We watch what anyone on the internet can see about your firm, tell you first when something opens, prove every finding with a check you can run, and help you close it. We start where an attacker starts: outside. No software to install, no access to give, no meeting first.
Insurance renewal forms ask about email authentication, multi-factor sign-in, backups and patching. Then there is wire fraud: someone can send email as your firm. Then your regulator or professional body. Most break-ins start with something anyone could see.
We watch your firm the way an attacker’s tools would: email that can be forged in your name, staff addresses in monitored breach databases, look-alike domains, and how those combine into a way in.
Reported losses to business email fraud reached $3,046,598,558 in 2025 in the United States (FBI IC3 2025 Internet Crime Report), and Canadians reported $67,900,000 CAD lost to spear phishing in 2025 (Canadian Anti-Fraud Centre). Every week we log how firms like yours were reached, and the finding that would have shown it first: this week’s incidents.
United States: In 2025 the FBI received more than 22,000 complaints reporting AI-related information, with adjusted losses over $893 million. FBI IC3, 2025 Internet Crime Report. Canada: The Canadian Centre for Cyber Security says AI technologies are “almost certainly lowering the barriers to entry” for malicious cyber activity. National Cyber Threat Assessment 2025-2026.
Attackers use AI to find openings. We use it to find yours first, and a person checks every finding before you see it.
Reported losses to business email fraud in one year. 24,768 complaints, 2025.
Source: FBI IC3 2025 Internet Crime Report, business email compromise, 2025. Reported losses only.
Reported losses to spear phishing in Canada in one year. 813 reports, 2025, in CAD.
Source: Canadian Anti-Fraud Centre, spear phishing, 2025. Reported losses only.
Law and accounting firms, clinics, advisers, brokers and brokerages. Your outside reading shows four openings and a check you can run yourself.
A free check against monitored breach databases, with what each breach exposed and what to do first.
Every engagement uses the same outside reading and the same review by a person.
Four openings a stranger could see today, and one check you can run yourself.
Check my firm→ The assessmentThe full outside watch on your firm, the proof for every finding, and the fix. A person approves every one, within 72 hours.
See what you get→ After the assessmentWe re-check the same sources daily and tell you when something new appears.
How monitoring works→ For advisersIT providers, accountants and associations offer the assessment under their own name.
Become a partner→Anyone can check: look up your DMARC record with a free DNS tool.
Anyone can check: search an address on a public breach-notification service.
Anyone can check: type your domain with one letter changed.
Anyone can check: read the response headers in your browser.
Anyone can check: search the public business registry, and open your site’s page source.
Anyone can check: ask one who your firm is and what it does.
Which addresses, which breach, what it exposed, and who should reset first.
The settings that let someone send as you.
Registered names one letter off yours.
Versions your site advertises to anyone.
How AI tools describe your firm.
Illustrative reading of a firm that does not exist. Your own outside reading shows your own domain.
For the person who signs off: what is open, what it could cost, and who does what this week.
For your IT provider: what we saw, where we saw it, and the change that closes it.
Each finding mapped to the rule you answer to, and the questions insurers ask at renewal.
A dated, signed assessment record you can hand to an insurer, a client or a regulator, and that anyone can verify.
Safeguard consumer data. Failures are treated as unfair or deceptive practices.
Tax preparers, mortgage brokers and other financial institutions: multi-factor sign-in, and notice to the FTC within 30 days of a breach of 500 or more people.
Covered clinics: protect patient health information and tell patients within 60 days of discovery.
Notify affected people when personal information is exposed. Timing varies by state.
Anyone holding a Massachusetts resident's data: review the written security program every year.
Safeguards appropriate to the sensitivity of the information. Report a breach that creates a real risk of significant harm, and keep a record of every breach for 24 months.
Prompt notice to the Commissioner where harm is a real risk.
Reasonable security arrangements against unauthorized access.
Ontario health custodians: protect patient information and report breaches to the Information and Privacy Commissioner.
Only the rules the Rules and Insurance Briefing maps. A rule is listed only where its applicability can be stated honestly.
Your evidence pack: an owner summary, the technical evidence for your IT provider, a rules and insurance briefing, and a signed assessment record.
The verdict, the fixes in order and what each one closes, written for the owner. Who does each fix, how long it takes, and the check that proves it is done.
Every finding with its evidence, its severity and the check that confirms it is closed. Step-by-step fixes for most findings. We perform none of them.
Each finding mapped to the rule that applies in your province or state and sector, the regulator who can ask, the insurer renewal questions a real check answers, and what to keep on file.
What was reviewed, when, what was found and what was closed, signed and dated, issued by LeakTrace. Anyone you hand it to can verify it at getleaktrace.com/verify.
Tell us your firm and domain. It takes a minute.
From outside, public sources only. Your outside reading arrives, with proof you can check.
The reading shows what the assessment would cover. No obligation.
Inside 72 hours of confirmation, approved by a person first.
A signed, dated record answers the security questions larger clients now ask.
The rules briefing matches the questions on a cyber insurance renewal.
A clean record helps when a partner joins, leaves or buys in.
You know which openings exist, in what order to close them, and who does it.
An Iranian national linked to the Mabna Institute was extradited to the US for participating in massive cyber intrusions targeting hundreds of organizations. The campaign affected 144 US universities, dozens of companies, and federal...
I am the… Pick one and the cards below change.
What is open, what it could cost you, the three fixes in order, and who does each.
See what an owner gets → 72hConfirm, and the assessment arrives inside 72 hours, reviewed by a person.
How it works →Firm, domain, your email. A person replies within one business day.
Check their firm → FwdThe reading is written to be sent on to the owner and the IT provider.
See a reading →So nothing in a finding is there to create work for us. Your existing IT provider does the fixes, from the steps we give them.
Your IT provider keeps your systems running and does the fixes. We give them an independent list to act on, with the check that proves each fix. We do none of the fixes ourselves, so nothing we find is there to create work for us.
A penetration test tries to break in and needs access. We read only what is already public, from outside, and log into nothing.
Your insurer's scan feeds your premium and eligibility. We show you the same outside view first, in plain words, so you walk into renewal knowing the answers.
A free outside reading, sent only to the address you give. No access to your systems.
Your firm's own domain, nothing illustrative.
What happens if you go ahead. More at getleaktrace.com/see-it-first/.
One email when a briefing is published. Unsubscribe in one click. Privacy
We would like to use Google Analytics to count visits and see which pages are read. It stays off unless you accept. Cookie policy