How do I check if my email is on the dark web?

Shield reports dark web exposure drawn from breach records that carry plaintext passwords and shows which of your addresses appear in them. It reads leaked credential data rather than crawling marketplaces, so what you see is evidence from a real breach record.

What happens after a data breach check finds my email?

Shield opens a breach alert with the source, the date, the severity and exactly which data types were exposed. It then builds a checklist for that breach, with step-by-step wizards for around 40 major platforms and a ready-to-send GDPR data request to the company that leaked it.

Is Shield identity theft protection?

Shield is identity exposure monitoring and families get Identity Theft Watch, a surface for the exposure types that signal identity theft risk. It tells you what leaked and walks you through closing it. It does not restore an identity or insure a loss on your behalf.

Can I monitor my child's exposure without seeing their accounts?

Add the child as a family member with an age bracket and Shield surfaces which platforms hold accounts in their name without showing you the addresses themselves. Per-member privacy levels let you set full detail, summary only or hidden. Adults in the household consent for themselves.

What if an employee never accepts the monitoring request?

They are not monitored. Enrolment starts only once that person accepts, so a pending request stays pending and nothing is watched in the meantime. Admins can re-send it and consent status is visible and auditable per employee, so you always know who is actually covered.

Privacy-First Email Check & Data Breach Monitoring

Know the moment your email is exposed. Shield monitors your addresses, passwords and accounts against new breach data, then walks you through exactly what to fix.

Book a demo Read the overview

What you get from day one

Shield is ready to help you assess exposure, take the next step, and keep the right people informed

40+

Platforms

with guided wizards

4

Frameworks scored

GDPR, CCPA, HIPAA, PCI-DSS

8+

Alert channels

Including signed webhooks

Know What’s Exposed. Act on What Matters.

Your data can be exposed long before you know it, which is why effective data leak monitoring & theft protection matters.

Your exposure is bigger than you can see.

Old accounts, forgotten logins and employee identities can stay tied to leaked credentials for years.

Knowing about the breach is only part of the response.

You still need to know which account, password or action needs attention first.

Delayed discovery gives exposure more time to spread.

Breached credentials can continue circulating long after the original incident.

Protecting people should not mean watching them.

For businesses and families, traditional monitoring can create a privacy trade-off that stops protection before it starts.

One platform, purpose-built for every level of protection

Shield gives each user the right level of visibility, control and privacy, whether you’re protecting yourself, your family or your organisation.

Individuals

Personal Exposure Monitoring

Watch every address you own and fix what leaks.

Families

Privacy-Aware Family Monitoring

Household view, with identity theft protection signals.

Businesses & Teams

Workforce Identity Exposure Monitoring

Domain-wide exposure, scoped to each department.

Banks & NBFCs

Auditable Workforce Monitoring

Consent records, audit logs and compliance scoring.

Data leak & breach monitoring, from alert to closed account

Shield gives you one place to see and act on identity exposure. With data breach monitoring, detection is the start of the job rather than the end of it.

Continuous matching

New breach records are matched against every monitored address as they arrive.

Ghost account discovery

Shield recognizes the services that email you and lists the accounts you dropped.

Guided remediation

Per-breach checklists, with step-by-step wizards for around 40 major platforms.

Password intelligence

Check whether a password is exposed, reused across accounts or simply weak.

Alerts where you work

Email, in-app, Slack, Telegram, Asana or a signed webhook, chosen per person.

Compliance posture

GDPR, CCPA, HIPAA and PCI-DSS, each scored out of 100 with its own findings.

You will know what leaked and exactly what to do

Every alert Shield opens tells you what was exposed, what it means for you and which account to fix first. You are never left holding a warning with nowhere to take it.

Alert

You get the breach, its source, its date, its severity and exactly what was exposed.

Explain

You see which account is affected, what it puts at risk and which one to deal with first.

Fix

You follow a guided wizard for around 40 major platforms, then send a GDPR request to the leaker.

From first scan to first fix

Setup differs by panel. Individuals add their own addresses, family admins invite members with consent, businesses verify a domain and onboard by upload or SCIM.

Add your addresses

Add and verify each address by one-time code, then label it.

Line drawing of nested ovals for adding and verifying addresses

Get your first scan

Results arrive inside the onboarding flow, not days after it.

Line drawing of a target for the first exposure scan

Choose your channels

Route alerts to email, Slack, Telegram, Asana or a webhook.

Line drawing of a funnel for routing alert channels

Get the breach alert

Shield tells you the moment an enrolled account appears in a breach.

Line drawing of a radial burst for a breach alert

Why teams choose Shield

Built to find exposure, protect privacy and guide the fix

Shield goes beyond breach detection with privacy-preserving monitoring, consent-based controls and guided remediation that helps you act on what it finds.

Your email is never stored in the clear

Every monitored address is SHA-256 hashed, with the hash itself AES-256 encrypted at rest, so Shield can monitor exposure without keeping readable email addresses.

Your address stays in your browser

Shield’s public breach check uses k-anonymity, sending only a fragment of a hash for matching. Your full email address never leaves your browser.

You get a clear path to remediation

Every confirmed breach comes with a tailored checklist and guided steps for around 40 major platforms, so you know what to fix and in what order.

Monitoring starts with consent

No one is silently added. Every monitoring request must be accepted by that person, is logged and can be revoked at any time.

Admins see the risk, not personal data

Addresses are masked by default and employees can keep personal identities completely private from company admins.

Compliance you can show, not just claim

Shield scores your compliance posture across GDPR, CCPA, HIPAA and PCI-DSS, each rated out of 100 with the findings behind the score and a status of compliant, partial or at risk.

Hashed and encrypted storage

No readable address exists inside Shield. SHA-256 hashed, then AES-256 encrypted.

Consent and audit records

Every grant, refusal and withdrawal is stamped with a timestamp and an IP address.

Evidence an auditor accepts

Consent records, activity logs, login history and automated quarterly PDF reports.

Questions buyers ask before a demo

Answers for individuals, family admins and security teams looking at Shield.

Add the address to Shield and the first scan runs inside onboarding. The public check uses a k-anonymity model, so your browser sends a fragment of a hash and never the address itself. Shield then keeps matching that address against new breach records as they arrive.

Security professional reviewing exposure alerts

Bring the questions your privacy team will ask

We will walk through the consent trail, the masking defaults and the department scoping.

Book a demo