TAYNOPIS emblem Emerald shield with a transparent T-shaped opening, surrounded by hexadecimal bytes. The ring reads WE FIND THE LEAKS. YOU PROTECT THE PEOPLE. in ASCII, once clockwise from the top dot. Transparent background. All characters are vector outlines. HEX ASCII: 57 45 20 46 49 4E 44 20 54 48 45 20 4C 45 41 4B 53 2E 20 59 4F 55 20 50 52 4F 54 45 43 54 20 54 48 45 20 50 45 4F 50 4C 45 2E TAYNOPIS TAYNOPIS in custom geometric vector lettering based on the supplied reference. Symmetric Y, circular O, pointed A and diagonal N. Transparent background.
Sign in Request access →

Pay for intelligence,
not for seat counts

Individuals check for free, forever. Enterprises choose their monitoring tier per domain. Researchers buy token packs sized to their workload.

Domain monitoring tiers for enterprise

Monthly subscription per verified domain. Prices are "from" — final quote depends on domain size and groupings.

Domain Monitor

FROM $1,000 / month

per verified domain

  • Logins & links visibility
  • See affected URLs and usernames
  • Real-time exposure alerts
  • Domain-scoped monitoring
  • 1 API key
  • Email support
Request a quote →

Most complete

Credentials

FROM $5,000 / month

per verified domain

  • Everything in Domain Monitor
  • Logins & passwords visibility
  • Full credential exposure per record
  • Real-time exposure alerts
  • 2 API keys
  • Priority support
Request a quote →

Custom

Custom

tailored agreement

  • Everything in Credentials
  • Grouping by machine / source
  • Log-path fingerprints (MD5)
  • Stealer-family breakdowns
  • Custom retention & SLAs
  • Dedicated support & MSA/DPA
Talk to sales →

Token packs for researchers

Full-index access: every domain, every stealer family. You pay only to reveal values — search itself and masked results are included.

Manual verification

Researcher access is granted manually after review. We approve security researchers from established cybersecurity companies, vetted independent journalists, and accredited academic institutions. Expect identity and affiliation checks before activation.

Research-only license

Access is licensed strictly for research, awareness and defensive purposes: threat analysis, incident attribution, reporting and publication of aggregate findings. Any use of exposed credentials — accessing accounts, impersonation, extortion — is prohibited and terminated immediately.

Lawful basis

We operate under the same legal framework as established threat-intelligence vendors: indexing already-exposed data for prevention. Researchers must comply with applicable US and international law, including the CFAA and GDPR.

Search across everything

Stealer families, TLDs and domain structures — with saved queries and per-field filters.

Controlled exports

Export within your access tier. Opening hidden fields in an export is quoted in tokens first — or download with them masked.

Citable statistics

Reference our public reports in your research with confidence.

How tokens actually work

Search request1 token + 1 token per record in the returned page
Reveal a value (username / password / URL / log fingerprint)≈ 1 token per character of the revealed value
Revealed recordsstay open forever — you never pay twice for the same field
CSV export row1 token per exported row
Searches with errors / empty resultscost nothing
Unused pack tokensburn 30 days after purchase (spending draws from the oldest pack first)

Common questions

Who qualifies for researcher access?

Researcher accounts are verified manually. We work with security researchers at established cybersecurity companies, independent investigative journalists with a verifiable publication record, and accredited academic researchers. Applications are reviewed individually — expect identity and affiliation checks, and a short call in most cases.

What exactly is a token?

One token equals approximately one character of revealed data. When you reveal a username, password or URL field of a record, the cost is the length of that value. Once revealed, the record stays open for your account forever — you never pay twice for the same field.

Do tokens expire?

Research packs are valid for 30 days from purchase. Unused tokens burn at expiry. If you top up while an older pack is still active, both packs work — spending draws from the oldest pack first, so nothing is lost early.

Is this legal?

Yes — the same lawful model used by established threat-intelligence providers. We index data that criminals have already exposed and make it actionable for defense and research. Access is granted only to verified defenders and researchers, scoped, audited, and licensed strictly for research and protective purposes. Researchers must comply with applicable law (including the US Computer Fraud and Abuse Act and, where relevant, GDPR) and with our Terms of Use, which prohibit any use of exposed credentials to access accounts.

What's the difference between Monitor and Credentials tiers?

Monitor shows which links and logins were exposed. Credentials adds passwords. Both are monthly per-domain subscriptions with alerts and API access.

Why do you need domain verification?

Scoping searches to domains you provably own protects everyone: your employees' credentials aren't exposed to strangers, and competitors can't monitor your infrastructure. Researchers with full-index access go through a separate agreement.

Can we pay by invoice?

Yes — Enterprise plans support invoice billing, MSA and DPA paperwork. Contact [email protected].