For accounting, law and professional services firms on Microsoft 365
Find out which of your firm's accounts criminals already have. Close them, and prove it.
Vig5 matches breaches and infostealer logs against the real state of your Microsoft 365 accounts, tells you what to close first and verifies it with a new scan. Every month you get the evidence for your partners, your clients and your insurer.
Results in seconds · no account needed · we do not store your domain
Monitoring active · last check 2 h ago · 3 new findings
- Critical
Credential stolen by malware · active account without MFA
c.rojas@firm.example · 3 d ago
- High
Former employee whose account is still active
m.soto@firm.example · 2026 breach
- Medium
DMARC at p=none: your email can be spoofed
firm.example · DNS
The problem
Your email is the way into your clients' data.
Attackers don't need to “hack” anymore: they sign in with a valid account someone stole earlier. In a firm without a security team, nobody notices until it's too late.
Credentials stolen by malware
One infected personal laptop leaks passwords and sessions for the firm's email. They are sold within days.
Spoofed email
Without SPF and DMARC, anyone can email your clients as your firm, for example to change payment details.
Accounts nobody closed
Former staff with active accounts, or accounts without MFA: the easiest way in.
How it works
Detect, fix and prove it. No security team needed.
The first results arrive in minutes. After that Vig5 keeps watch on its own and only calls you when there is something to do.
- 01
Detect
Breaches and infostealer logs for your domains, plus the external surface of your email and domains. Only with your authorization.
- 02
Prioritize
Each exposure is matched against Microsoft 365: is the account still active? does it have MFA? Deterministic rules, not a black box.
- 03
Fix
What happened, why it matters and what to do, in plain language and with the exact step when it applies.
- 04
Verify
A finding is Verified only when a new scan confirms the fix. A click is not enough.
- 05
Prove
A monthly report: what appeared, what was closed and how fast, with the history of each case.
What it checks
What an attacker would use, checked every 6 hours.
Passive monitoring: no agents, nothing to install and no port scanning.
Exposed identities
Which of our accounts are in breaches or infostealer logs?
A firm mailbox in this week's infostealer log.
Identity status
Is that account still active? Does it have MFA?
Active account without MFA in Microsoft 365.
Email and domains
Can someone spoof our email or take over a subdomain?
Permissive DMARC, exposed subdomain, expiring certificate, no DNSSEC.
Lookalike domains
Did someone register a domain that imitates ours?
firm-payments.example with a certificate issued 3 days ago.
Remediation
What do I do now?
The exact DNS record to copy and paste, or the step in Microsoft 365.
Evidence, not promises
“We fixed it”, with technical proof.
More and more people ask you to prove you protect data. Vig5 keeps that evidence ready.
Partners and management
A monthly report in business language: real risks that went down, not a list of alerts.
Corporate clients
Backed answers for vendor security questionnaires.
Cyber insurer
Evidence of MFA and of compromised accounts closed in time.
Data protection laws
A detection and remediation history that supports your security duties. It does not replace legal advice.
What about free tools?
Free alerts already exist. Vig5 tells you what to do and proves it.
Microsoft Entra ID can flag leaked credentials for your users, and Have I Been Pwned lets you search your domain. They are good starting points. What a firm without a security team also needs is:
Priority with context
We match each exposure with the real state of the account (active, with or without MFA) so you know what to close first.
Exact steps
What to do in Microsoft 365 or your DNS, in plain language and for non-specialists.
Verification
A case is closed only when a new scan confirms the fix.
Reporting and support
Monthly evidence for partners, clients and insurers, with support in English and Spanish.
Who it is for
Firms of 20 to 150 people that hold their clients' data.
Accounting and audit firms, law firms, brokers and other professional services firms on Microsoft 365, in any country.
Decides
Partner or managing director
Knows whether there is a real problem, and has proof that it was solved.
Uses
IT lead
A short, prioritized list with the exact steps. No noise.
Partner
IT provider or MSP
Offers recurring security to its clients with its own margin and a report under its brand.
Reference pricing · USD / month
Start with a free pilot. Continue with monitoring.
Priced by monitored identities, not by findings: having more risks never costs more. Prices are being validated with our first customers.
Pilot firms program
We are looking for 5 firms of 20 to 150 people on Microsoft 365. We run the full diagnostic at no cost in exchange for your feedback.
You get
- Domain and identity diagnostic, with a report
- The 3 to 5 actions that reduce risk the most
- Help to fix and verify
We ask
- Two 30-minute meetings: at the start and at the end
- Your honest opinion on what works and what does not
Regular diagnostic price: USD 349.
Business
USD 209 / month
up to 150 identities · In Chile: 5 UF + VAT
- Exposed identities plus account and MFA status in Microsoft 365
- Email and domains
- Verification by re-scan
- Report for partners, clients and insurers
Pro
USD 379 / month
up to 400 identities · In Chile: 9 UF + VAT
- Everything in Business
- Multiple domains
- Exports
- Audit log
MSP
USD 125 / month per company
wholesale price, from 10 companies · In Chile: 3 UF + VAT per company
- ~40% below Business: you set the final price
- Everything in Business for each client
- Report under your brand
- Multi-company console (in development)
Security and privacy
We watch your exposure without becoming a risk ourselves.
- Passive, authorized monitoring only: you verify the domain is yours before we check it. No port scanning.
- We never store passwords, cookies or leaked databases: only the account, the source, the date and the exposure type.
- Read-only Microsoft 365 permission: we do not read emails or files.
- Mandatory MFA, data separated per company and an append-only audit log. Support cannot see your data without your temporary permission.
Does someone else hold your firm's accounts?
Check your domain for free in seconds and, if you want, request the full diagnostic.