Skip to content

Free trial · 14 days

See what is already exposed about your company. Today, not after a sales call.

Sign up with your work email and we open a console scoped to your own domain. Run a dark web sweep, scan an asset for vulnerabilities and put an agent on a laptop. Real findings from your real environment, capped so it is a look and not a production service.

Start the free trialSee what it costs after

No credit card. No sales call to get in. 14 days, then it closes on its own.

How it starts

Four steps. You fill in two fields and click one link; we do the rest.

1

Step 1

Work email and company

Two fields. No credit card, no phone number, no scheduling link.

Under a minute
2

Step 2

Confirm the domain is yours

We email the address you signed up with. One click. Nothing is scanned before that click, because the domain on your email is the domain we would be looking at.

One click
3

Step 3

Your console opens, already scoped

Your own tenant, your domain and its subdomains, with the trial limits in place from the first second. The first dark web sweep runs while you are still on the page.

Minutes to first findings
4

Day 15

It closes by itself

Nothing to cancel and nothing to remember. If you want to keep going, everything the trial held back is already there waiting.

No auto-charge

What is in it

Three modules, each one real and each one capped.

Everything below runs against your environment, not a demo dataset. Nothing is simulated, which is also why the limits exist.

Dark web monitoring

What is already out there with your domain on it: breached credentials, stealer-log hits, paste and forum mentions.

You get

  • Your own domain and its subdomains, including the domain on your login email
  • The real totals on every list, so you can see the size of what you have
  • Overall exposure metrics and the credential breakdown in full

Capped

  • The first 5 records of each list. The rest are found and stored, just not shown.
  • Addresses masked before the @ (••••@yourcompany.com), sources cut back to the site name
  • Dark web links and post text removed. No password lookups, no raw stealer logs.

Vulnerability scanning

What an attacker sees from outside on one asset you choose: open services, outdated software, missing hardening.

You get

  • A full scan of one asset, with the findings ranked the way a paying account sees them
  • The remediation detail on each finding, not just the count

Capped

  • One asset, chosen by you and fixed for the trial
  • 3 scans a day, so it is a look at your perimeter and not a scanning service

Protect

The 24/7 AI SOC on a real endpoint: detection, containment and what a named engineer would have seen.

You get

  • Up to 5 agents onboarded, on machines you actually use
  • Live detections and the containment actions the agent would take

Capped

  • Enough agents to judge it, not enough to run on
  • Human analyst escalation is part of the paid tiers, not the trial

The edges

Where it stops, and what happens after.

What the trial will not do

These come back as an upgrade prompt, not an error. Everything behind them has already been found and saved against your account.

  • Revealing a credential in full, or looking up a password
  • Unlocking a record, exporting a list, or downloading the provider’s own PDF
  • Reading a raw stealer log or the full text of a dark web post
  • Searching for anything outside your own domains

Scans run during the trial count toward the same monthly quota a paid account has.

Day 15

  • Access closes on its own. There is nothing to cancel and no card to take off a file.
  • Your findings are not deleted. Everything the trial held back was collected and stored the whole time.
  • If you subscribe, the same account opens up in place: full records, unmasked addresses, exports and the dark web detail. No second setup, no re-scan.
  • If you do not, the console locks. It does not quietly turn into a free account with more access than the trial had.

Pricing is published: see what it costs before you start, not after.

Start

Two fields, and the console is yours.

We confirm the domain by email before anything is scanned. That is the only step between here and your first findings.

Questions

What people ask before starting

Do I need a credit card to start the 14-day trial?
No. There is no card, no invoice and no auto-renewal. The trial closes on its own and you are never charged for it.
Why do you insist on a work email?
Because the domain on your email is the domain the trial is allowed to scan. A personal mailbox has nothing for the product to look at, and an address at a domain you do not own would point our scanning at someone else. We also email that address to confirm it is yours before the first scan runs.
What can the trial actually scan?
Your organisation’s domain and the domain on your login email, plus subdomains of either. Anything outside that comes back as an upgrade prompt, for the same reason we confirm the address in the first place.
How much of the findings do I see?
Every list shows the first 5 records and the real total, so you always know how much is being held back. Overall metrics and the credential breakdown are complete. Addresses are masked before the @, leak sources are cut back to the site name, and dark web links and post text are removed.
Is my data mixed in with other companies on trial?
No. Each trial gets its own tenant, scoped to its own domains, expiring on its own clock. It is the same isolation a paying account has.
What happens on day 15?
Access closes. Nothing is deleted, nothing is charged, and nothing quietly turns into a free account with more access than the trial had. If you subscribe, the same account opens up in place, including everything the trial held back, with no second setup and no re-scan.
Can I talk to someone instead?
Yes, but you do not have to, and nobody has to talk to you before you get in. Pricing is published and the trial is self-serve. If you want the 30-minute scoping call, it is on the pricing page.