Most people use the same password for multiple acounts.
Cyber criminals collect data leaks and crack leaked password information.
Found passwords are used to login on other services and takeover your accounts.
Compromised accounts are used to steal money, information and to start ransomware attacks.

We collect data leaks and stealer logs.
We extract and crack passwords.
You can keep your employee and customer accounts safe.

Scattered Secrets is a true password breach notification service. Well-known services like Have I Been Pwnd do not process passwords, resulting in many false alarms. In most cases an alert just means that your email address is in a SPAM list and no passwords were stolen. Most cyber threat intelligence companies do not actively crack passwords: they show raw data only. We are best in class in cracking passwords. This allows us to generate unique quality content and to eliminate false positives.

You can use our unique high quality data for protecting employee and customer accounts. For example, you can recover the plain text passwords using a web interface, or fully integrate password re-use checks using our API.

Scattered Secrets BV was founded in 2017 and is located in Amsterdam, The Netherlands (EU). We have got a Big Four background and many years of experience in information risk management, incident response and penetration testing.

Successful account takeover attacks can result in fraud, cause damage to a brand's reputation, undermine customer confidence and result in major fines. With our Scattered Secrets BreachCheck API you can verify if customers re-use email and password combinations, take appropriate action and thereby prevent future incidents. Easy and GDPR proof.

Do you want to verify the real-life exposure of your customer accounts using a proof of concept? You can. Just compile a test dataset and we will provide you with clear and fact based risk metrics for your organization.

BreachCheck can also be used during incident response in case of an ongoing credential stuffing attack. We can outpace the attackers and provide you with a list of vulnerable accounts, so you can contain and eliminate the attack as soon as possible.

Pricing of our BreachCheck API is based on the number of accounts you would like to protect and environment specific characteristics. Are you interested in details? Or would you like to discuss options for custom integrations for your specific use-case? Please feel free to contact us.

Using smart strategies, hardware that excels in a specific job and billions of passwords of experience, we can help you to uncover leaked and other weak passwords used within your organization.

Password audits can be performed on a regular basis to keep your accounts safe. We support a wide variety of password hashing algoritms. Are you interested in details or would you like to discuss non-standard solutions? Please contact us.