In this illustration, an accounting firm in Canada asks LeakTrace for an assessment at its counsel’s suggestion. Nothing here happened to a real firm. It shows what an assessment of an accounting firm reads and the kinds of finding it could list.
What the assessment would read
Only what the firm shows the public internet: its mail records, its domain registration, certificate logs, its website and sign-in pages, monitored breach databases and names registered to look like its own. Nothing would be accessed, installed or tested inside the firm.
What an assessment like this could find
- Email that can be sent in the firm’s name
- Firm addresses listed in breach data
- Sign-in pages that answer a stranger
What the firm would do next
Each finding would come with the exact fix step by step and the place the change is made. LeakTrace would re-check each one until it is closed.
What the firm would get
The full external watch on the firm, the proof for every finding and the fix, human-verified inside 72 hours of confirmation. The firm gets the fix for each finding, step by step. We re-check externally until it is closed. The one change we can make ourselves is to the firm’s email records and only when the firm approves each step, where its DNS host allows it. Your evidence pack: an owner summary, the technical evidence with the fix for every finding, a rules and insurance briefing, plus a dated assessment record.