Monitor for credential exposure and sensitive data, to do this, configure your assets and enable monitoring in the Asset Management menu.
How to Add a New Asset
To start monitoring, follow these simple steps to add a new asset:
Access the Asset Management menu and click the orange + Add Asset button in the upper-right corner.
You will be taken to a new screen where you can choose the type of asset you want to add.
The Data Leakage asset options are:
Domain: Your brand’s main web address along with its subdomains.
Third-party login page: Your brand’s assets on customer, supplier, or partner platforms.
BIN: Bank Identification Numbers to monitor credit card exposure.
Tracking Token: Monitor data leaks accurately through hidden tokens.
Application: An application identifier to monitor potential credential exposure.
You can add multiple Assets at once, except for Brand Protection, Online Piracy, and Deep & Dark Web. To do so, separate them with a semicolon (;). For example:
ormus.com; myapp.com.br; anotherdomain.org. All domains, BINs, or IPs will be automatically added to your Safelist.
Learn more about each monitoring type
Each asset type supports different monitoring options. Below is a quick overview of what you can enable for each one.
Domain
Employee credential exposure
Detects leaked employee emails and passwords on the internet, based on the monitoring domain.
Customer credential exposure
Detects leaked credentials of customers and users who access the monitoring domain, regardless of their email domain. Learn more
Code secret exposure
Detects leaked code secrets, such as API keys and access tokens, in public repositories associated with your organization's projects. Learn more
Mentions in data breach
Detects mentions of your organization in public and private data breaches, such as stolen databases or ransomware files, identifying references to the company, domains, brands, or exposed sensitive information. Learn more.
For now, this offer is an exception and is activated based on the other data leakage products.
Third-party login page
Employee credential exposure
Detects leaked credentials of employees who access the monitoring third-party pages, regardless of their email domain.
Pending Status: the Pending status applies exclusively to Third-party Login Page assets. It indicates that the system is validating whether the added host is indeed associated with your company.
This is a security measure to ensure that only legitimate assets representing your brand on third-party platforms are monitored.
Once validation is complete, the status will update to Active Monitoring.
Rejected Status: If a Third-party Login Page asset is marked as rejected, it means that ownership validation was not approved. The system could not confirm that the added host is related to your company, and therefore, monitoring will not be activated for that asset.
If you believe the asset was rejected by mistake, please contact [email protected] explaining your relationship with the registered asset.
App
Customer credential exposure
Detects leaked credentials of customers and users who access the monitoring app, regardless of their email domain. Learn more
Tracking token
Database exposure
Insert tokens disguised as real data into your databases and be alerted if they are found in any leak. Learn more.
BIN
Credit Card Exposure
Tracks Bank ID Numbers to monitor for credit card exposure. Learn more.
How to View Your Monitored Assets
On the main Asset Management screen, you will find a table with all the assets you have added, both enabled and disabled.
Search: Use the search bar to quickly find a specific asset. Simply type the asset name to filter the results.
Filter: Use the Filter dropdown menu in the upper-right corner of the table to organize your assets by:
Asset Type: Domain, Third-party login page, Application, etc.
Monitoring Status: Active, Inactive, or Pending.
Asset Details
The table displays important information about each asset:
Asset: The name of the asset, whether a domain, application, etc.
Asset Type: The type of registered asset.
Active Monitoring: The monitoring status for the asset.
It is also possible to export all assets registered on the platform, both active and inactive, to a CSV file. To do this, simply click the “Export” button.
