What LeakTrace covers for food distributors

We find each way in, prove it with evidence anyone can re-run, give the exact fix and re-check until it is closed.

An unlit External reading chip means: read with the assessment, not on a free reading.

• The checkWhat it readsExternal readingAssessmentThe watch
• Forged email in your nameThe records that tell inboxes whether to refuse email sent as you (DMARC, SPF and DKIM), read externallyExternal readingAssessmentRe-checked every hour on monitoring.
• Look-alike namesWeb addresses an attacker could register to look like yours, each checked: is it registered, is it set up for mailExternal readingAssessmentNew ones looked for every hour on monitoring.
• Fake sign-in addresses an attacker could registerThe sign-in words attackers use (sso, mfa, enroll, activate, passkey, helpdesk, 2fa, internal, register, enable and deploy) joined to your company's nameExternal readingAssessmentNew ones looked for every hour on monitoring.
• Firm addresses in breach dataBreach records for addresses at your own domain, read externally; nothing inside is touchedExternal readingAssessmentRe-read every day on monitoring.
• Your other domainsThe email records of every other domain your company owns, read externallyExternal readingAssessmentRe-checked every hour on monitoring.
• What AI assistants say about your firmWhat AI assistants answer about your company and whether a copy's address or phone is in the answerExternal reading: Read with the assessment, not on a free readingAssessmentAsked again every week on monitoring.A client who asks an AI assistant about your company trusts the answer it gives. Assistants build those answers from pages they crawl. A look-alike address an attacker could register can be built to be crawled: its robots file invites the AI crawlers in and its page claims your name. Attackers manipulate AI answers to send your paying and enquiring clients to their own look-alike page, web address, sign-in page, phone number or email. In 2025, asked for the sign-in pages of 50 brands, an AI assistant gave addresses the brand did not control one time in three. Netcraft research, read on 4 November 2026 The check is built to ask six assistants: Claude, ChatGPT search, Gemini, Perplexity, Grok and Copilot, through Bing. Monitoring asks again every week and tells you when an impostor's phone or address is in an answer.

Each fix comes as exact steps, in order, with the check that proves it is done. We re-check it externally when you mark it done, every day through your first month of monitoring and every night after that until our re-check confirms it closed. Where a finding cannot be confirmed externally, your assessment says so on that finding and records your confirmation.

We give you the fix for each finding and re-check externally until it is closed. The one change we can make ourselves is to your email records and only when you approve each step, where your DNS host allows it.

The watch re-reads your email settings, look-alike domains and new host names every hour. It alerts you within the hour when one changes. Everything else is re-checked every day, with the fix for anything new.

The assessment includes your first month of monitoring: the watch starts the day the assessment is released and nothing renews on its own.

Where an attack uses a look-alike address an attacker registered from your name, we see it first.

Where an attack uses a look-alike address an attacker registered from your name, the first sign is the registration. Under the watch, LeakTrace reads the look-alike addresses an attacker could register from your name every hour and the day's public list of new registrations each night.

Cases in your line of work

This summarises the public text; it is not legal advice.

The external questions cyber insurance applications commonly ask, each with its evidence. Each row is what anyone can see of your firm externally, with the proof under it. Questions about what happens inside your firm are marked "Not visible externally": those are answered from inside your firm. You and your broker answer the application; the insurer makes its own decision.

• Remote access allowed
• VPN login pages
• Firewalls
• DMARC
• Websites and domains