Help CenterMonitoring & AlertsHow Continuous Monitoring Works

How Continuous Monitoring Works

Technical overview of Verusight's continuous monitoring system — how scans run, how new exposures are detected, and how alerts are delivered.

Overview

Verusight's continuous monitoring is the core of the Pro Guard plan. A background worker process constantly checks your monitored domains against newly ingested credential data, detects new exposures, and alerts you in real time.

The Monitoring Pipeline

1. Data Ingestion

Verusight continuously ingests new credential data from multiple sources:

  • Stealer log dumps — freshly harvested credentials from info-stealer malware (RedLine, Raccoon, Vidar, and others)
  • Dark web marketplaces — listings from credential shops and forums
  • Telegram channels — public and private channels where stolen data is traded
  • Breach databases — newly disclosed data breaches

Our database currently contains 135 billion+ records and grows daily.

2. Background Scanning

A dedicated worker process runs every 30 minutes and performs the following for each monitored domain:

  1. Queries the database for any credential records matching your domain (e.g., any email ending in @yourdomain.com)
  2. Compares the results against previously known exposures
  3. Identifies new credentials that weren't detected in the last scan
  4. Updates the exposure count and analytics for your domain

3. Alert Delivery

When new credentials are detected:

  • An email alert is sent to your registered email address (if "New Breach Alerts" is enabled in your notification preferences)
  • If "Critical Only" mode is enabled, alerts are sent only for findings with a severity score ≥ 70
  • The new exposures appear immediately in your Dashboard → Exposures page

4. Monthly Report Generation

At the end of each billing month, the system automatically generates a full exposure report for each monitored domain. This report consolidates all findings and is delivered via email with a link to view it in your dashboard.

What You See in the Dashboard

For monitored domains, the dashboard shows real-time data:

  • Exposures page: A live table of all detected credentials, filterable and exportable to CSV
  • Reports page: Monthly reports with trend data ("New Since Last Report")
  • Settings page: A green "Monitored" badge next to each actively monitored domain

Monitoring Frequency

Component Frequency
New data scan Every 30 minutes
Email alerts Immediately upon detection
Monthly reports Once per billing month
Database updates Continuous

Requirements

  • An active Pro Guard subscription ($499/year)
  • At least one verified domain with monitoring enabled
  • Email notifications configured in Notification Preferences

Related Articles

Ready to check your exposure?

Find out if your corporate credentials are circulating on the dark web.

Scan Your Domain Free