Scarlet Risk · Tool guide
A company data breach checker with clear evidence limits
Scarlet Breach Check helps a small business or MSP review published breach information and decide what to investigate next. Begin with a free domain headline check, then purchase a detailed report when you need breach details and remediation guidance. Published breach matches and confirmed account exposure are different kinds of evidence; the result distinguishes them rather than treating every domain match as an exposed employee credential.
What the free domain check returns
Enter your company domain and an email address; no account is required for the headline check. The result summarizes matched breaches, exposed-record counts, highest severity, credential-related breaches, and the size of the published catalog used for the check. It also indicates whether the result was confirmed at account level.
The check uses published breach records from Have I Been Pwned. A domain-level catalog match is not proof that every employee of that company appears in the breach. It is also not a scan of your internal systems, an investigation of a current incident, or a complete search of the dark web.
What the detailed breach report adds
The one-off full report costs $59 and requires sign-in. Provide your company name and domain, with an optional list of employee email addresses for individual checks. The report brings matched breach details together with dates, exposed data types, severity, and AI-drafted remediation guidance. You can review the report in your account and save a PDF using its export option.
- Breach names, dates, and data classes associated with the available matches.
- Severity and remediation guidance for reviewing each finding.
- Optional employee checks when account-level lookup is available.
Domain matches versus confirmed account exposure
Account-level checks depend on the availability of the account lookup service. If that lookup is unavailable, published domain-level information must not be presented as confirmation that an individual email address was exposed. Supplying employee addresses does not by itself guarantee account-level results.
A result with no available matches does not prove that a company has never suffered a breach. Published catalogs have coverage limits, and a historical breach record does not establish whether a password is still in use or whether a system is currently compromised. Review AI-drafted guidance before taking action.
Turning breach information into risk intelligence
Use the report to prioritize investigation, review affected accounts, and decide which password, authentication, or incident-response actions are appropriate. Its value is a documented starting point for a security review, not a compliance certificate or a guarantee that all exposure has been found.
Scarlet Breach Check is an on-demand tool. The Store report does not include continuous monitoring or automatic alerts when new records appear. Start with the free headline check above; sign in for a detailed report when you need a fuller record to review with your security contact.