← Back to Hirdman
Vendor comparison and checklist

The showcase shows the leak. We explain what it means for your business.

This page compares Hirdman with showcase vendors and lists 26 questions to ask any breach monitoring vendor, with our answer to each.

Showcase: raw export
Us: verified and prioritized
The picture is complete: what to fix now, what can wait.
Summary

The comparison in numbers

0
comparison points
0
new brand protection points
0
checklist questions
From the field

No breaches on the domain, but infrastructure keys were exposed

During an attack surface review we found two subdomains running a UI development tool. The version was vulnerable to information disclosure: an environment file ended up in the public build, along with access tokens for repositories, cloud roles, databases and storage.

There was no leaked email or password for the domain, so breach monitoring would have shown nothing. The CVSS score rated the flaw "low" (3.1), but the file held working keys. We confirmed one token by accessing a repository, and gave the client all compromised secrets for rotation.

0
environment variables in one exposed file, over 700 across all builds. Production and cloud keys were readable by anyone who could read the public build.
Comparison table

Showcase and analysis, criterion by criterion

CriterionShowcase vendorUsWhy it matters to the client
Checklist

26 questions for your vendor, and our answers

Download as PDF (3 pages)
No.QuestionRed flagOur answer

Red flags: typical answers from showcase vendors, not a description of any specific vendor.

Let's check it on your data

A free check of your current vendor: we show the difference live, with no obligation.

Discuss a side-by-side check