CyberGuard360 Deep Diver is a dark web monitoring engine for managed service providers (MSPs). It watches breach dumps and infostealer malware logs for compromised credentials and session cookies associated with protected domains. The maker says stolen session cookies can let attackers enter authenticated sessions and bypass MFA; Deep Diver is intended to identify such exposure before the cookies are used. Findings can be sent to an MSP or directly to its client as alerts carrying the MSP’s brand. The platform syncs users from Microsoft Entra ID or Google Workspace and supports phishing delivery to synced inboxes. The wider CyberGuard360 platform also includes security awareness and AI usage training, AI phishing simulations, policy and document management, security testing, and CSET-based risk and compliance assessments. CyberGuard360 says it serves MSP partners exclusively and directs other buyers to an MSP partner. The free Spark account includes five dark web prospect scans per month and 1,000 Swift Owl AI credits per month, but it does not include dark web monitoring. Paid plans start at $79/mo (annual); monitoring is an add-on for Launchpad and included in Essential and Professional. CyberGuard360 was founded in 2019 and is headquartered in Charleston, South Carolina.
Who it is for
Deep Diver is for MSPs monitoring compromised credentials linked to protected domains and sending branded alerts to clients. CyberGuard360 directs non-MSP buyers to an MSP partner.
What is good
- Monitors breach dumps and infostealer malware logs.
- Alerts can carry the MSP’s brand.
- Syncs users from Microsoft Entra ID or Google Workspace.
- Spark includes five prospect scans per month.
What to know first
- Spark has no dark web monitoring.
- Free trial is not available.
- CyberGuard360 serves MSP partners exclusively.
- Launchpad offers monitoring only as an add-on.
The Geeks Club review
CyberGuard360 Deep Diver: the full review
Deep Diver focuses on credential and session-cookie exposure, with findings delivered through the MSP relationship. The free Spark account provides prospect scans, not monitoring; paid plans start at $79/mo (annual).
Overview
CyberGuard360 Deep Diver monitors protected domains for stolen credentials and session cookies, with alerts delivered through an MSP. It is best suited to providers that want branded exposure alerts alongside client training and compliance services. Its focus is useful, but businesses cannot buy it directly outside the MSP channel.
Key features
Deep Diver searches breach dumps and infostealer malware logs for compromised credentials and session cookies. A stolen cookie may let an attacker reuse an authenticated session and bypass MFA, making this monitoring relevant beyond password exposure. CyberGuard360 says finding stolen cookies early can help stop account takeover; it is a detection measure, not a guarantee that an account will be protected.
Findings can be routed to the MSP or sent to its client under the provider’s brand. That gives MSPs a way to fold alerts into a client service, while organizations seeking an independent monitoring console should look elsewhere. The platform syncs users from Microsoft Entra ID or Google Workspace and supports phishing delivery to those inboxes.
The wider platform includes self-paced security awareness and AI usage training, weekly security shorts, AI-written phishing simulations, policy and document management, security testing, and risk and compliance assessments. Users who click phishing campaigns are automatically enrolled in refresher training. Policies include NIST-based templates, bulk deployment and employee attestation tracking; document storage has access controls and audit logs. Assessments map to frameworks including CMMC, CIS, HIPAA, FTC and PCI.
Pricing
The pricing model is freemium, but Spark is a prospecting account rather than a monitoring tier. It is free forever and allows five dark web prospect scans per month and 1,000 Swift Owl AI credits per month, plus training, weekly shorts and auto-branded marketing templates. It includes no dark web monitoring, so it does not provide ongoing exposure alerts.
Launchpad costs $79.00 per year, billed annually. It is aimed at MSPs under $650k in revenue and includes 25 end-user licenses, 25 dark web scans and an internal-use NFR account for three users. Dark web monitoring is an add-on, as are AI phishing, risk assessments, compliance, penetration testing and vulnerability scanning. The lower entry price therefore buys a small scan allowance, not included monitoring.
Essential costs $299.00 per year, billed annually. It includes unlimited client and user training, 50 dark web scans, two CRIS credits, an internal-use account for 10 users, a compliance bundle, dark web monitoring, risk assessment and PCI. Penetration testing and AI phishing are add-ons. This is the clearest fit for providers that want monitoring and compliance tools included without moving to Professional.
Professional costs $399.00 per year, billed annually. It includes 100 dark web scans, 10 CRIS credits, an internal-use account for 10 users, a monthly penetration test, vulnerability scan, and advanced and quick assessment credits. Testing and compliance for more clients and AI phishing are add-ons. It suits MSPs that need the higher scan allowance and recurring testing, though those extra capabilities do not make every service included.
The free plan has a five-scan monthly cap and no monitoring; paid scan allowances rise to 25, 50 and 100 across Launchpad, Essential and Professional. No free trial is offered. The listed paid entry is $79/mo (annual); the plan price shown for Launchpad is $79.00 per year, billed annually.
Platforms
CyberGuard360 is web-based. Microsoft Entra ID and Google Workspace syncing supports user provisioning for phishing delivery, but the product’s intended route to customers remains through an MSP partner.
Who it's for
This is for MSPs that want credential and cookie exposure monitoring as part of a wider security, training or compliance offering. Providers can use branded client alerts and pair them with awareness training, assessments and policy management. CyberGuard360 serves MSP partners exclusively and directs other buyers to an MSP, so an IT team looking for a standalone direct subscription should choose another service. The company lists phone support Monday to Friday, 9 to 6 ET, and says it replies to inquiries within one business day.
Pros and cons
Pros
- Session-cookie monitoring: It covers infostealer logs as well as breach dumps, addressing exposure that may enable MFA bypass.
- Branded alert delivery: MSPs can send findings to clients under their own brand or receive them directly.
- Broader service toolkit: Training, phishing, policy controls and assessments can sit alongside monitoring in the same platform.
Cons
- MSP-only access: Businesses cannot take the service directly and must work through a partner.
- Free Spark is not monitoring: Its five monthly prospect scans do not provide ongoing alerts.
- Lower paid tiers have trade-offs: Launchpad makes monitoring an add-on, while Essential and Professional add higher scan allowances and included capabilities at higher prices.
Alternatives
For a broader shortlist, see Dark Web Monitoring Services. Choose DARKX instead if a freemium web and API service with a free plan, free trial and credit-based searches better fits your needs. PhishEye is an option for brand monitoring, with a free plan covering one monitored brand and a single typosquat scan.
Jsmon Dark Web Monitoring may suit readers who want a no-card, one-time trial with lifetime credits and email alerts. Consider eMonitor instead for a paid, multi-platform offering whose annual Starter price is $3.90 per month for up to 25 users. Breachsense offers paid tiers structured around watchlist size, API query quota, alert latency, market coverage and takedowns.
Deepinfo Dark Web Monitoring is another paid option with an annual commitment as standard. Flare offers a 14-day free trial scoped to a domain, with no payment information required but an identity verification call required. Passguard is worth comparing if a fixed monthly price on an annual contract suits your budget; its Essential plan is 250.00 EUR per month, excluding VAT.
Verdict
Choose CyberGuard360 Deep Diver if you are an MSP that wants branded alerts for credential and session-cookie exposure, especially when training and compliance services are also part of your offer. Essential is the more direct entry point for included monitoring; Spark is only for prospect scans, and Launchpad requires a monitoring add-on. Look elsewhere if you need to buy directly or want a standalone monitoring service without the MSP relationship.
Get started with CyberGuard360 Deep Diver
- Open the CyberGuard360 website
- Create a free Spark account or select a paid MSP plan
- Use the web platform to configure protected domains
- Sync users from Microsoft Entra ID or Google Workspace
- Set alert delivery for the MSP or its client
- Add phishing, monitoring, testing, or compliance options available to your plan
What the free plan stops at
Spark provides five dark web prospect scans per month and 1,000 Swift Owl AI credits per month, but no dark web monitoring. Launchpad includes 25 scans, Essential 50, and Professional 100; monitoring is an add-on on Launchpad and included in Essential and Professional.
Questions about CyberGuard360 Deep Diver
Is CyberGuard360 Deep Diver free?
Spark is free forever with five dark web prospect scans per month and 1,000 Swift Owl AI credits per month. Spark does not include dark web monitoring.
How much do paid plans cost?
The pricing note lists paid plans from $79/mo (annual). The listed plans are Launchpad at 79.00 USD per year, Essential at 299.00 USD per year, and Professional at 399.00 USD per year, each billed annually.
Who can use Deep Diver?
CyberGuard360 says its services are built exclusively for managed service providers and delivered through MSP partners.
What data does Deep Diver monitor?
It monitors compromised credentials and stolen session cookies in breach dumps and infostealer malware logs tied to protected domains.
Can alerts carry an MSP’s branding?
Yes. Alerts can go to the MSP or directly to its client as white-labeled messages under the MSP’s brand.
Which platforms and integrations are supported?
Deep Diver is available on the web and syncs users from Microsoft Entra ID or Google Workspace.
CyberGuard360 Deep Diver plans and pricing
All plansCompared on dark web monitoring services
- Free plan
- Yes
- Paid from
- $79/mo
- Monitoring sources
- dark_web_and_breaches
- Business monitoring
- Yes
- Monitored data types
- compromised credentials; breach dumps; infostealer malware logs




