Personal attack-surface audit
See what the internet knows about you. Fix it.
Undermined Shield scans the public footprint of your email addresses, phone numbers, social handles, and domains — surfaces what's exposed — and walks you through cleaning it up. Findings only. Your raw data never leaves your control.
Invite-only during the private beta.
How it works
Three steps. No data hoarding.
Add the emails, phone numbers, social handles, and domains that represent you. They're encrypted at rest with a key only you can rotate.
Breach disclosures, certificate transparency logs, leak feeds, public records aggregators. Authorized public data only — no scraping behind logins, ever.
Each finding comes with severity, evidence, and a recommended action. Work the list, mark items resolved, watch your exposure score drop.
Privacy by design
Most exposure-monitoring services hoard the data they collect about you. We don't. The platform stores only the findings — metadata about what's exposed and where — never the source content itself. If we got breached tomorrow, no one would walk away with your private data.
- Raw data never persisted
Scanners decrypt your identifier value for a single API call, then drop it from memory. The DB only sees the encrypted form + the public-side finding.
- Defensive-only by hard rule
Attack Story Mode describes risk and recommends cleanup. It never provides exploit steps, phishing templates, MFA-bypass, credential-stuffing scripts, or social-engineering content.
- Single-tenant local-first
The whole stack — Postgres, app server, reverse proxy — runs on one box you control. No SaaS multi-tenancy, no shared analytics pipeline.
Who it's for
If your inbox feels noisy and your phone gets too many spam calls, it's because your contact info has leaked across breaches and people-search sites. We map it and help you clean it up.
Founders, public figures, journalists, executives. People whose names attract attention. We audit the wider digital footprint that follows you.
Add your domains and we'll fold in DNS, certificate transparency, and subdomain takeover indicators alongside the personal-identity findings.
Ready to see what's out there?
We're onboarding by invitation during the private beta. Drop us a note and we'll get back to you.