LeakTrace Reviews & Product Details

The multi-tenant dashboard saved us about 30 hours of manual work this month alone. We manage IT for around 90 law and CPA firms, and perimeter checks for QBRs used to be a pain. We had to schedule maintenance windows and run noisy scans just to get the checks done.

With Leaktrace, we just uploaded our client list and didn’t have to touch their internal setups. It quickly flagged two firms with active Microsoft 365 session tokens showing up in Telegram stealer logs, likely from employees logging in on compromised home PCs.

Being able to show a partner a blurred screenshot of their actual active session token makes the risk real. It also makes it much easier to explain why our security package is worth it. Review collected by and hosted on G2.com.

The partner billing dashboard was a little confusing when we tried to reassign client tiers on the fly, but support jumped on a Zoom call and sorted it out pretty quickly. Review collected by and hosted on G2.com.

I had two pen test quotes on my desk, both wanted access to everything and about two weeks. A colleague at another firm mentioned Leaktrace so we tried that first since it didn't need anything from us. No logins, nothing installed. Report came back in 3 days. First thing on it was that anyone could send an email as our firm and it would get delivered. I asked our IT guy about it and he went a bit quiet, then fixed it that afternoon. Apparently, a pen test wouldn't have flagged that because it's not really a hole, it's a record we never set up. Review collected by and hosted on G2.com.

It's not a pen test and they say so. So if you need someone actually trying to get in, you still need that. I also found the full technical document heavy going, I read the short one and gave the rest to IT. Review collected by and hosted on G2.com.

It said exactly what was missing and I could verify each item myself. Our IT company had been "handling" security for two years and had never looked at us from outside. The report covered our mail records, our website, our staff addresses in breach data and whether anyone had registered names like ours. Nothing was dressed up. Two items were marked as housekeeping and said so. Review collected by and hosted on G2.com.

Had to google what a DMARC record was. A short video for that one would help Review collected by and hosted on G2.com.

The lookalike domain monitoring caught spoofed setups before our clients even noticed them. We handle IT for around 60 manufacturing plants, and LeakTrace flagged three lookalike domains with live mail servers targeting vendor invoices. Spotting those fake domains early gave us time to run takedowns before any wire fraud happened. Review collected by and hosted on G2.com.

Fine-tuning alert thresholds took a bit of tweaking at first so we didn't get pinged for parked sites, but support jumped on a call and helped us iron out the rules. Review collected by and hosted on G2.com.

I liked that LeakTrace gave an actual answer for each item and, for the no's, told us what to change. Most of it was settings, so our IT company did it in an afternoon and we didn't buy anything. The form went in with answers I can defend, and having the PHIPA piece next to each item made explaining it to the doctors a lot easier. The initial setup was smooth. Review collected by and hosted on G2.com.

I found out by reading the PDF that two staff passwords from an old breach were still in use. I would have liked a call that morning. Review collected by and hosted on G2.com.

They caught a domain registered just five weeks ago that copied our firm name almost letter for letter. It had full mail records set up to send and receive email, but no actual website attached to it. That kind of setup is rarely an accident, someone was clearly getting ready to impersonate us. Review collected by and hosted on G2.com.

It obviously can't tell you who registered the domain because of privacy shields, so you are still left wondering who is targeting you. Review collected by and hosted on G2.com.

I was worried an outside report would make my company look bad. It did find a few open items, but the wording gives our team credit for closing them, and the lookalike domains aren't something we could have prevented anyway. It ended up turning into billable work for us. Review collected by and hosted on G2.com.

Wish I could offer it under my own MSP branding, but that's not an option. Review collected by and hosted on G2.com.

They flagged two domains. One of them was actually an old name we bought during a rebrand years ago and forgot we still owned. Review collected by and hosted on G2.com.

Since one of the findings was our old domain I had to write in and tell them so they could update the report. They fixed it quick, but I had to point it out. Review collected by and hosted on G2.com.

I use LeakTrace to help us manage records. Looking at everything across all six clinics together made the difference. LeakTrace found that one clinic had a document store open without a login, while two others could potentially have emails sent in their name. The health privacy concern next to the finding helped get the owner to take action, and everything is now closed and confirmed in writing. I found the initial setup user friendly. Review collected by and hosted on G2.com.

I found that LeakTrace assumes I have someone technical to send parts of the report to. I don’t, so I had to follow the steps myself. Review collected by and hosted on G2.com.

I like that LeakTrace found a domain one letter off ours and a file share that opened without a password. The scanner never flagged either because neither is a vulnerability the way those tools think. Somebody at LeakTrace actually read the result and thought about what a person would do with them. Initial setup was smooth. Review collected by and hosted on G2.com.

I find that some things are rated more severe than I would for a firm our size. It seems like the same scale is used for everyone, I guess. Review collected by and hosted on G2.com.