bf-platformwatch monitors the dark web for credentials belonging to your platform. When an account from your online banking, your customer portal or your members’ area shows up there, you find out, and can warn the customer straight away.
It is not your platform that gets attacked, but your customer’s computer. Saved credentials travel from there to the dark web, get traded, and are used eventually. When somebody signs in with them, your systems see a perfectly normal login: right username, right password, no failed attempt.
Each square stands for one of a hundred sign-in attempts at a typical login portal on a typical day.
Source: Verizon Data Breach Investigations Report, analysis of single sign-on logs (2025). The figure is the median across the portals studied; individual cases sit well above or below it.
The crucial difference from a conventional check: you hand over no customer list, no usernames and no passwords.
We watch the dark web continuously and filter out what belongs to your portal, your sign-in and your app. You only get what actually concerns you.
You see not only that your platform is involved but which account, how old the finding is and how complete the data are.
Depending on the risk: reset the password, lock the sign-in or write to the customer. Through the interface or automatically via an API into your system.
The monitoring needs no user list, no usernames and no passwords. Your customer data stay where they are.
Age of the finding, completeness of the data and its origin feed into a rating, so you know what to deal with first.
Every finding can feed straight into your platform: flag the account, force a password change, require a second factor. Ready-made wording for the customer notice is included.
Every finding and every measure is logged. That is usable for DORA, NIS2, supervisory requirements and towards your cyber insurer.
Online banking and customer portals, where a taken-over account costs money directly.
Customer portals holding policy, health and bank details behind a single login.
Customer portals with meter readings, instalments and stored bank details.
Shops, booking systems and association platforms with many thousands of accounts.
We run a one-off scan and show you the result. No integration, no customer data, no commitment.