Vig5 · Exposure detected, fixed and verified
Detect your firm's exposure, prioritize what to fix, and prove you fixed it.
The problem
Employee passwords and sessions show up in breaches and infostealer logs. An attacker signs in with a valid account, often one belonging to someone who left or who has no registered MFA, and from the mailbox reaches your clients' data. Most firms find out late, or never.
What you get
- Accounts on your domains found in breaches and infostealer logs, matched against Microsoft 365: still active? MFA registered? (when active for your firm)
- A review of your email and domains: spoofing (SPF/DMARC), exposed subdomains, certificates and lookalike domains.
- What to do, in order and in plain language, with the exact step when it applies.
- Alerts when something critical appears, and a monthly report for partners or management.
What sets us apart
A finding is closed only when a new scan proves it. You don't get a list of alerts but evidence that risk went down, useful with corporate clients, insurers and data protection laws.
What we don't do
- We never ask for or store passwords, cookies or leaked files.
- No pentesting or port scanning: everything is passive.
- We do not read Microsoft 365 emails or files.
- We only check domains you prove are yours.
How to start
- Exposure diagnostic: USD 349, price under validation. 1 company, 1 domain, 3 to 5 priority actions, one verification re-scan and a final report.
- Business monitoring, up to 150 identities: USD 209 / month.
- IT providers and MSPs: wholesale price from 10 companies (USD 125 per company) and a report under your brand.