Bring Active Directory and password security together
Two separate controls, one up-to-date dataset: audit existing Active Directory passwords on-premises, and use the API to block leaked passwords when new ones are chosen.
Password check API
Is the password a user just chose leaked or risky?
SSPR / IAM password screen
Full matching is done on the client
Hash prefix only
Response
GriPar API
- Dataset
- Billions of passwords and fresh gray-zone data
Neither the plaintext password nor the full hash is sent
- Integration
- SSPR, Active Directory, LDAP and IAM
On-premises AD audit
Have any existing Active Directory passwords been leaked?
- Active Directory password hashes
- Comparison against a local leaked-hash set
- IT/CISO alert and Password Hygiene Report
The status is reassessed at the next periodic scan
No data crosses the boundary
API packages and corporate deployment are planned separately
You can use the GriPar API with one of the packages. On-premises AD scanning and integration support are planned through a proposal tailored to your organization.
GriPar API
Standard package
Free
Basic querying and integration.
Enterprise package
High volume and SLA
High query volume, an enhanced SLA, custom integration support, and tiered analytics reporting.
Corporate service
Corporate deployment and support
By proposal
On-premises AD scanning and SSPR/IAM integration are planned together with your organization.
How we work
We agree where password checks will fit into your organization’s processes.
Examine password processes
We identify the security needs in your password creation, reset and Active Directory processes.
Plan the integration
We assess API integration and the local comparison and reporting methods you need, then agree the deployment and data flow.
Review the results
We plan with your team how check results will inform password policies and remediation actions.
Detailed service description
Credential Stuffing, Password Spraying and Brute-Force attacks are among the most common and damaging intrusion vectors. NIST SP 800-63B digital identity guidelines and OWASP password security standards recommend blocking compromised, weak and dictionary-based passwords. LeakData GriPar provides proactive protection through a dynamic dataset built from billions of passwords and continuously enriched by global honeypot networks. GriPar takes its name from the “gray zone”: fresh threat data actively used by cybercriminals that has not yet reached public breach archives. Honeypot networks, Infostealer Logs and threat intelligence feed this zone. Two modules combine On-Premise Active Directory password exposure scanning and an API for SSPR portals and IAM systems, using the same continuously updated dataset.
Areas of work
Explore password checks, Active Directory assessment and API integration.
By quotation
Password check API
Blocks leaked or risky passwords when a new password is chosen; the plaintext password is never sent.
Privacy-Focused GriPar API
With X-Anonim architecture, plaintext passwords and full hashes are never sent to the server. A hash prefix acts as a partial identifier; the final full-hash match takes place on the user’s local client or browser.
SSPR and Compromised Password Blocking
SSPR (Self-Service Password Reset) portals and password creation screens query the GriPar dataset. Risky or leaked passwords are blocked immediately, guiding users toward a safe choice.
Identity Management and IAM Compatibility
Active Directory, LDAP and cloud IAM systems integrate through an API or webhook. The Standard package provides free basic queries and integration; Enterprise offers high query volumes, enhanced SLA commitments, dedicated integration support and layered analytics.
On-premises AD audit
Audits existing AD passwords on-premises using local hash comparison.
On-Premise Active Directory Password Exposure Scanning
AD password hashes are compared cryptographically with leaked password hashes on your own infrastructure. The AD database, hashes and user data stay inside the organization. IT/CISO teams receive proactive alerts and password-change workflows for compromised passwords, supported by a Corporate Password Hygiene Report for KVKK, GDPR and ISO 27001.
The dataset behind both modules
Both modules use the same dataset, updated from leak archives, a honeypot network, and Infostealer Logs.
Dynamic Dataset from Billions of Passwords
Billions of passwords from breach archives are analyzed to identify the world’s 100,000 most frequently used critical passwords. Instead of static lists, organizations receive a continuously updated dataset reflecting evolving threat actor tactics and techniques (TTPs).
Global Honeypot Network and Threat Intelligence
A global network of publicly exposed honeypots captures password patterns used by attackers and bots in real-time brute-force attacks. Infostealer Logs such as RedLine and Vidar and Dark Web/Deep Web intelligence immediately enrich the dataset with fresh gray-zone threats.
Service coverage
Local AD auditing and API integration provide two complementary controls in your password lifecycle.
Included work
- On-Premise cryptographic hash comparison and Password Hygiene Report
- Compromised password blocking through X-Anonim API in SSPR and IAM
- An up-to-date dataset from global honeypots, Infostealer Logs and threat intelligence
Delivery and follow-up
- The AD database, user data and password hashes remain on your infrastructure.
- The API never receives plaintext passwords or full hashes; matching takes place on the client.
- A free Standard package and an Enterprise package with high volumes, SLA commitments and dedicated support are available.
About LeakData GriPar
Why does GriPar use more than public breach lists?
Fresh gray-zone password data may not yet appear in public archives. Global honeypots, Infostealer Logs and Dark/Deep Web intelligence continually enrich the dataset.
How do AD scanning and the API complement each other?
The On-Premise module audits existing AD passwords by comparing hashes locally. The API blocks leaked or weak passwords when users choose new ones in SSPR and IAM screens.
Do our passwords or hashes leave the organization?
AD scans keep data on your local infrastructure. The X-Anonim API queries with a hash prefix only; plaintext and full hashes never reach the server, and final matching happens on the client.
Add password security to your identity workflows
Request an enterprise quotation for On-Premise AD scanning and SSPR/IAM integration.