Data Discovery

How to Determine your Exposure Level

As technology advancements grow continuously faster with each day, the average end-user may feel overwhelmed by the required knowledge needed to understand where you may be vulnerability on your network. To help ease this learning curve, We here at RingVPN have created a little "shortcut" list to help you determine your overall personal risk. Some of the sources included are not sponsored or affiliated with RingVPN; they are free solutions that anyone can take advantage of to gain quick insight into your network. Many of the scary results that could result from these tools can be remediated by implementing a VPN service like the one offered here at RingVPN. We have broken down the tools by "Network Exposure" and "Identity Exposure."

Network Exposure

DNS Leak Test

This DNS test provides you with the current status of the broadcast IP range of your connected network. Without a VPN enabled to obfuscate your traffic, anyone that is proactivity watching your network, might easily pick up on some of your activity. To check to see if you are broadcasting your DNS information, Click here to use a free version that RingVPN provides.

Webrtc Leak Test

This Webrtc test provides excellent insight to your browser set up and tells if your current configuration is vulnerable to sniffing by third-party vendors. When you visit certain websites, other third parties pay that website to harvest their visitor's data from each time you interact with a web page. These third parties want to gather information like links clicked, time spent on-page, and possibly other sites you have visited today. Malicious actors can use this same browser snooping technology to collect things like credentials, communication data, and even Camera footage.

Identity Exposure

Now that you have a solid understanding of how to detect and possibly prevent your network activity from being snooped on let's discuss the alternative effort of identifying sensitive information that may have already been compromised.

Have I been pwned

"Have I been pwned" was the frontrunner website for determining if your email address was involved in any known data breaches. It provides you with a risk score, a list of breaches that your account is affected by, as well as a good write up about each breach. "Have I been pwned" is a great starting point for sensitive data discovery.

Spycloud

Spycloud is a great free resource for personal use (associated cost for monitoring corporate domains). This solution allows you to create a monitoring dashboard around your information. It can track specific accounts as well for any activity related to a known security breach. Spycloud has access to rile reports from disclosed breaches and will notify you when any of the following bits of information are discovered in a breach:

  • SSN
  • Email address
  • Phone number
  • Account Passwords
  • Credit Cards

If it has discovered a breached password, it will tell you the password and the account so you can change it immediately. Lastly, Spycloud does a great job identifying sensitive documents that contain your information that has been found publically online.

Project.carrot2

Carrot is considered a visual search engine that helps organize your search results into categories and groups to help you sift through false-positive faster. You would use this site to see if there are any particular documents publicly available online about yourself or to see what your online profile looks like to the public eye. Carrot does a great job of quickly showing you from a high level your exposure much faster than you could by utilizing Google.