Most people use the same password for multiple accounts.
Cyber criminals collect data leaks and crack leaked password information.
Found passwords are used to login on other services and takeover your accounts.
Compromised accounts are used to steal money, information and to start ransomware attacks.

We collect data leaks and stealer logs.
We extract and crack passwords.
You can keep your employee and customer accounts safe.

Scattered Secrets is a true password breach notification service. Well-known services like Have I Been Pwnd do not process passwords, resulting in many false alarms. In most cases an alert just means that your email address is in a SPAM list and no passwords were stolen. Most cyber threat intelligence companies do not actively crack passwords: they show raw data only. We are best in class in cracking passwords. This allows us to generate unique quality content and to eliminate false positives.

You can use our unique high quality data for protecting employee and customer accounts. For example, you can recover the plain text passwords using a web interface, or fully integrate password re-use checks using our API.

Scattered Secrets BV was founded in 2017 and is located in Amsterdam, The Netherlands (EU). We have got a Big Four background and many years of experience in information risk management, incident response and penetration testing.

Protect your customer or internal accounts with our unique Scattered Secrets BreachCheck API:
Fast and easy-to-implement.
No application code updates required.
No access to plain text passwords required.
Protect any kind of IAM system.
Protect all accounts, also if they're not frequently used.
Privacy friendly and GDPR proof.

So no new dependencies or cumbersome integration projects. You don't share sensitive information with us. And you can protect both standard systems like Active Directory and custom solutions.

Do you want to verify the real-life exposure of your accounts using a proof of concept? You can. Just compile a test dataset and we will provide you with clear and fact based risk metrics for your organization.

BreachCheck can also be used during incident response in case of an ongoing credential stuffing attack. We can outpace the attackers and provide you with a list of vulnerable accounts, so you can contain and eliminate the attack as soon as possible.

Pricing of our BreachCheck API is based on the number of accounts you would like to protect and environment specific characteristics. Are you interested in details? Or would you like to discuss options for custom integrations for your specific use-case? Please feel free to contact us.

Using smart strategies, hardware that excels in a specific job and billions of passwords of experience, we can help you to uncover leaked and other weak passwords used within your organization.

Password audits can be performed on a regular basis to keep your accounts safe. We support a wide variety of password hashing algoritms. Are you interested in details or would you like to discuss non-standard solutions? Please contact us.