Credential leaks
Breached passwords and the exact data classes exposed alongside them.
Protect your privacy.
Three steps from blind spot to fixed.
- 1
Add what you own
Name, username, email, photo, IP. Only inputs you can verify are yours.
- 2
Arescope collects & judges
Connectors sweep OSINT sources; an LLM rates each finding info → critical and drops the noise.
- 3
Fix what matters
A ranked action list: rotate this, remove that, opt out here, ordered by real risk.
Six classes of exposure, one ranked report.
Each finding is normalized, deduplicated, and judged on its own merits, not handed to you as a raw data dump.
Infostealer logs
Logins captured by malware — the highest-signal critical we surface.
Account exposure
Where your email and usernames are registered across the web.
Profile & identity
Public profiles and handles correlated into one identity graph.
Account metadata
What your Google and linked accounts quietly give away.
Infrastructure
Open services, ports, and CVEs tied to an IP you own.
Severity you can act on, not an alarm.
Findings are ranked by real-world risk and paired with a concrete fix. Critical means do it now; low means it can wait.
critical Hudson Rock · infostealer log
Credentials captured by infostealer malware
3 logins exfiltrated from an infected device, including a reused password.
Recommended fix Rotate 3 passwords · enable 2FA · clean the device
high HIBP · credential breach
Password exposed in 2 known breaches
The same password appears across two leaks tied to this email.
Recommended fix Change the reused password · move to a manager
low Account enumeration
Email registered on 14 sites
Mostly benign; three are dormant accounts worth closing.
Recommended fix Close 3 dormant accounts
Self-audit only. By design.
Arescope exists to shrink your footprint. It is not, and will never be, a people-search tool. That constraint is built into the data model, not a promise on a page.
-
Ownership-verified inputs
Email via magic link, accounts via OAuth, IP matched to your connection. You can only scan what you can prove is yours.
-
Encrypted, then forgotten
PII is encrypted at rest and expires on a retention clock. We hold the minimum, for the minimum time.
-
No investigation features
No lookups on other people, ever. The ownership gate is mandatory, not a setting.
Early access
Find out what's exposed.
Arescope is in build. Join the waitlist and we'll send one email when scans open.
No spam. No sharing. One email, when it's ready.