Compare · The outside watch for your firm
An outside reading or an incident response firm.
An incident response firm is called after something has happened. We read your firm from outside before it does.
No loginNo installNo mailbox accessOne dated record
01 · Side by side
What each one is.
| An incident response firm | LeakTrace | |
|---|---|---|
| When | After an incident. | Before one. |
| What it does | Investigates an incident, contains it and supports recovery, often beside lawyers and insurers. | Finds each way in from outside, proves it and gives you the exact fix. |
| What it needs from you | Deep access to your systems, to investigate. | Your domain and a work email at it. No login, no install, no mailbox access. |
| The fix | Recovery work during the matter. | The exact fix for each finding, step by step. Forged email closed with you, one click per step, where we reach your DNS host. |
| How it is engaged | Per matter, or on a retainer. | An assessment inside 72 hours of confirmation, then monitoring. |
| After | Ends when the matter closes. | Re-checked from outside until each finding is closed. On monitoring: Email settings re-checked every 5 minutes, new certificates for the domain and its look-alikes seen within minutes, the rest every hour or day. |
02 · Where each fits
When each is the right choice.
We do not do incident response. If something has already happened, call your insurer or an incident response firm first.
Our record shows what was open from outside on the day it was read, with its date. An incident team or counsel can read it as it is.
03 · What we never do
Security that never needs the keys to your firm.
We hold no keys to your firm.
We are paid by no one who sells the fixes, so every finding is there because it is true.
- NoNo login to your systems.
- NoNothing installed on your machines.
- NoNo access to your mailboxes.
Check my firm
See what your firm shows the internet, without handing over a key.
Your domain and a work email at it. No password, no login and no software. Read-only and sent only to your work email.
Read next
An outside reading or your insurer's scanWhat your insurer reads from outside and what you get from usRead → An outside reading or a penetration testTesting your systems once, or reading your firm from outside all yearRead → An outside reading or a DMARC serviceYour email records and the rest of what a forger usesRead → An outside reading or a cyber ratingA score, or each finding with its evidenceRead → An outside reading or dark web monitoringAn address found in breach data and what else is openRead → An outside reading or a review by an IT providerA review from inside, or a reading from outside with no keysRead → Zero accessWhat we hold of your firm: nothingRead → What we coverEvery way in we find, with where our view stopsRead →