Cyber Intelligence
Dark Web Report
Enter your company domain. The check shows in less than a minute whether your employees’ access data is being traded underground, whether your domain appears in data breaches or on ransomware leak sites and which weaknesses are visible from the outside.
Free and without an account. You can see the score and findings immediately, and you can activate details and measures with your business address.
Powered by n'guard Cyber Security
The check shows what is visible from the outside. The order below is based on where your domain lost the most points.
They are listed in the order in which they contribute the most to your findings, each with the trigger from the result. All you need to view is an email address from your domain.
Enter your company domain or a business email address. Only the domain is used, no account, no software.
n'guard queries public Infostealer databases, breach catalogs, ransomware leak site monitoring and certificate logs, and directly checks email security, TLS, headers and open services.
Exposure score, classification and all findings appear immediately on the page. You activate the technical details and the three prioritized measures with an email address for your domain, and the result comes as an email at the same time.
Credentials for company systems stolen by malware and traded underground, including session cookies that can bypass MFA.
Documented data leaks in which data from this domain was leaked, with the date and type of data affected.
Matched against ongoing monitoring of the publication sites of active ransomware groups.
SPF and DMARC decide whether to reject fake senders, DKIM provides the signature. MTA-STS and DNSSEC secure transport and name resolution.
Certificate expiry, outdated TLS versions, HTTPS redirects, security headers and visible software versions.
Spot check of RDP, SMB, Telnet, VNC, FTP and common database ports on the main address. These are exactly the services ransomware most often uses to get in.
All subdomains that appear in public certificate logs, indicating testing, admin, and remote access systems. In addition, the reputation of the domain on the Spamhaus block list.
The n'guard Dark Web & Exposure Check is a free tool for Swiss companies that compiles what attackers can already know about a company domain. It combines two perspectives: the underground perspective (compromised credentials from infostealer infections, known data breaches, mentions on ransomware leak sites) with the outside perspective (email security, encryption, open services, visible systems).
Unlike verification services for private individuals, it is not about individual email addresses, but about the company as a whole. The result is an exposure score from 0 to 100, findings in seven areas of severity and three prioritized measures. The check is aimed at management, IT managers and security officers of SMEs who need an initial, fact-based assessment before deciding on penetration tests or ongoing monitoring.
All checks run on the server side at n'guard. Only counts and severity levels are shown, not passwords or personal data from leaks. Score and findings are visible without providing data; You can activate the technical details and measures using an email address for the checked domain and receive the result as an email at the same time.
The check uses only publicly available sources and shows what is visible from outside. It replaces neither a penetration test nor continuous monitoring of your systems, and says nothing about your internal network, endpoints or cloud configuration. A high score means “no publicly visible findings”, not “safe”.
Current threat situation in Switzerland: BACS reports per week, top categories and ransomware tracker.
See the Swiss situationAuthorized attack simulation by specialists: external, internal, web applications and cloud.
See our pentest offern'guard’s Managed SOC continuously monitors your systems, your domain and the underground, and responds before a finding becomes an incident.