Credentials
Dark Web Scan checks whether logins tied to your business are circulating from past breaches.
Free – no credit card required
What ransomware needs to get in
Ransomware rarely starts with a sophisticated exploit.
It starts with a phishing email, a stolen login, or a software vulnerability. Find out how exposed you are to each.
Leaked credentials tied to your organisation, from past breaches
Software vulnerabilities an attacker could exploit from the outside
Remediation guidance for what to fix first
How it Works
Vulnerabilities
Vulnerability Scan flags software vulnerabilities an attacker could exploit from the outside.
People
Subscribers can add Phishing Simulations and Security Awareness Training to test and train their people.
How ransomware gets in, and what HackRisk checks
| How ransomware gets in | Share of attacks | What HackRisk checks |
|---|---|---|
| Malicious email | 26% | Phishing Simulations |
| Phishing | 24% | Phishing Simulations and Security Awareness Training |
| Compromised credentials | 23% | Dark Web Scan |
| Exploited vulnerability | 18% | Vulnerability Scan |
Phishing, malicious emails, compromised credentials, and software vulnerabilities account for 91% of ransomware attacks.
Source: Sophos, The State of Ransomware 2026.
Free report vs subscription
| Feature | Free report + 30 days portal access | Subscribers |
|---|---|---|
| External scan | ✔ High-priority issues | ✔ All findings |
| Dark Web Scanning | ✔ Top five exposures | ✔ Every exposure and full history |
| Vulnerability Scanning | ✔ Top five most important results | ✔ Every result and prioritisation |
| Supply Chain Security | ✔ Add your suppliers, still available after your trial ends | ✔ Add your suppliers |
| Phishing Simulations and Security Awareness Training | ✖ Not available in free trial | ✔ Test and train your people |
| Portal access | ✔ 30 days access | ✔ Ongoing monitoring and access |
Frequently Asked Questions
Does HackRisk stop ransomware?
No single tool does. HackRisk finds the openings attackers use most, so you can close them before they do.
Where do the figures come from?
Sophos, The State of Ransomware 2026.
What does the free report not cover?
Phishing Simulations and Security Awareness Training are for subscribers. Your free report covers leaked credentials, vulnerabilities, and exposed assets.
What’s your HackRisk Score?
Get started and receive your free report within 24 hours.
Get your free report