Compliance
Dark-web exposure scans that satisfy your auditors.
CIS, CISA, NIST, HIPAA — every major compliance framework expects regular monitoring for compromised and exposed credentials. darkweb-scanner runs automated scans against your domain, from $99 per scan, with an evidence-ready PDF report every time.
Why compliance-grade exposure scanning matters
Frameworks don't prescribe a specific tool — they require evidence that you monitor for, detect, and remediate exposed credentials. An automated scan with a dated report satisfies that control element without standing up your own OSINT pipeline.
- Cover the frameworks that matter
- CIS Controls 5 & 6, CISA credential-hardening guidance, NIST SP 800-63B, HIPAA Security Rule §164.308 — all expect continuous or regular monitoring for compromised and exposed credentials. One scan satisfies them all across infostealer logs, breach data, and your external attack surface.
- Evidence-ready reports
- Every scan produces a dated, severity-ranked PDF report you can hand to an auditor or include in your compliance evidence package. Reports include the exposed records, their breach source and date, and remediation guidance — no reformatting.
- Hosted — nothing to deploy
- No agents to install, no network access required. Scans query external, already-leaked data only. Add your domain, verify control with a one-time DNS TXT record, and get your first report in minutes.
- Continuous or on-demand
- Schedule recurring scans for continuous monitoring coverage, or run ad-hoc scans whenever credentials or your attack surface change, so coverage never lapses.
- Credits never expire
- Pay $99 per scan and use credits across quarters and clients without losing value. No annual subscription lock-in — only the scans you actually run.
Framework-by-framework coverage
Each framework maps to the same core activity — scan for exposed credentials, collect findings, produce evidence.
- CIS ControlsControls 5 & 6
- Account and access management — maintain an inventory of accounts and monitor for credentials that have been compromised or exposed. Our scans surface exactly which of your accounts appear in infostealer logs and breach data.
- CISACredential Hardening
- CISA guidance directs organizations to monitor for exposed credentials and promptly reset any that appear in breach or dark-web data. Our scans pull live infostealer and breach intelligence tied to your domain so you know what to reset.
- NIST SP 800-63BMemorized Secret Verifiers
- Maintain a list of compromised passwords, prevent their use, and require resets when exposure is detected. Our scans produce the evidence needed to show you monitor for credential exposure across breach corpora and stealer logs.
- HIPAA Security Rule§164.308
- Security management safeguards to guard against, detect, and report malicious software and unauthorized access to ePHI. Our scans detect stealer-log infections and exposed credentials that signal active or attempted compromise.
Sources & tools we run
Every scan runs all of our intelligence sources and OSINT tools in one pass.
What the frameworks require
“Establish and maintain an inventory of accounts, and monitor for accounts and credentials that have been compromised or exposed.”
“Organizations should monitor for the exposure of credentials and promptly reset any that appear in breach or dark-web data.”
“Maintain a list of compromised passwords and prevent their use; monitor for credential exposure and require resets when exposure is detected.”
“Covered entities must implement procedures to guard against, detect, and report malicious software and unauthorized access to ePHI.”
Compliance FAQ
- Does darkweb-scanner help meet CIS Controls 5 & 6?
- Yes. Controls 5 & 6 require you to inventory accounts and monitor for compromised or exposed credentials. Our scans sweep infostealer logs (Hudson Rock Cavalier), breach corpora, and combolists for anything tied to your domain, and the report lists every exposed account with its source and date.
- Can I use darkweb-scanner for CISA credential-hardening guidance?
- Yes. CISA directs organizations to monitor for exposed credentials and reset any that appear in breach or dark-web data. Our scans pull live infostealer and breach intelligence tied to your domain — directly matching that guidance.
- Which NIST requirement does dark-web scanning satisfy?
- Primarily NIST SP 800-63B, which calls for maintaining a list of compromised passwords and requiring resets when exposure is detected. Our scans produce the evidence that you monitor for credential exposure across breach and stealer-log sources.
- Is there a white-label option for client reports?
- Yes. The $50 one-time white-label add-on produces PDF reports with your own logo and organization name — no darkweb-scanner branding. This is useful when submitting exposure evidence under your company name.
Run your first compliance scan
Run a comprehensive dark-web exposure scan against your domain. Evidence-ready PDF report included. From $99.