- Home
- Dark Web Monitoring Services
- CyberGuard360 Deep Diver
CyberGuard360 Deep Diver
The company lists its address as 1470 Tobias Gadson Blvd, Ste 202, Charleston, SC 29407, and says it is headquartered in the United States.
What it is
CyberGuard360 Deep Diver is a dark web monitoring engine for managed service providers (MSPs). It watches breach dumps and infostealer malware logs for compromised credentials and session cookies linked to protected domains. CyberGuard360 says stolen cookies can let attackers enter authenticated sessions and bypass MFA; its monitoring is intended to surface cookie exposure before attackers use it. Findings can be sent to the MSP or directly to the client as white-labeled alerts under the MSP’s brand. The platform syncs users from Microsoft Entra ID or Google Workspace and supports phishing delivery to synced inboxes. Its broader tools include security awareness and AI-use training, phishing simulations, policy and document management, security testing, and risk and compliance assessments. CyberGuard360 says it serves MSP partners exclusively and directs other buyers to an MSP partner. The free Spark account offers five dark web prospect scans per month and 1,000 Swift Owl AI credits per month, but does not include dark web monitoring. Launchpad lists monitoring as an add-on, while Essential and Professional include it. Listed paid plans start at $79 a year, billed annually, for Launchpad.
For and against
For
- Monitors breach dumps and infostealer logs.
- Can alert MSP clients under the MSP’s brand.
- Syncs users from Microsoft Entra ID or Google Workspace.
- Includes dark web monitoring in Essential and Professional.
Against
- Spark has no dark web monitoring.
- Launchpad monitoring is an add-on.
- CyberGuard360 serves MSP partners exclusively.
- Free trial is not offered.
The verdict
Deep Diver focuses on credential and session-cookie exposure, with alerts delivered through MSP partners. The free Spark account provides prospect scans but not ongoing dark web monitoring.
Who it suits
It is intended for MSPs monitoring credential exposure across protected domains and sending branded alerts to clients. Non-MSP buyers are directed to an MSP partner.
Plans and prices
Spark
5 dark web prospect scans/month · 1,000 Swift Owl AI credits/month · training and weekly shorts · auto-branded marketing templates
Read 8 Oct 2026 · cyberguard360.com
Launchpad
25 end-user licenses · 25 dark web scans · NFR account for 3 users · For MSPs under $650k in revenue
Read 8 Oct 2026 · cyberguard360.com
Essential
Unlimited training for clients and users · 50 dark web scans · 2 CRIS credits · NFR account for 10 users
Read 8 Oct 2026 · cyberguard360.com
Professional
Monthly penetration test, vulnerability scan, advanced and quick assessment credits · 100 dark web scans · 10 CRIS credits · NFR account for 10 users
Read 8 Oct 2026 · cyberguard360.com
On the record
- Account takeover
- The maker says infostealer monitoring detects stolen session cookies before attackers can use them, helping stop account takeover early.cyberguard360.com · read 7 Oct 2026
- Alerts
- The platform says Deep Diver can alert the partner or send white-labeled alerts directly to the client.cyberguard360.com · read 8 Oct 2026
- Audience
- CyberGuard360 says it is built exclusively for managed service providers and delivers services through MSP partners.cyberguard360.com · read 8 Oct 2026
- Company history
- The company says CyberGuard360 was born in 2019 after co-founder Al Alper sought a way to manage compliance for hundreds of MSP clients.cyberguard360.com · read 8 Oct 2026
- Cookie exposure
- The maker says stolen session cookies can let attackers access an authenticated session and bypass MFA.cyberguard360.com · read 7 Oct 2026
- Delivery
- Alerts for dark web and infostealer findings can be sent to the MSP and its client under the MSP’s brand.cyberguard360.com · read 7 Oct 2026
- Exposure monitored
- Deep Diver monitors breach dumps and infostealer malware logs, including stolen credentials and session cookies that may let attackers access authenticated sessions and bypass MFA.cyberguard360.com · read 8 Oct 2026
- Free access
- Spark is a free account with five dark web prospect scans per month and 1,000 Swift Owl AI credits per month.cyberguard360.com · read 7 Oct 2026
- Integrations
- The platform can sync users from Microsoft Entra ID and Google Workspace, and supports direct email delivery for phishing simulations.cyberguard360.com · read 8 Oct 2026
- Notable limits
- Pricing states that Spark has no dark web monitoring, while Launchpad offers it as an add-on and Essential and Professional include it.cyberguard360.com · read 7 Oct 2026
- Other platform features
- The wider platform includes security awareness and AI usage training, AI phishing simulations, policy and document management, security testing, and CSET-based risk and compliance assessments.cyberguard360.com · read 7 Oct 2026
- Phishing
- Phishing campaigns include AI-written lures, and users who click are automatically enrolled in refresher training.cyberguard360.com · read 8 Oct 2026
- Policies and documents
- Policy management includes NIST-based policies, bulk deployment and employee attestation tracking; document storage has access controls and audit logs for views and changes.cyberguard360.com · read 8 Oct 2026
- Product
- Deep Diver is CyberGuard360’s dark web monitoring engine, which watches for compromised credentials tied to protected domains and raises white-labeled alerts to partners or their clients.cyberguard360.com · read 8 Oct 2026
- Product identity
- Deep Diver is CyberGuard360’s dark web monitoring engine for MSPs, monitoring compromised credentials tied to protected domains and issuing white-labeled alerts.cyberguard360.com · read 7 Oct 2026
- Security
- The maker describes its Swift Owl private AI workspace as ISO 27001 certified; the page does not state that Deep Diver itself is certified.cyberguard360.com · read 7 Oct 2026
- Security and compliance
- CyberGuard360 describes Swift Owl as a private AI workspace built on client documents and ISO 27001 certified; its risk assessments map to frameworks including CMMC, CIS, HIPAA, FTC and PCI.cyberguard360.com · read 8 Oct 2026
- Service limits
- The pricing page lists dark web scan allowances of 5 per month for Spark, 25 for Launchpad, 50 for Essential and 100 for Professional.cyberguard360.com · read 8 Oct 2026
The review
Overview
CyberGuard360 Deep Diver is a credential and session-cookie monitoring service for managed service providers (MSPs). It fits providers that want to deliver branded exposure alerts alongside security training and compliance services. Its value depends on working through an MSP: CyberGuard360 serves that channel exclusively.
Key features
Deep Diver scans breach dumps and infostealer malware logs for credentials and session cookies associated with protected domains. A stolen cookie can give an attacker access to an already authenticated session and bypass MFA, making this monitoring useful for spotting an exposure that password-focused checks may miss. CyberGuard360 says early detection can help prevent account takeover; an alert is a chance to respond, not a guarantee that an account will be protected.
Findings can be routed to the MSP or sent directly to its client with the provider’s branding. That gives MSPs a way to make monitoring part of their own client service. Microsoft Entra ID and Google Workspace user syncing also supports phishing campaigns delivered to synced inboxes.
The wider platform combines monitoring with self-paced security awareness and AI usage training, weekly security shorts, AI-written phishing campaigns, policy and document management, security testing, and risk and compliance assessments. People who click a phishing lure are automatically assigned refresher training. NIST-based policies can be deployed in bulk, with employee attestations tracked; document access controls and audit logs cover views and changes. Assessments map to frameworks including CMMC, CIS, HIPAA, FTC and PCI.
CyberGuard360 describes Swift Owl, its private AI workspace, as ISO 27001 certified. That certification applies to Swift Owl; Deep Diver itself is not identified as certified.
Pricing
CyberGuard360 uses a freemium model, with paid plans shown from $79 a year, billed annually. Spark is free forever and allows five dark web prospect scans and 1,000 Swift Owl AI credits per month, plus training, weekly shorts and auto-branded marketing templates. It has no ongoing dark web monitoring, so it is a way to prospect and explore the platform rather than protect client domains continuously.
Launchpad costs $79 a year, billed annually, and is intended for MSPs under $650k in revenue. It includes 25 end-user licenses, 25 dark web scans and an internal-use account for three users. Dark web monitoring is an add-on, as are AI phishing, risk assessments, compliance, penetration testing and vulnerability scanning. Its low entry price comes with a small scan allowance and extra charges for monitoring and much of the security toolkit.
Essential costs $299 a year, billed annually. It includes unlimited client and user training, 50 dark web scans, two CRIS credits, an internal-use account for 10 users, a compliance bundle and dark web monitoring, risk assessment and PCI. Penetration testing and AI phishing remain add-ons. This is the more complete fit for an MSP that needs ongoing monitoring and compliance features without the higher tier’s monthly testing package.
Professional costs $399 a year, billed annually. It includes 100 dark web scans, 10 CRIS credits, an internal-use account for 10 users, and monthly penetration testing, vulnerability scanning, and advanced and quick assessment credits. Testing and compliance for more clients and AI phishing are add-ons. It suits providers seeking recurring testing capacity as well as monitoring, though add-ons can still shape the final cost. The published scan allowances are 5 per month for Spark, 25 for Launchpad, 50 for Essential and 100 for Professional. No free trial is offered.
Platforms
CyberGuard360 is web-based. The listed identity integrations are Microsoft Entra ID and Google Workspace. The company offers phone support Monday to Friday, 9 to 6 ET, and says it responds to inquiries within one business day.
Who it's for
Deep Diver is for MSPs monitoring client domains and delivering security services under their own brand. Providers that want only occasional prospect scans can start with Spark, while those selling ongoing monitoring need Launchpad’s monitoring add-on or an Essential or Professional plan. Organizations seeking to buy monitoring directly should look to an MSP partner instead.
Pros and cons
- Pros: Monitoring includes infostealer logs and session cookies, extending exposure alerts beyond compromised credentials in breach dumps.
- Pros: MSP-branded alerts and identity syncing support a client-facing service connected to existing user directories.
- Pros: Training, policy controls and risk assessments can sit alongside monitoring, with click-triggered phishing refreshers reinforcing awareness.
- Cons: The service is restricted to MSP partners, so businesses cannot use it as a direct standalone purchase.
- Cons: Spark has no ongoing monitoring, and Launchpad charges extra for it; providers need a higher plan or an add-on to make monitoring continuous.
- Cons: Scan allowances are capped by plan, and several testing and phishing capabilities remain add-ons even on paid tiers.
Alternatives
For another dark web monitoring option, compare the Dark Web Monitoring Services directory.
Choose Deepinfo Dark Web Monitoring if you need Android, iOS or API access, or want a free trial; it has no free plan and uses an annual commitment as standard.
DARKX is worth considering for web or API access with a free plan and free trial; its free tier provides 15 monthly credits for one domain, IP or phone.
Jsmon Dark Web Monitoring offers a one-time trial with 1,500 lifetime credits, findings and leaked secrets, and email alerts, making it an option for a limited initial scan rather than ongoing free use.
PhishEye is the alternative to consider for brand and typosquat monitoring: its free tier covers one brand and one typosquat scan, with 30-day history and no takedown requests.
RiskProfiler KnyX, Symbol Cyber Threat Surveillance, Allure Security Dark Web Monitoring and Dark Web ID are other paid options to compare.
Verdict
CyberGuard360 Deep Diver is a strong fit for MSPs that want branded alerts for credential and session-cookie exposure within a broader training and compliance platform. Its main advantage is the combination of infostealer monitoring and client-ready delivery; its main drawback is channel access, compounded by scan caps and add-on costs. MSPs needing ongoing monitoring should budget for Essential or Professional, or account for Launchpad’s monitoring add-on. Businesses outside the MSP channel should choose a service they can purchase directly.