> Lens_
Private Security Awareness.
Personal Action.
When your employees are found in stealer malware logs, notify them privately. Users review their compromised credentials, complete security training, and take action — without admins ever seeing their passwords or which services they use.
Privacy-First Design
Admins never see user passwords or services
Mobile-Friendly Experience
Quick, focused review on any device
Actionable Insights
Users know exactly which passwords to change
Corporate vs Supplier Aware
Flags exposed supplier logins (like Salesforce) that only the user can reset — separate from corporate accounts you can force-reset yourself
Built-in Security Training
Reinforce good password habits
AI Agent Ready via MCP
Send invites and manage tokens from AI agents via our MCP server
How It Works
A non-judgemental, mobile-first experience
Privacy by Design
Administrators never see user passwords, which services were compromised, or individual responses. Users review their exposure privately, maintaining dignity while taking action. Only aggregate completion metrics are visible to admins.
Send Lens Invites
When DarkStrata detects employees in stealer malware logs, notify them. Send invites manually with a single click, or configure automatic sending with rule-based controls.
- Send invites individually or in bulk with one click
- Enable automatic sending when new exposures are detected
- Target specific groups with tailored notification rules
- Auto-resend to users who haven't completed their review
Verify Identity
Users receive a private invite via email. They confirm their identity by entering their email address to access their personal review.
Review Compromised Credentials
Swipe through cards showing each compromised account — each flagged as a monitored corporate asset or a third-party supplier login (like Salesforce), so the ones only the user can reset stand out. See the service, optionally reveal the password, and confirm if it's yours. Admins never see this data — only you do.
Change Your Passwords
Lens guides each person through fixing what's exposed. It generates a strong replacement — three random words, following NCSC guidance — ready to copy, and they mark each account as changed. Admins only ever see completion status, never the new password.
Complete Security Training
Quick, bite-sized training on password hygiene, two-factor authentication, avoiding malware, and the future of passkeys. Takes just a few minutes.
Ready for Global Teams
Reach every employee in their preferred language(English)
Lens supports internationalisation out of the box. Deliver security awareness in the language your employees are most comfortable with, improving comprehension and completion rates across your global workforce.
Make It Yours
For enterprise customers, DarkStrata can be fully white-labelled to match your organisation's identity. Your team sees your brand, building trust and reinforcing that this is an official company platform.
Custom Colour Themes
Match your brand colours throughout the entire experience
Your Logos
Display your company logo so users immediately recognise the source
Custom Domain (CNAME)
Host on your own subdomain like security.yourcompany.com
Your team sees:
Verify your identity to continue
A seamless, branded experience that builds trust.
Empower Your Team to Take Control
Automatic notifications with built-in security training
Get Started