bf-platformwatch
Platform monitoring

Your platform is secure. Your customers’ passwords are not.

bf-platformwatch monitors the dark web for credentials belonging to your platform. When an account from your online banking, your customer portal or your members’ area shows up there, you find out, and can warn the customer straight away.

  • No customer data handed over
  • Monitored around the clock
  • GDPR-compliant
Findings for your platformLive
Online banking account affectedUsername and password in the clear · found 26 Aug 8 min ago
14 further customer portal accountsfrom the same collection · high risk 3 hrs ago
9 customers notifiedSign-in locked until a new password is set yesterday
Illustrative example, not real data.
The problem

The attack walks in through the front door with valid details.

It is not your platform that gets attacked, but your customer’s computer. Saved credentials travel from there to the dark web, get traded, and are used eventually. When somebody signs in with them, your systems see a perfectly normal login: right username, right password, no failed attempt.

How big this is

Sign-ins by strangers are an everyday event

19 %
of daily sign-in attempts at login portals are credential stuffing at the median, sign-ins using someone else’s details
Verizon DBIR, analysis of SSO logs 2025
8 m
dark web listings came from the five largest infostealers alone in 2024, each one holding hundreds of credentials
IBM X-Force Threat Intelligence Index 2025
2.0 bn
distinct email addresses appeared in credential-stuffing lists in 2025, alongside 1.3 billion passwords
Synthient / Have I Been Pwned, 2025

Who is actually signing in

Each square stands for one of a hundred sign-in attempts at a typical login portal on a typical day.

19 out of every 100 sign-in attempts are credential stuffing at the median, sign-ins using someone else’s leaked details. The other 81 are your real users.

Source: Verizon Data Breach Investigations Report, analysis of single sign-on logs (2025). The figure is the median across the portals studied; individual cases sit well above or below it.

How it works

You find out. So do your customers.

The crucial difference from a conventional check: you hand over no customer list, no usernames and no passwords.

01 · Find

Findings that concern your platform

We watch the dark web continuously and filter out what belongs to your portal, your sign-in and your app. You only get what actually concerns you.

02 · Report

You learn which customer is affected

You see not only that your platform is involved but which account, how old the finding is and how complete the data are.

03 · Warn

And can tell the customer right away

Depending on the risk: reset the password, lock the sign-in or write to the customer. Through the interface or automatically via an API into your system.

Features

What the monitoring does for operators

You hand over no customer data

The monitoring needs no user list, no usernames and no passwords. Your customer data stay where they are.

Risk rating per finding

Age of the finding, completeness of the data and its origin feed into a rating, so you know what to deal with first.

An API instead of manual work

Every finding can feed straight into your platform: flag the account, force a password change, require a second factor. Ready-made wording for the customer notice is included.

Evidence for regulators

Every finding and every measure is logged. That is usable for DORA, NIS2, supervisory requirements and towards your cyber insurer.

Who it is for

Anywhere customers sign in

Banks

Online banking and customer portals, where a taken-over account costs money directly.

Insurers

Customer portals holding policy, health and bank details behind a single login.

Utilities

Customer portals with meter readings, instalments and stored bank details.

Portals & member areas

Shops, booking systems and association platforms with many thousands of accounts.

Next step

How many findings are there for your platform?

We run a one-off scan and show you the result. No integration, no customer data, no commitment.

WhatsApp💬