Free Dark Web Scan Is Back

The free dark web scan is back

There have been a lot of breaches over the past quarter. Big platforms, suppliers and web services have all had data exposed, and every one of those breaches puts more email addresses and passwords into circulation.

So we have brought back our free dark web scan. Fill in the form below and see exactly what is out there about your business.

What is a dark web scan?

The dark web is the part of the internet that sits outside normal search engines. It is where stolen data gets bought, sold and shared. Email addresses, passwords, domains and IP addresses from breached websites end up there, often months before anyone notices.

A dark web scan, powered by our partner Breach Monitor, checks your business domains, IP addresses and email addresses against more than 3,400 dark web forums and breach sources. You get a report showing which of your accounts have turned up, where, and which passwords have been exposed.

Why it matters right now

The recent PHP exploits have put a lot of websites and web applications at risk. PHP runs a huge share of the web, including many of the sites, portals and online services your staff log into every day. If any of those services were compromised, the usernames and passwords stored on them may already be in the hands of attackers.

You might not hear about it from the provider for weeks, if at all. That is why checking this data yourself is now so important. If something did get breached, a scan is how you find out before someone uses it.

How it helps your business

Most people reuse passwords, or use small variations of the same one. Attackers know this. Once a password leaks from one site, automated tools try it against email, Microsoft 365, banking and anything else they can find. A breach on an unrelated website can quickly become a way into your business.

Spotting and closing those gaps before they are used is a core part of our managed IT support, alongside the wider protection in our cyber security solutions.

A scan shows you:

Which staff email addresses appear in breach data
The passwords that have been exposed alongside them
Whether your domains or IP addresses are being discussed or traded
Where the data came from, so you know which services were affected

Example Flotek dark web scan report powered by Breach Monitor, showing exposed credentials by date, email, masked password and breach source — Example report. View the full example report.

How to use your results

The report is only useful if you act on it. Once you have your results:

Tell the affected users. Let each person know which of their passwords has been found online.
Change those passwords everywhere. Not just on the site that was breached. Any account where that password, or a close variation of it, has been used needs updating, across every channel: email, Microsoft 365, CRM, banking, social media and anything else.
Turn on multi-factor authentication. MFA stops a leaked password on its own from being enough to get in.
Use a password manager. Unique passwords for every account mean one breach stays one breach.

If you are not sure what an alert means, read our guide: What Dark Web Searches Mean for You. Or just ask us. Our managed IT support team is here to help.

What is available

Free one-off scan. Free for a limited time. Claim it using the form below.

Ongoing monitoring. Data is leaked continuously, so a one-off scan only tells you where you stand today. Ongoing dark web monitoring starts from just £9 per month per domain, with reports daily, weekly or monthly.

When monitoring finds something, the alert goes three ways. The affected user is told directly, your internal IT contact is informed, and the Flotek security team is alerted too, so we can step in and help you act quickly.

Claim your free scan

Fill in your details below. We will verify your business, run the scan and send your report over, laid out like this example report. Existing Flotek partners can also run scans and set up monitoring directly in the Flotek portal.