package to increase monitored domains and breached-email capacity while keeping historical visibility and reporting continuity.