Dark Web Monitoring
Know when your staff's passwords are for sale
Stolen logins are traded on the dark web every day. We watch for credentials tied to your business and tell you when they appear, so the password gets changed before someone uses it.
Book Your Free Security Gap CheckWhen a website your staff have signed up to is breached, their email address and password often end up for sale. If they reused that password for Microsoft 365, attackers now have a working login to your business. Credential theft is one of the most common ways Australian businesses are breached.
DJC's dark web monitoring uses Dark Web ID, from Kaseya company ID Agent, to watch breach dumps, criminal marketplaces and paste sites for credentials linked to your company's domains. When a match turns up, we tell you who is affected and what was exposed, and make sure the password is changed.
Not sure whether you have a problem? Our free dark web scan shows what is already out there for your domain, with the results walked through by one of our engineers.
What dark web monitoring includes
Continuous monitoring
Your company domains checked against breach data, criminal marketplaces and paste sites, all the time.
Alerts with context
Who is affected, what was exposed and where it came from, so you know how urgent it is.
Action, not just a notification
We make sure the affected password is reset and check the account for signs it has already been used.
Covers old breaches too
The first scan surfaces credentials exposed in past breaches, not just new ones, so you start with a clean slate.
If IT is your responsibility
An owner, not an account manager
You deal with Daniel or Julian Church directly. We keep the client list deliberately short so the people who answer already know your environment.
Numbers you can defend
Every engagement starts with a costed IT roadmap: what technology should cost this year and next, in business terms you can take to a board or a budget meeting.
See what managed IT typically costsWorking alongside internal IT
If you already have an IT manager or a small team, we are not here to replace them. Co-managed IT adds tooling, escalation and after-hours cover around them.
How co-managed IT worksWhy DJC
- Monitoring that leads somewhere. An alert nobody acts on is useless. We handle the password reset and check the account for misuse.
- Paired with identity protection. Our Huntress ITDR watches Microsoft 365 sign-ins, so if a leaked password is used before it is changed, the login is caught and shut down.
- Certified to the standard we advise on. DJC holds SMB1001 Diamond, ISO 27001 and ISO 9001 certification.
Included in every managed cyber tier
Take it on its own, or get it included in any of our managed cyber tiers, together with the rest of the security stack and a quarterly review with a person.
Quick answers
What is dark web monitoring?
Dark web monitoring checks breach dumps, criminal marketplaces and other underground sources for credentials tied to your business, usually your staff email addresses and passwords. When a match appears, you are alerted so the password can be changed before attackers use it.
Where do stolen credentials come from?
Mostly from breaches of other websites your staff have signed up to with their work email, and from phishing attacks. The danger is password reuse: a password leaked from an unrelated site may also be the one used for Microsoft 365.
Can I see what is already out there for my business?
Yes. Request a free dark web scan and we will send you a report for your company domain within one business day, then walk you through it.
Is dark web monitoring included in DJC's managed cyber security?
Yes. It is included in every managed cyber security tier, and can also be taken on its own.