Assets
Assets page provides you with an overview of domains you wish to monitor for leaked credentials, their state (whether you verified your ownership and if your selected pricing plan is sufficient), number of breaches detected on various subdomains and an option to add new monitored domains.
Upon clicking an added domain, you'll see statistics of breaches we detected in it's subdomains:
Each added domain can have one of the following states:
Domain states¶
Verified, monitoring active¶
Domain successfully added, ownership verified and your selected pricing plan is sufficient. You can find all details related to it in the Breaches section.
Verified, insufficient pricing plan¶
You successfully added the domain and verified your ownership of it, but your pricing plan is insufficient to display it's breaches. This means you either reached the limit of simultaneously added domains of your current pricing plan, or you are using the free plan.
Verified domain with insufficient pricing plan are treated the same as domain waiting for verification. We will provide you with anonymized results.
Please proceed to the Billing section if you wish to upgrade your plan.
Waiting for verification¶
Domain successfully added, but it's ownership verification is pending. Please finish it and select an appropriate pricing plan if you wish to receive full details about detected infostealer breaches.
Supplier domain¶
Supplier domains are coming soon
This functionality is currently under development and will be available soon for all paying users.
Users with selected pricing plan have an option to monitor their suppliers domains, in order to secure their own operations. If marked as Supplier domain, verification is not required. Unlike unverified domains, we will provide you with more information about breaches we detected on Supplier domains, yet usernames and passwords are still anonymized. You can use the Supplier domain feature to asses the security of your supply chain.
If you wish to alert your suppliers & partners about breaches found, you can forward their questions to us and we'll explain the situation.
Adding new domain¶
If you wish to add new domain, just click the Create button in the upper right corner.
Enter the domain name, accept the Terms of Service and click Add domain. Then proceed with ownership verification.
Domain ownership verification¶
Before we can show you data associated with your assets, we have to verify that you are entitled to them. This verification can be done in three different ways.
Verification with DNS TXT record¶
If you have access to the DNS settings of your domain, you can easily verify your ownership of it by adding a DNS TXT record. On the Assets page, click a domain pending verification and copy the value.
Once the change is propagated, your domain will be verified. You can check yourself whether or not it happened by using ie. the dig utility on Linux:
You can also use one of the many online tools to achieve the same thing. However, our systems check the DNS settings periodically and once the TXT record is propagated, you should quickly notice your domain is verified.
Verification with HTML tag¶
Another verification method is placing our HTML <meta> tag on the main page of your site. Your site must support https for this method to work. Simply copy the value shown to the <head> section of your website.
You can check the status simply by checking the source code returned to your browser. Change should propagae quickly to the Portal and your domain should be verified.
Manual verification¶
If you are unable to use one of the two automatic verification methods, please contact us. We will conduct the verification manually. This usually means verifying your own identity, your role in the organization and signing necessary legal documents.
Manual verification is especially intended for larger organizations, that can't go through the automatic verification process.