Domain & IP targets
Monitor company domains, single IPs, or CIDR ranges your organization is authorized to watch.
Platform · Monitor
Continuous monitoring for your attack surface
Add company domains, IPs, or CIDR ranges. BreachQuery refreshes every 24 hours and surfaces only what changed — new credentials, assets, and CVEs.
You're on the list. We'll reach out about enterprise access.
Preview
Monitor in BreachQuery
Features
What Monitor delivers
24-hour refresh cycle
Each target is re-checked daily. Your team sees deltas, not repeated noise from prior pulls.
Fleet status table
Status, leak counts, and last-checked timestamps for every monitored target in one view.
Incidents & CVEs chart
Trend new stealer-log accounts and CVE discoveries over time across your fleet.
Bulk domain add
Onboard dozens of domains at once for enterprise programs and M&A integrations.
Email & in-app alerts
Get notified when a monitoring pull finds new exposure on any watched domain.
How it works
Three steps on Monitor
Add targets
Enter a domain, IP, or CIDR — or paste a bulk list for enterprise onboarding.
Automatic pulls
BreachQuery indexes credentials, assets, hosts, and CVEs on a 24-hour cadence.
Act on deltas
Review new incidents and findings with full context — only what appeared since the last cycle.
Use cases
Built for enterprise teams
Security operations
Keep a continuous watch on corporate domains without manual re-scanning.
M&A integration
Bulk-add acquired domains and track exposure from day one.
CISO reporting
Show monitoring coverage and discovery trends to leadership.
Compliance programs
Demonstrate ongoing breach monitoring for regulated domains.
FAQ
Common questions
How often are domains checked?
- Every 24 hours. New credentials, assets, or CVEs since the last pull trigger alerts.
Can I monitor IPs and CIDR ranges?
- Yes — add single IPs or CIDR blocks (/24 or smaller) alongside domains.
What happens on the first pull?
- BreachQuery indexes existing exposure and establishes a baseline. Subsequent pulls highlight only new findings.
How do I know monitoring is working?
- Each domain shows status, leak counts, and last-checked time in the fleet table.
Request enterprise early access
Join the waitlist — be first to run Monitor for your organization.