Know when your company's credentials show up on the dark web
“24/7 dark web monitoring for leaked credentials and personal data tied to your domain, email addresses and IPs, powered by InsecureWeb.”
UTMStack
UTMStack is a Free and Open Source SIEM and XDR Powered By real-time Correlation and Threat Intelligence.
Products & services
Extra SOC analysts for the hours and alerts your team can't cover
“UTMStack analysts work as an extension of your SOC or security team: night and weekend shifts, alert overflow and incident backup, under your processes.”
Questions & answers
How much does UTMStack cost?
“The open source edition is free. UTMStack Cloud subscriptions and self-hosted Enterprise licenses are both priced by the number of devices you monitor, never by log volume. Tell us how many devices you have and how you want to run UTMStack, and we will send a quote within one business day, directly or through a partner near you.”
Do you charge for log volume?
“No. Plans are sized by number of devices, not by gigabytes ingested, so a busy week or an incident does not change your bill.”
How long is data kept, and can I search old logs?
“Cloud plans keep about one month of logs in fast storage and archive older logs for a year. Archived logs stay searchable in Log Explorer without a restore. Longer retention is available on request, and on your own servers you choose the retention.”
Where does my data live, and how is it protected?
“UTMStack Cloud runs on OVHcloud. Each customer gets a dedicated instance in the region they choose: the United States, Canada, the United Kingdom, France or Poland.”
What do you monitor?
“Your company domain, the email addresses you choose and your IP addresses. We look for leaked credentials, account details and personal data across dark web markets, forums, chat rooms and botnet data.”
What happens when you find something?
“You get a report of what leaked and where it was found, so you can verify the account, change the password and check for misuse. UTMStack platform customers can also check the account's recent sign-ins and disable it automatically if it shows signs of misuse.”
Who provides the data?
“Monitoring is powered by InsecureWeb, a UTMStack technology partner whose collection holds more than 19 billion records.”
Can I see my exposure before buying?
“Yes. Request a free dark web scan to get a first look at what is exposed for your domain.”
How much does dark web monitoring cost?
“Pricing depends on what you want to monitor. Contact us for a quote.”
What is a due diligence report?
“An independent investigation of a company, and optionally the people who run it, before you enter a relationship with it.”
Is this enhanced due diligence (EDD)?
“Yes. Standard due diligence confirms who a company is and screens it against sanctions and watch lists. Enhanced due diligence goes further for higher-risk relationships: ultimate beneficial owners, the people in control, litigation, regulatory history, adverse media and finances. This report covers all of that, and adds credit standing and cyber exposure, which are often sold as separate services.”
How deep does the research go?
“Depth follows the risk. A low-risk supplier may need only the company and its directors; a joint venture partner or an acquisition may need the whole group and a person report on every key individual. We agree the depth with you before we start, and the report records every search it ran.”
Can you investigate companies outside the UK?
“Yes. The sample is a UK company, and the registers and courts available differ by country. When we scope your request we tell you which sources we can search for that country, and the report records each search, including the ones that found nothing.”
Do you replace our security team?
“No. We extend it. Most teams use us for the hours they can't staff, for alert overflow, or as backup during a serious incident, while their own analysts stay in charge.”
We are an MSSP. Will you compete with us for our customers?
“No. For partners we work behind your brand and follow your procedures, and your customers remain yours. Talk to us about partner terms.”
What can your analysts do without asking us?
“Only what we agree with you up front. Some teams let us contain threats right away, for example by isolating a host or blocking an IP address; others want every action escalated first.”
How much does it cost?
“It depends on the hours you need covered, the number of devices and data sources, and the services you choose. Contact us for a quote.”
Can we keep our current EDR or antivirus?
“Yes. UTMStack integrates with EDR and antivirus tools such as CrowdStrike, SentinelOne, Sophos and Bitdefender, and our analysts use their alerts alongside everything else.”
Data formats & record details
Download this profile and inspect its supporting evidence.
- Entity ID
- urn:readyscan:entity:utmstack-q123261450
- Material fingerprint
- fnv1a64:c58bcbcd0d1438ab
- Entity revision
- fnv1a64:b530518db82a2cd1
- Published
- 2026-10-19
- Modified
- 2026-10-19
- Source summary
- UTMStack: UTMStack is a Free and Open Source SIEM and XDR Powered By real-time Correlation and Threat Intelligence. Website: https://UTMStack.com.