Overview
Every Verusight scan produces an Exposure Report. This article explains each component in detail so you can quickly assess your organization's risk and take appropriate action.
Report Header
At the top of every report you'll find:
- Target Domain — the domain that was scanned (e.g.,
acme.com) - Report ID — a unique alphanumeric identifier (first 8 characters shown)
- Generated — when this report was created, displayed as relative time ("2h ago", "Yesterday") or an absolute date for older reports
- Previous Report Date — for Pro Guard subscribers, shows when the last report was generated to help track trends
Header Actions
- Full reports: An "Export PDF" button generates a PDF version of your report in a new tab
- Masked reports: An "Unlock Full Report — from $249" button takes you to the purchase flow
Security Health Score
This is the primary risk indicator, displayed as a large label:
| Score Range | Label | Description |
|---|---|---|
| ≥ 70 | Crit. | High volume of recent exposures in active circulation. Immediate remediation required to prevent unauthorized access. |
| ≥ 40 | High | Significant exposures across multiple sources. Review and rotate affected passwords promptly. |
| ≥ 20 | Medium | Moderate exposure. Review recommended. |
| < 20 | Low | Minimal exposure detected. Continue monitoring. |
The score is calculated based on the total number of exposures, the recency of the leaked data, and the variety of sources where your credentials appear.
Statistics Panel
Three key metrics are displayed alongside the risk score:
- Total Exposures — the total count of unique credential records found across all breach sources
- New Since Last Report — how many additional exposures were detected since the previous report. Displays "—" for first-time reports. Positive numbers (e.g., "+12") indicate newly discovered leaks.
- Data Freshness — when the most recent credential in this report was last observed in our sources. "Today" means your domain had credentials appear in a very recent stealer log dump.
Key Findings
When analytics data is available, a Key Findings section appears between the stats panel and the exposure list. It highlights:
- Severity distribution across your exposures
- The most prevalent breach sources
- Trends and changes compared to the previous report
- Notable patterns (e.g., a single email appearing in many sources)
Exposure List
The core of the report — a scrollable list of every credential exposure found for your domain.
Each entry includes:
| Field | Masked Report | Full Report |
|---|---|---|
| Email address | Partially visible (e.g., j.d●●@acme.com) |
Fully visible |
| Password | Hidden | Fully visible |
| Source URL | Hidden | Fully visible |
| Leak source type | Visible (e.g., "Stealer Log") | Visible |
| Detection date | Visible | Visible |
Entries are paginated for performance. On full reports, you can review every credential to identify which employees are affected and what services are compromised.
Remediation Card
After the exposure list, the Remediation Card provides a prioritized action plan:
- Force password resets for all affected accounts — prioritize admin and privileged accounts, then VPN/remote access, then email, then SaaS platforms
- Enable MFA (multi-factor authentication) on all corporate services — hardware keys and authenticator apps preferred over SMS
- Scan for malware — stealer log entries indicate an infected device somewhere in your organization
- Audit credential reuse — check if exposed passwords are reused across multiple services
- Deploy continuous monitoring — set up ongoing alerts for new exposures
Compliance Card
The final section helps security teams map exposure data to compliance requirements:
- SOC 2 — credential monitoring supports Trust Services Criteria for security
- ISO 27001 — aligns with information security management system requirements
- GDPR — relevant to personal data breach notification responsibilities
- PCI-DSS — critical for organizations handling payment card data
Zero-Result Reports
If no exposures are found, a special clean-domain report is displayed instead of the standard layout. See What Does "No Exposures Found" Mean? for details.