Find out what attackers already have on you.
We point Overwatch at your domains, then send back what's already exposed, with sources.
Exposed credentials and compromised data
What's already circulating, and where.
Impersonation, executive exposure and merchant portfolio signals are part of the full Overwatch platform; the free assessment doesn't include them.
What we need from you: your domains and, if you issue cards, your BINs. Nothing from inside your network.
What you get back: a written analyst summary of what was confirmed, what wasn't, and what we'd do first, plus an optional 30-minute readout.
How long it takes: 5 business days from the point we have the list.
What happens to your list: it stays confidential and is deleted after 90 days.
What it costs: nothing, and there's no obligation to talk to sales afterward.
Sample reportSee a sample assessmentA redacted Intelligence Risk Report. 2 pages, PDF.
Free threat assessment FAQs
What does the free threat assessment include?
The free dark web threat assessment shows what attackers already have on your organization. Overwatch points its collection at your domains, then reports what it finds: exposed credentials and compromised data. Impersonation, executive exposure and merchant portfolio signals are part of the full Overwatch platform, not the free assessment. Every item comes with its sources.
What do you need from us?
Your domains and, if you issue cards, your BINs. Nothing from inside your network and no software to install.
How long does it take?
Results arrive 5 business days after Overwatch has your list. An analyst emails within one business day of your request to confirm scope.
Is the assessment really free?
Yes. There is no cost and no obligation to talk to sales afterward. You get a written analyst summary of what was confirmed, what was not and what to do first, plus an optional 30-minute readout.
What happens to the information we send?
It stays confidential. We delete the domains and BINs you submit 90 days after we receive them. We keep your name, work email and company so we can follow up, as described in our Privacy Policy, and you can ask us to delete those at any time through our contact form (choose Privacy).
Who can request an assessment?
Any organization can request one using a business email address. Overwatch reviews each request and confirms scope with the requester.