Penetration testers
Find leaked employee logins tied to client domains — VPN, SSO, mail — and prioritize what matters during an engagement.
Early access · Built for security research
Find exposed credentials before attackers do
ZerArch scans company domains for leaked employee credentials, ranks them by value, and lets you reveal passwords with daily credits — built for security researchers.
You're on the list. We'll be in touch soon.
Free tier included · No credit card required
Credentials
acme-corp.com · 847 exposed
Scans
12
Credentials
2,341
High-value
186
Reveals left
412
| Score | URL | Username | Password | Verify |
|---|---|---|---|---|
| 42 | login.acme-corp.com/sso | j.smith@acme-corp.com | •••••••••• |
Valid |
| 38 | vpn.acme-corp.com | m.chen@acme-corp.com | — | |
| 31 | mail.acme-corp.com/owa | a.patel@acme-corp.com | — | |
| 18 | portal.acme-corp.com | contractor@vendor.io | — | |
| 12 | wiki.acme-corp.com | dev-team@acme-corp.com | •••••••• |
Valid |
Built for
Who uses ZerArch
Red teams
Map credential exposure across targets. Track what's leaked, what's high-value, and what's still valid.
Threat intel
Monitor domains for new exposures. Spot trends and verify which credentials are still active.
Security research
Explore breach data with structure — scored, grouped by domain, exportable when you need to report findings.
Why ZerArch
Credential intelligence, not just a dump
Scan targets, score exposures, verify validity, and export findings — all in one place.
Domain scanning
Add a single domain or bulk-scan hundreds. Rescan anytime and track progress in real time.
Value scoring
Credentials ranked by employee signals, login URLs, and password strength. High-value leaks surface first.
Credit-based reveals
Passwords stay hidden until you reveal them. Free tier to explore, Researcher plan when you need scale.
Live verification
Check if a credential is still valid, invalid, or unknown — without leaving the platform.
Dashboard analytics
Leak trends, top exposed domains, and usage quotas at a glance.
CSV export
Export findings on the Researcher plan. Drop results straight into your reports.
How it works
Three steps to actionable intel
From domain to verified credential in minutes.
Add a domain
Enter a company domain or paste a bulk list. ZerArch queues scans automatically.
Review exposures
Browse credentials grouped by domain, filtered by score. The best targets rise to the top.
Reveal & verify
Spend credits to reveal passwords, check if they still work, and export your findings.
FAQ
Common questions
What is ZerArch?
- A platform for security researchers to scan domains for leaked credentials, score them by value, reveal passwords with credits, and verify if they still work.
Who is it for?
- Penetration testers, red teams, and threat researchers doing authorized work. Not a raw breach dump — structured results you can actually use.
Is there a free tier?
- Yes. Daily scan and reveal credits on the free plan. A Researcher tier with higher limits and CSV export comes at launch.
Can I verify credentials?
- After revealing a password, you can check whether it's valid, invalid, or unknown — right in the app.
Is this legal?
- ZerArch is for authorized security research only. Only scan domains and systems you're permitted to test.
Get early access
Join the waitlist and be first to scan when we launch.