Boxphish Dark Web Scanning is a credential monitoring service that continuously scans dark markets and closed forums for leaked usernames and passwords associated with an organisation's domain. The platform ingests data from breaches across the internet, identifying exposed credentials that could be used by attackers to gain unauthorised access to corporate systems. Tens of thousands of leaked credential combinations are processed daily. Key capabilities include: - Continuous monitoring of dark web markets and criminal forums for leaked credentials - Data filtering tools to distinguish genuine threats from noise - Risk analysis to prioritise credentials most likely to cause organisational harm - A secure employee portal for confirming whether discovered credentials are valid - Automated notifications to internal teams when employees confirm leaked data, prompting password resets - A free domain scan tool for initial exposure assessment The service also includes supplementary video-based security awareness training covering topics such as password management, phishing, and account takeover. Training content is available in animated and live-action formats. The product is positioned as a defence against account takeover attacks, including credential stuffing against cloud providers, internet-exposed RDP services, legacy protocols, and APIs — scenarios where leaked credentials can result in unauthorised access even when MFA is partially deployed.