Dark Web Monitoring

Get an alert when your team's email addresses turn up in a new data breach, checked daily against Have I Been Pwned with your own key.

What it watches

Stolen account data gets sold and swapped on the dark web and hacker forums. Have I Been Pwned (HIBP) collects these leaks and lets you look an address up. FrontierStack asks it about the addresses you choose, once a day, and raises an alert when one appears in a breach you haven't reviewed yet.

Set it up

1. Buy an API key at haveibeenpwned.com/API/Key. The smallest plan is enough for a team.
2. Open Security ▸ Credential Leaks, paste the key into HIBP API key and press Save Key. It is kept in the Keychain.
3. Add the email addresses or usernames to watch, then press Check Now for a first result. After that the check runs every day by itself.

When an alert comes

The alert names the breach and says whether passwords were in it. If they were, change the password used on that site and anywhere the same one was used, and turn on two-step sign-in. If not, expect phishing that knows where the address has accounts. Then press Mark Reviewed so the alert only comes back for a new breach. Alerts go wherever your other FrontierStack alerts go.

What is sent

Each address goes only to haveibeenpwned.com, over HTTPS, with your key. Add only addresses you have the right to look up. KeyRotate's Guard has the same watch for the addresses you add there.

For a free one-off check of an email address or a password, use the website score page. A password checked there never leaves your browser.

This is the web edition of FrontierStack's in-app Help. Open the same topic inside the app for live, clickable controls.

More help topics

• Getting started
• Hosting websites
• Databases & credentials
• Fleet & Remote Tools
• Security & firewall
• SIEM & security data
• Alerts & remote notifications
• Automation, Shortcuts & Siri
• iPhone & iPad app
• The AI Administrator
• Agent platforms
• Presets & the sidebar
• Installing & connecting services