GUIDED SETUP
Dark web & leak monitoring.
DarkWatch monitors approved company domains and company email addresses against known breach sources and routes matches into a documented response process.
IN BRIEF
What is DarkWatch?
DarkWatch is the exposure and leak monitoring solution from TOMORIS. It detects relevant matches, classifies them deterministically and connects alerting with a traceable handling path.
- THE TASK
What problem does DarkWatch solve?
Compromised company addresses and published credentials often become known late. Without a defined process, even detected matches remain without a clear response.
- AVAILABILITY
GUIDED SETUP
GRID security solution for controlled rollouts with a verified domain scope and an agreed response process.
- THE ROLE OF AIAI
What the AI does
Versioned rules set the severity. The AI only helps phrase the findings clearly.
Guided rollout / pilot
Your next step.
Agreed in concrete terms.
- Verify authorization, domains and permitted company addresses
- Put known breach sources and rule-based classification in context
- Define responsibilities, alerting and the documented response
Setup is guided. This does not promise public self-service, complete detection of all leaks or a fixed response time.
FEATURES & MODULES
What the solution
delivers day to day.
- 01
Breach monitoring
Monitor approved domains and company addresses against known sources.
- 02
Deterministic classification
Severity levels are set by versioned rules rather than by a language model.
- 03
Documented response
Link the alert and the ITSM case with a checklist.
- 04
Data-minimizing storage
No plaintext passwords and no raw leak data in the product database.
IN OPERATION
How DarkWatch
fits into everyday work.
- 01
Define the scope
Set up domains, permitted address ranges and roles in a controlled way.
- 02
Review signals
New findings are deduplicated and classified according to fixed rules.
- 03
Trigger the response
Relevant matches create exactly one traceable alert and ticket process.
PRICING
Packages and prices.
Clear and net.
All prices are net plus VAT, from the TOMORIS price catalog.
- PACKAGE
Start
€49per month
- including 1 domain and 25 mailboxes
Annually: €529.20 per year (10% less)
- PACKAGE
Advanced
€149per month, including 50 mailboxes
- including 2 domains
- beyond that, €2 per mailbox
Annually: €1,609.20 per year, up to 50 mailboxes (10% less)
- HOW TO GET STARTED
Discuss leak monitoring
We set up DarkWatch with you in a guided process, and you conclude the contract via an offer from TOMORIS. With annual payment, you save 10%.
Discuss leak monitoring
WHO IS IT FOR?
For people who need clarity.
- Companies with domains and identities worth protecting
- IT and security officers
- Organizations that want to turn exposure signals into processes
RESULT
What DarkWatch improves in concrete terms.
- 01Earlier visibility of published credentials
- 02Consistent response instead of case-by-case improvisation
- 03Data-minimizing and auditable handling
ENVIRONMENT & INTEGRATIONS
Close to the process
instead of isolated.
- HIBP as the base source
- Jira Service Management
- TOMORIS GRID operating processes
- Role-based and audited access
SUMMARY
DarkWatch at a glance
- What is it?
- DarkWatch is the exposure and leak monitoring solution from TOMORIS. It detects relevant matches, classifies them deterministically and connects alerting with a traceable handling path.
- Who is it for?
- Companies with domains and identities worth protecting; IT and security officers; Organizations that want to turn exposure signals into processes.
- What does it deliver?
- Earlier visibility of published credentials; Consistent response instead of case-by-case improvisation; Data-minimizing and auditable handling.
- How is it available?
- GUIDED SETUP — GRID security solution for controlled rollouts with a verified domain scope and an agreed response process.
CLEAR ANSWERS
Frequently asked
questions.
Does DarkWatch store plaintext passwords?
No. The database contains no plaintext passwords and no raw leak data, only the required metadata.
Does AI decide on the severity?
No. Classification is deterministic and versioned; AI may only help with clear wording.
Is the same finding alerted more than once?
Processing deduplicates per address and breach. The documented alert is created exactly once.
YOUR NEXT STEP
Find the right fit
for DarkWatch.
We clarify the goal, environment, integrations and the permissible next step.