EnterpriseCompliance

Vendor Assessment

Check breach exposure tied to third-party and vendor service accounts before renewal.

Start with 500 free creditsDocumentation

Email breaches · 1 credit per lookup · no monthly fee

Billing SaaS0 breaches
Analytics Inc2 breaches
Reviewed before renewal

The problem

Your vendors hold your data, and their breach history is public information you're probably not reading. A vendor whose service accounts keep appearing in dumps is telling you something about their security posture, before the contract renewal, if you listen.

With Encrata

Check breach exposure for vendor domains and service accounts as part of due diligence and renewal reviews. The results give procurement a concrete, documentable security signal to raise, not a feeling, but 'seven breaches in five years, passwords exposed in three.'

How it works

1

Send the address

Call the breach endpoint with an email address, one-off for a signup check, or on a schedule for monitoring.

2

We check known breaches

Encrata searches disclosed breach data and returns every breach the address appears in, when it happened, and what leaked.

3

Respond to exposure

Alert the user, raise a risk score, force a reset or require MFA, the full breach history is one credit away.

One call, structured answer

Vendor Assessment runs on the email breaches lookup at 1 credit per lookup. Same API key, same JSON shape as every other Encrata lookup.

  • Full breach history, names, dates and exposed data classes per breach
  • 1 credit per check, so continuous monitoring stays affordable
  • New-breach detection turns a public leak into a same-day security response
  • Works for one address or your whole domain
Terminal
curl -X POST "https://encrata.com/api/agent/breaches" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"email": "sam@corp.com"}'
response.json
{
  "email": "sam@corp.com",
  "breached": true,
  "breach_info": {
    "breach_count": 2,
    "services": [
      { "name": "LinkedIn", "breach_date": "2012-05-05",
        "data_types": ["Email addresses", "Passwords"] }
    ],
    "exposed_data": ["Email addresses", "Passwords"]
  },
  "credits": 1
}

Add it to the review checklist

Add a breach sweep to your vendor-review checklist: check the vendor's domain and any service accounts they've issued you at onboarding and at each renewal. Store the results with the vendor record so the security posture trend is visible over time, a vendor accumulating exposures between reviews is telling you something.

Leverage built on evidence

It converts vendor security from questionnaire theater into observable data: self-attestation says what they claim, breach history says what happened. Procurement gets concrete leverage in negotiations, and when a vendor incident does occur, you already know which of your service accounts were in the blast radius.

More email breaches use cases

View all

New breach: DataCo

Your email was exposed · just now

Secure account

Breach Alerts

Warn users the moment their email address shows up in a newly disclosed data breach

CybersecurityMonitoring

Identity risk

78/100
4 prior breaches · manual review

Risk Scoring

Raise risk scores for identities with prior breach exposure before approving transactions

FintechRisk
Breach affects 3 users
Password resets sent

Password Reset

Trigger targeted password resets when a breach relevant to your users becomes public

SaaSSecurity
Start with 500 free credits
$curl https://encrata.com/api/agent/lookup -H "Authorization: Bearer YOUR_API_KEY" -d '{"e": "satya@microsoft.com"}'