Dark Net exposure audit
The exposure audit evaluates a company’s attack surface and exposure to threats.
We identify for companies their sensitive information that is exchanged or accessible on the hidden internet. We investigate the Internet, the deep web, and the dark web, focusing specifically on tracing any evidence of malicious activity.
What we detect in cyberspace:
- Servers actually exposed on the Internet (fierce, recon-ng, shodan, etc.)
- Persons publicly affiliated with the company
- Domain squatting attempts
- Publicly disclosed corporate vulnerabilities
- Account credentials exposed in public data leaks (password dumps, breaches, etc.)
- Defamation, complaints, and public negative sentiment targeting the company
- Sensitive information on social media (hashtags, posts, etc.)
- Sensitive corporate documents indexed by search engines
- Sensitive information disclosed in job postings
- Sensitive information disclosed in internship reports
- Sensitive information archived in web time machines (Wayback Machine, etc.)
- Sensitive information circulating on the Dark Net
- Customer databases and contact information
- Proprietary industrial know-how
Our Deliverables
- Ad-hoc incident activity report
- Monthly activity report – Published every month independently of real-time alert notifications. It compiles metrics and an operational summary of the threat monitoring performed for the client over the past month: indexed sources, volume of processed alerts, false positives, general telemetry, and industry-wide observations not directly tied to the client's environment.
- Bi-annual analysis summary – Twice a year, the monthly report incorporates an in-depth retrospective analysis of the customer’s cyber surveillance, contextualizing the threat level and cyber activity within a chronological and industry-specific perspective.