Built with Laneden
Built by the team that tests you.
Laneden is the lead supplier and co-owner of Gravitas, an attack-surface intelligence platform. It correlates breach data, stealer logs and dark-web exposure so organisations see what attackers actually hold on them — in real time.
18B+
Breach records
1.1M+
Stealer profiles
704
Dark web sites
241
Active campaigns tracked
Figures from the Gravitas platform, as at August 2026.
What Gravitas watches
Breach & credential monitoring
Exposed credentials across breach corpora and stealer logs — matched to your domains and people, not just keywords.
Campaign intelligence
Active stealer campaigns tracked with attribution, so you know which operations are touching your organisation.
Brand protection
Phishing domains and impersonation infrastructure detected early, with takedowns handled for you.
External asset discovery
The internet-facing estate as an outsider maps it — including the personal infrastructure and unowned domains nobody put on an asset register.
People & executive exposure
Named individuals mapped across the open, deep and dark web: registers, brokers, social leakage, likeness and recovery-question fuel.
Managed removal & re-check
Opt-outs and takedowns filed under signed authority, evidenced in a per-person ledger, then re-checked on a cadence because brokers re-list.
What the platform shows you
The platform we co-own and supply — the views your exposure actually lands in.
Screenshots show synthetic demo data.
Easy to find is not the same as useful to attack
Exposure counts on their own send you after the wrong person. Gravitas scores every subject twice — how easy they are to find, and how much an attacker gains from what is public — because the answers are usually different people.
The reading
Bubble size is how much we found. The loudest person is rarely the most useful one — and the fix list is different for each.
- AChief financial officer71 findings · Easiest to find
- BIT & security director96 findings · Most useful to attack
- CChief executive58 findings
- DChief operating officer63 findings
- EChief technology officer47 findings
- FHead of engineering55 findings
524 findings by surface
Search, social, press, public registers
Broker-gated and paywalled records
Breach corpora and stealer logs
Illustrative — synthetic data. Roles, scores and counts are invented to show the shape of the output.
Every finding lands on someone's desk
Intelligence that stops at a list is just a longer to-do list. Each exposure carries its source, its impact in plain English, an owner, a clock and the evidence that closes it — so “done” is something you can check rather than something you are told.
| Priority | What is open | Why it matters | Owner | Proof of close |
|---|---|---|---|---|
| P024h | A named director's credentials appear in a fresh stealer log | The session tokens in that log walk straight past the password and the second factor. | OwnerIT + individual | Proof of closePassword rotated · sessions revoked · passkeys enrolled |
| P072h | A director's home network is reachable from the internet | Take those personal accounts and you can force password and MFA resets on everyone else. | OwnerIT + individual | Proof of closePanels unreachable · hardware keys enrolled · mobile port-out frozen |
| P07d | The corporate domain reports forged mail but does not block it | Finance receives payment instructions that pass every check an inbox performs. | OwnerMail administrator | Proof of closeTest spoof rejected · reports routed to a role mailbox |
| P1Next filing | A director's home address sits on a public filing | A free, entirely legal home address, filed next to payment authority. | OwnerCompany secretary | Proof of closeRegister shows a service address · confirmation statement filed |
| P148h | A domain published as a contact address is unregistered | Anyone can buy it and send mail that looks like it comes from you. | OwnerBrand | Proof of closeDomain registered and parked under your ownership |
Illustrative — synthetic data. A real board is drawn from your own findings.
Removal is not one-and-done
Finding an exposure is the easy half. Gravitas files the opt-outs and takedowns under signed authority, records the evidence per person, then goes back and looks again — because a broker that removed you in March will happily re-list you in September.
M1Assessment
The map is drawn: every exposure, its source and who owns the fix.
M4Removal sprint
Opt-outs and takedowns filed under signed authority, then confirmed.
M7Brokers re-list
Records reappear from a fresh scrape. The re-check catches them.
M10Second wave
A public event re-seeds the brokers. Same loop, no new engagement.
Illustrative — synthetic data. The rebound is the point, not the numbers.
Point-in-time testing. Continuous visibility.
Penetration testing
A rigorous snapshot of your defences at a moment in time — scoped, evidenced and independently accredited.Explore our services →
Gravitas monitoring
Watches the space between tests: new breaches, new campaigns, new exposure — surfaced as it appears.withgravitas.io → (opens in a new tab)
The two already work together: the monitoring tier of our Executive Threat Assessment is powered by Gravitas, keeping watch over your senior people long after the initial assessment is delivered.
How Gravitas is delivered
Managed subscription
A managed, recurring service — we run the platform and hand you the findings that matter, rather than another console to staff.
Scoped to your estate
Priced to what you are watching — domains, brands, executives and assets in scope — and confirmed before anything starts.
Alongside testing
Often bought with a penetration test or Executive Threat Assessment, so a point-in-time result becomes year-round visibility.
Want testing and monitoring together?
Tell us what you're protecting — we'll scope a combined engagement.
Free remediation retesting* to confirm your fixes (subject to assessment size).