Frequently asked questions

It looks at a company's public footprint and scores how easily its leaders and brand could be impersonated by email spoofing, lookalike domains, voice cloning and leaked payment details.

No. Only domains you own or have written permission to assess. Every scan asks you to confirm this.

No. It reads public DNS records, a few public pages on the company website and public search results. It never logs in or exploits anything. The website security check in the Toolbox makes two ordinary requests to the site you enter.

It reflects how much public audio and video of your leaders exists, which is what a voice-cloning attack needs. It does not mean anyone is cloning your leaders.

It is a guide built from public signals and weights we chose. Use it to decide what to fix first, not as proof of how safe you are.

Security consultants, security and risk teams, awareness teams and managed service providers who assess clients.

Your account, your scan results and the reports you generate. They stay in your account until they are removed. Ask us if you want them deleted.

Yes. Add a client label to each scan, export your history, and put your own name and logo on the report.

Yes, for accounts where it is enabled. You create a personal token in your account.

DeepExpose is invite-only for now. Send a request and we will review it.