You run the business. We turn cyber signals into decisions.
Every finding ships with a decision: act today, wait a week, or call a specialist. No CVEs, no jargon, no "contact sales".
TRUSTED BY
WHY SYCRION
A security specialist isn't needed every month.
€6,000
per month
In-house CISO. Always on payroll.
€3,500
per month
Agency retainer. Day-scale response.
€950
per month
Sycrion. Only when something happens.
You pay for monitoring. A specialist is called only when we find a real risk.
What you'll see in the report.
What we typically find online.
WHERE WE LOOK
5 sources. One scan.
All five every day. In parallel.
When passwords end up in public code by accident.
When forgotten files stay in the internet archive.
When attackers see all your hidden subdomains.
When people talk about your company on hacker forums.
When your name shows up on a breach list.
HOW IT WORKS
Three steps — from your domain to first evidence.
Submit your domain
We collect evidence
You get the report
PERIMETER
Observation, decision, boundary.
In perimeter
- Public attack surface.
- Code, key, and file leaks.
- Executive-ready decision.
Out of perimeter
- Active pentest and exploits.
- Critical infrastructure without consent.
- Legal counsel.
The boundary is explicit. For what is outside it, we will point you to a licensed contractor.
Pricing without "contact sales".
Start with a free scan. Decide on monitoring once you see what we find.
Deep scan plus a specialist walkthrough.
- 5 sources plus deep correlation
- Decision Memorandum L1–L4
- 30-minute video walkthrough
1 domain. 24/7.
- Daily checks
- Email alerts on findings
- Monthly report
5 domains. Priority.
- Up to 5 domains
- Alerts within 15 minutes
- Board summary report
Questions we get most often.
Is this just a GitHub scanner?
No. GitHub is one of five sources. We also monitor the Wayback Machine archive, Certificate Transparency logs (crt.sh), public paste sites and ransomware leak sites — every source runs on every scan and on every Watch/Pro monitoring cycle. GitHub is the most famous source; it is not the most common one for finding leaks.
Are you replacing my cybersecurity consultant?
No. Sycrion Reveal monitors public sources and delivers evidence. Strategy, security policies, incident response — those stay with a human. We take the routine "who watches five sources every day" off your desk.
Do you need access to our systems?
No. We only inspect public sources: GitHub, paste sites, Wayback Machine, certificate transparency, ransomware leak sites. No agent installed, no credentials taken, no entry into your infrastructure. By design — it shrinks the trust surface.
Are you GDPR-compliant?
Yes. Infrastructure in the EU (Vercel + Neon, EU region). A standard Data Processing Agreement is available on request. Scan data is retained per the policy described in the Terms of Service.
What does "24/7 monitoring" mean in practice?
Every 24 hours we run an automated sweep across all five sources, indexed against your company keywords (domain, email patterns, project names). Email alert fires within 1 hour (Watch) or 15 minutes (Pro) of detection.
What if you find nothing in the first scan?
Good. But it is important to keep checking — leaks are published every week. Watch subscription pays for itself the first month something appears. Annual contract: –20%.
Can I cancel any time?
Yes. Monthly subscription — cancel before the end of the billing period. Annual — 30-day notice before renewal. No penalties, no hidden terms.
Is this legal advice or an audit?
No. Sycrion Reveal is an information service — it does not replace an audit, legal opinion or the decision of a qualified specialist. We provide evidence and context; final judgement stays with the recipient.