RemoteDark web monitoring
Find out your passwords leaked before someone uses them.
Staff reuse passwords. The sites they sign up to get breached, and laptops get infected with malware that steals saved logins. Those logins end up for sale, and most businesses only find out when someone signs in as them. We watch for your business in those leaks, check every hit and fix it with you.
For businesses across Australia, run by the engineers who answer your calls.
- Leaks and stolen-password logs
- Every hit checked by a person
- Fixed with you
Reviewed by Blake Bath, General Manager, on 31 October 2026.
What we watch for
Four kinds of leak that lead to a break-in.
Each one needs a different response.
Passwords from other sites
A site your staff used gets breached, and their work email and password turn up in the dump.
- Work emails
- Reuse checked
- Reset
Infected devices
Malware that quietly copies saved passwords and sign-in sessions from a browser.
- Stolen logs
- Device rebuilt
- Sessions revoked
Lookalike web addresses
Domains registered to trick clients into paying the wrong account or signing in to a fake page.
- New domains
- Clients warned
- Takedown
Your data, posted
Client lists, documents or financial records on forums or sale sites.
- Confirmed
- Assessed
- Notified if needed
Leak response
Something turned up. What now?
The first steps for each kind of leak, in the order we run them.
Pick what turned up. You get the first steps in order, the way we'd run them.
What to do
Reset, check for reuse, check the mailbox
- Reset the password and sign the person out of every session.
- Check whether the same password is used anywhere else, and change those too.
- Check their MFA methods and mailbox rules for anything they didn't set up.
- Move them to a password manager and phishing-resistant sign-in.
How we actually do it
When something turns up, we own it until it's fixed.
- Watch list set upYour domains, staff emails and business name. One short call.
- Scanning runs all the timeGuardz and ConnectWise watch leak sites, criminal forums and stolen-password logs.
- A person checks every hitNo forwarding raw alerts. We confirm it's real first.
- We fix it with youPasswords reset, sessions revoked, devices rebuilt, clients warned.
The Australian rule
If client data leaks, the Privacy Act clock starts.
Under the Notifiable Data Breaches scheme, once you suspect an eligible data breach you have 30 days to assess it. If serious harm is likely, you must notify the OAIC and the people affected.
The OAIC received 1,205 notifications in 2025, the highest since the scheme began, and 716 came from malicious or criminal attacks. Finding a leak early gives you time to contain it and assess it properly.
When this is the wrong choice
Monitoring isn't a substitute for the basics.
- No MFA yetFix sign-in first. Monitoring tells you about a problem MFA would mostly stop.
- Shared passwords across staffA password manager comes first.
- No one to act on alertsAn alert nobody reads is worth nothing. Ours come with an engineer.
Mistakes we see
What goes wrong after a leak.
- Resetting the password onlyStolen session cookies keep working until sessions are revoked.
- Cleaning the infected laptopRebuild it. Malware that steals logins rarely travels alone.
- Missing mailbox rulesAttackers add forwarding rules that outlive the password change.
- Deciding it's not a breach without assessingWrite down the assessment, even if the answer is no.
- Buying the leaked data to check itDon't. Get help instead.
How we take it on
From watch list to fixed.
- Step 1Set up
Domains, emails and business name.
- Step 2Watch
Leaks, forums and stolen logs.
- Step 3Confirm
A person checks every hit.
- Step 4Fix
Reset, revoke, rebuild, warn.
- Step 5Assess
Privacy Act assessment if data is involved.
Related
Leaked logins are one way in. Here are the others we close.
Monitoring works best alongside these.
Get help your way
Six ways to reach us. Pick whichever suits you.
Helpdesk hours are Monday to Friday, 8am to 5pm AEST. On Advantage and above, emergencies get a response within 1 hour and outages within 2, with 24/7 best-effort escalation.
- Call 07 3114 2808
An engineer answers Monday to Friday, 8am to 5pm AEST. After hours, weekends and public holidays, Chip, our AI agent, answers on the same number or on 07 3180 0965, logs it and escalates urgent incidents to the on-call engineer.
Call now - Email the helpdesk
Send it to helpdesk@realbytes.com.au and a ticket is logged straight away, with a reference number you can quote.
Email us - Client portal
Log and follow your tickets, see what we are working on and who has it.
Open the portal - Remote support
When an engineer asks to see your screen, start a secure session here. You start it, so nobody sees your screen until you do.
Start a session - Chat in Microsoft Teams
Clients can message Chip, our AI assistant, in Teams to log a request without leaving their desk.
How clients reach us - Service status
Check whether Microsoft 365 or another cloud service is down before you lose an hour troubleshooting.
See live status
Questions
What people ask about dark web monitoring.
What is the dark web?
Parts of the internet you can't reach with a normal browser or search engine. Criminals use hidden forums and marketplaces there to trade stolen passwords and business data.
Can you remove our data from the dark web?
Usually not. Stolen data is copied and shared quickly. What we can do is make it useless: change the exposed passwords, sign out stolen sessions and close accounts before anyone uses them.
What happens when you find something?
An engineer confirms it's real, tells you what was exposed and where, and fixes it with you. If client or staff data is involved, we help you assess it under the Privacy Act.
Is dark web monitoring required by law?
No law or the Essential Eight names it. It helps you take reasonable steps to protect personal information under the Privacy Act, and to spot breaches you'd otherwise miss.
Which tools do you use?
Guardz and ConnectWise, run by our engineers. The tools find the leaks. A person checks each one and fixes it with you.
Does a leaked password matter if we have MFA?
Yes. Weaker MFA can be phished, and passwords stolen by malware on a device often come with session cookies that skip MFA entirely.
Next step
Want to know what's already out there?
Give us your business web address and we'll tell you what we can find and what to do about it.
Keep reading
Reviewed by Blake Bath, General Manager, on 31 October 2026. OAIC figures and Privacy Act obligations, checked 31 October 2026. OAIC, Data breach notifications at all-time high in 2025; OAIC, Notifiable Data Breaches scheme; IDCARE; ASD, cyber.gov.au (ReportCyber)