A precise question, a focused answer
Separate searches for websites, email domains, and exact emails. Include subdomains only when you need them.
Exposure detected.Your team notified.
Vuxep finds credentials tied to the domains your organization owns and sends every new finding straight to the people who need to act.
Available on the organization plan. We set up your workspace with you.
From your domains to your team in three steps.
Prove what you own, find what’s exposed, and make sure the right people hear about it first.
Verify your domains
Publish a DNS TXT record for each domain you own. Search and monitoring unlock once it checks out.
Find what’s exposed
Search a domain and its subdomains, a single host, an email domain, or one work email.
Tell the right people
New matches are grouped into short digests and sent to wherever your team already works.
Your exposure picture, the moment you sign in.
Every workspace opens on a live dashboard for your verified domains: what’s new, whether it’s rising, and exactly which sites and people are most exposed.
New this week, in context
Fresh exposures with the change against last week and the last 24 hours, so a spike stands out immediately.
Twelve weeks of trend
See when new leaks land, how activity is moving, and which week was the busiest.
Hosts to fix first
The logins, VPNs, and portals that appear most often, ranked, with every affected subdomain counted.
People to reset first
The employee accounts exposed again and again, plus a breakdown for every domain you monitor.
Get straight to the records that matter.
Start broad with a domain. Narrow to a host or a person. Everything stays inside your organization’s verified domains.
v. RESEARCH WORKSPACE INTERACTIVE PREVIEW
One search. A wider view.
TRY IT BELOWA wider view of every host beneath a domain.4 RECORDS
| HOSTNAME | ACCOUNT | PASSWORD | FIRST INDEXED ↓ | Host type |
|---|---|---|---|---|
| login.example.com | [email protected] | Sunflower!2024 | Oct 04, 2026 | Subdomain |
| mail.example.com | [email protected] | mchen#Q3pass | Oct 03, 2026 | Subdomain |
| vpn.example.com | [email protected] | Vpn-access-77 | Oct 02, 2026 | Subdomain |
| portal.example.com | [email protected] | Portal2026$ | Oct 01, 2026 | Subdomain |
FICTIONAL SAMPLE RECORDS PRIVATE INDEX IN THE FULL CONSOLE
Try it. This preview uses fictional example.com records and never touches the real index.
Details you can act on
See the available URLs, accounts, and passwords for your domains. Copy a value or export the matching records to CSV.
An alert only helps if it reaches someone.
Connect the tools your team already watches. Pick a destination to see exactly what lands there.
# sec-alerts
Posted to the channel you connect — a summary, a few example accounts, and a workspace link. Never passwords.
- Each destination retries on its own
- Send a test before relying on it
- Rules for a host, domain, email, account, or URL
One plan, shaped around your organization.
A private workspace we set up for your team, limited to the domains you prove you own. Tell us about your organization and we’ll tailor it with you.
Organization plan
For security and IT teams that need to know when their organization’s credentials surface, and want the right people told.
Tailored pricingBased on your domains and the size of your team.
Contact us to learn moreOr write to [email protected]
A workspace for your team
- Accounts for every analyst
- Organization admins invite teammates and manage alerts themselves
- Disable a user to end their sessions immediately
Scope you control
- As many owned domains as you need
- DNS TXT verification for each domain
- Searches, exports, and alerts stay inside it
Investigation
- An exposure dashboard with weekly trends
- Five precise search modes
- Full credential records and CSV export
Continuous monitoring
- Grouped email reports per domain
- Rules by host, domain, email, account, or URL
- Slack, Teams, Discord, and signed webhooks with retries
Getting started
Contact us
Tell us about your team and the domains you’re responsible for.
We set you up
We create your organization workspace and user accounts.
You verify
Publish one DNS TXT record per domain you own.
You’re live
Search, export, and route new exposures to your team.
How do we get access?
Vuxep is available on the organization plan. Email [email protected] and we’ll walk you through it, set up your workspace, create your accounts, and help you verify your domains with a DNS TXT record. There is no public sign-up.
What can our team investigate?
Websites, subdomains, company email domains, or an exact work email within your verified domains. Review the full available credential records and export your findings to CSV. Domains and identities you don’t own stay outside your workspace.
What does the dashboard show?
Every workspace opens on a dashboard for your verified domains: new exposures this week compared with the week before, the last 24 hours and 30 days, total website exposures and accounts at your email domains, how many distinct hosts and people are affected, a 12-week trend, the most affected hosts, the most exposed accounts, and a breakdown by domain. It refreshes every couple of minutes as new records are indexed.
Where can notifications go?
Email, Slack, Discord, Microsoft Teams, or any HTTPS webhook. Your administrator connects each destination to a verified domain or a targeted rule. Chat alerts carry a short summary, a few example accounts, and a workspace link — never passwords. Signed webhooks stay machine-readable: a count and a workspace link, no accounts or passwords.
Can we choose exactly what triggers an alert?
Yes. Target an exact hostname, a website domain and its subdomains, a registered domain, an email domain, an individual email, an account, or a URL. Give each rule its own recipient, pause it, or turn off broad domain reports and keep only targeted rules.
Will every record send a separate message?
No. New matches are grouped into short digests before delivery. Notifications run in the background after records are saved, with automatic retries. Processing backlogs and provider availability can affect delivery time.
Does first indexed mean the date of a breach?
No. It records when a credential first entered the index, not when it was stolen or exposed. A finding also doesn’t prove a credential still works. Treat it as evidence for an investigation, not a confirmed incident.