Passguard is a European dark web monitoring platform focused on infostealer intelligence for organizations. It monitors criminal marketplaces for infected devices and stolen sessions tied to customer domains and other verified assets. Its platform presents infections, traces, target lists, cracked passwords, breaches, and leaks, alongside alerts and reports for investigation work. Passguard says its technology checks whether stolen access is still active and revokes it before abuse. Monitoring starts once assets are verified, with no agent installation or access to customer systems required, according to the company. The REST API offers thirteen endpoints per domain for SIEM, SOAR, or product integrations; a mock server supplies synthetic data for integration development without a key. Passguard says customer data is hosted in the EU on European infrastructure, that it is GDPR compliant, and that ISO 27001 certification is in progress. Essential is 250.00 EUR per month on an annual contract, excluding VAT, and includes five assets and three user accounts. A free quick scan and a team-led proof of concept are also available.
Who it is for
Passguard is intended for company security teams, MSSPs and partners, procurement and risk teams, and SaaS providers. It suits organizations monitoring verified domains and other assets for infostealer-related exposure.
What is good
- No agent installation is required
- Monitoring does not require access to customer systems
- Alerts and reports support investigation workflows
- Mock API server uses synthetic data without a key
- EU hosting and GDPR compliance are stated
What to know first
- No free plan is listed
- Essential requires an annual contract
- Essential covers five assets and three user accounts
- Listed prices exclude VAT
Verdict
Passguard combines infostealer monitoring with investigation tools and API access. Buyers should consider the annual billing terms and asset and user allowances on listed plans.
Passguard plans and pricing
All plansCompared on dark web monitoring services
- Free plan
- No
- Monitoring sources
- dark_web_and_breaches
- Personal monitoring
- No
- Business monitoring
- Yes
- Monitored data types
- domains, portals, infected devices, sessions, cookies, usernames, passwords, operating systems, hostnames, IP addresses, device usernames, browser versions, stealer families, malware paths, infection timestamps
- Remediation support
- Yes
- Family monitoring
- No
