Credential watch
for every district domainA district password just leaked somewhere else. We tell you before an attacker logs in with it.
Most district breaches start with a password stolen from a shopping site, a forum, a personal app — reused on a district account. Nothing on your network changes. The attacker simply logs in.
- step 1Force the reset
- step 2Check recent sign-ins
- step 3Confirm MFA, close it out
How it works
Three steps, and none of them are yours.
Every district email domain, against breach data as it appears.
Staff or student, which systems the account reaches, where the leak came from.
Force the reset, check sign-ins, confirm MFA, close it out.
Inside credential watch
What surfaced this term, in order.
You never see a list of hashes. You see the account, where it leaked, what we did and how long it took.
| Domain | Accounts |
|---|---|
| district.k12.tn.us | 2,104 |
| district-schools.org | 198 |
| mail.district.k12.tn.us | 26 |
Add or remove a domain any time. Nothing is installed and no account is connected.
What is included
Small program. Closes a big gap.
Domain monitoring
All district email domains watched continuously. Add or remove domains at any time.
Staff and student scope
Older students carry district accounts and reuse passwords more than staff do. They are in scope.
Attributed alerts
Every alert tied to the actual account, not a list of hashes to decode.
Next-step guidance
A plain instruction each time, and a record that it was done.
Pairs with Guardian
If a leaked password is used, analysts see the sign-in and act on it.
The least expensive program
Usually bundled with BlueHook. Fixed price, in writing.
What you get to keep
A record that says you knew, and acted.
Monthly summary
What surfaced, and what was done about it.
Closed-out log
Each alert with the action taken and the date.
Domain coverage report
Which domains are watched, for your auditor.
Questions districts ask
Before you call
Do you need access to our systems?
No. Monitoring works from your domain names alone. Nothing is installed and no account is connected.
Does it cover student accounts?
Yes. Any address on a district domain is watched, staff or student. Alerts say which it is.
What happens when you find something?
You get an alert naming the account, the source, and the next step. With Guardian, analysts also watch for that password being used.
How is it priced?
Per district, fixed, in writing. It is the least expensive of the four programs.
Get started
Tell us what you are being asked to prove.
An insurance renewal, a state review, a board question. We will tell you which program answers it, or that none of them do. Straight answer, fixed quote, from the engineer who would do the work.
Reply within one business day. No sales sequence, no mailing list.