BLKCanary monitors every staff and shared mailbox in your business against known data breaches, and alerts your IT team by email, Slack or webhook so exposed credentials get reset before anyone uses them.
| Time | Account | Source |
|---|---|---|
| 14:22 | [email protected] | Paste · Alert |
| 13:54 | [email protected] | LinkedIn 2024 |
| 12:41 | [email protected] | Combo 2024 |
| 11:08 | [email protected] | Twitch dump |
| 09:22 | [email protected] | Dropbox 2012 |
01 · About
BLKCanary is a security-first platform that checks your organisation's email addresses against the world's largest breach corpora and alerts your team when exposed credentials surface, so one leaked password doesn't turn into a compromised mailbox.
01 / Monitor
Track staff mailboxes and shared inboxes like billing@ and support@ in one place, and see which breach exposed each address and what data leaked.
02 / Teams
Organise addresses into groups such as finance, leadership or support, and give each group its own alert channels.
03 / Alerts
Send findings to email, Slack or a webhook into your ticketing or SIEM tooling, so exposures reach the people who fix them.
02 · Operation
Four moving parts, one continuous loop running quietly in the background until the moment a credential of yours hits the wild. How often it runs depends on your plan.
01 Trigger
Our monitoring picks up newly published breaches and corpus updates from the sources we watch.
02 Match
Accounts you added are matched against the new data. As fast as your plan allows it.
Tiers control scheduling03 Notify
Affected accounts trigger your configured channels: email, Slack or webhook.
Channel options scale with tier04 React
You're told when the canary trips, not when the attacker logs in. Rotate, revoke or force-reset, and track remediation per address.
03 · For business
Whether you have five mailboxes or five hundred, BLKCanary gives whoever looks after IT one place to see who is exposed and prove it is being handled.
01 / Domain
Add a single DNS TXT record and every address on your company domain is verified automatically. Pro covers a second domain, and Enterprise covers all of them.
02 / Onboarding
Paste a list or import a CSV of addresses, then sort them into groups that match how your business is organised.
03 / Reporting
On Pro and Enterprise: a security score, exposure and remediation trends, and time-to-remediate figures, ready to share with directors or clients.
04 / Assurance
Show that you monitor for compromised credentials, as cyber insurance questionnaires and frameworks such as ISO 27001 and NIS2 expect.
04 · Sources
Today BLKCanary matches against public breach corpora, with paste-site and password monitoring on the way, so you don't have to glue half a dozen tools together yourself.
01 / Corpora
Aggregated dumps from known incidents, normalised and de-duplicated for high-signal matches.
Proudly powered by: HIBP02 / Paste
Continuous coverage of paste sites, leak forums and underground marketplaces where new dumps appear first.
Coming Soon!03 / Passwords
Password checking via K-Anonymity. Secure and crazy fast.
Coming Soon!05 · Pricing
Start free with a few key addresses, then cover the whole company as you grow. No credit card required.
€0/mo
€0/yr
€39/mo
€399/yr
€79/mo
€899/yr
Monitor any address across every domain you use, with bespoke limits, dedicated support, and manual invoicing.
06 · FAQ
Still unsure? Get in touch and we'll walk you through it.
BLKCanary checks the email addresses your organisation uses, such as staff mailboxes and shared inboxes like billing@ or support@, against known data breaches. When an address turns up in a breach, you are told which breach it was and what kind of data was exposed, so you can act before the credentials are used against you.
Have I Been Pwned is the breach data source behind BLKCanary. BLKCanary adds what a business needs on top of it: tracking every address in the company from one dashboard, bulk import from CSV, groups with their own alert routing, alerts to email, Slack or a webhook, and exposure and remediation reporting.
No. BLKCanary only needs the email addresses you want to monitor. It never asks for, collects or stores the passwords of those mailboxes.
Not if you verify your company domain. Add a DNS TXT record once and every address on that domain is verified automatically. Pro lets you verify a second domain and Enterprise covers every domain you use.
Free, Starter and Pro monitor addresses on your own business domains, including their subdomains. Enterprise can monitor any address, such as contractors or personal inboxes your team relies on, and those addresses confirm with a one-click email.
Each plan checks your addresses on a fixed schedule: monthly on Free, weekly on Starter, twice a week on Pro and daily on Enterprise.
On Free, breaches show on your dashboard the next time you sign in. Starter sends email alerts, Pro adds Slack and webhooks for your ticketing or SIEM tooling, and Enterprise supports custom integrations, so alerts land where your IT or security team already works.
It gives you evidence that you monitor for compromised credentials, which cyber insurance questionnaires and frameworks such as ISO 27001 (threat intelligence) and NIS2 ask about. BLKCanary supports that evidence; it does not make you compliant on its own.
Yes. The free plan monitors up to 3 addresses on your business domain and shows any breaches on your dashboard, and no credit card is required. Upgrade to Starter for email alerts, or when you want to cover the whole team.