
CyberGuard360 Deep Diver
CyberGuard360 Deep Diver is a dark web monitoring engine for managed service providers (MSPs).
What CyberGuard360 Deep Diver is
CyberGuard360 Deep Diver is a dark web monitoring engine for managed service providers (MSPs). It monitors breach dumps and infostealer malware logs for compromised credentials and stolen session cookies connected to protected domains. CyberGuard360 says exposed session cookies can let attackers enter authenticated sessions and bypass MFA; the monitoring is intended to flag stolen cookies before they are used. Findings can be sent to the MSP or to its client as alerts carrying the MSP’s brand.
The web platform syncs users from Microsoft Entra ID or Google Workspace and supports phishing delivery to synced inboxes. CyberGuard360’s wider platform also includes security awareness and AI usage training, phishing simulations, policy and document management, security testing, and risk and compliance assessments. Its free Spark account includes five dark web prospect scans and 1,000 Swift Owl AI credits per month, but does not include dark web monitoring. CyberGuard360 says it serves MSP partners exclusively and directs other buyers to an MSP partner.
Good
- Monitors breach dumps and infostealer malware logs.
- Tracks stolen credentials and session cookies tied to protected domains.
- Can send findings to clients under the MSP’s brand.
- Syncs users from Microsoft Entra ID or Google Workspace.
- Includes five monthly prospect scans on the free Spark account.
Watch out
- Spark does not include dark web monitoring.
- Launchpad requires monitoring as an add-on.
- CyberGuard360 serves MSP partners exclusively.
Who it suits
Deep Diver suits MSPs that want to monitor compromised credentials tied to protected domains and send branded alerts to clients. Its broader training, phishing, policy, and assessment tools may also suit MSPs looking for related security services in the same platform.
Verdict
MSPs seeking branded dark web alerts for client domains should consider Deep Diver, especially if they also want the platform’s training and assessment tools. Look elsewhere if you are not buying through an MSP partner or need monitoring on the free Spark account.
Plans and prices
From CyberGuard360 Deep Diver's own pricing page, checked 8 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Spark | Free | 5 dark web prospect scans/month · 1,000 Swift Owl AI credits/month · training and weekly shorts · auto-branded marketing templates · Free forever |
| Launchpad | $79 a month | 25 end-user licenses · 25 dark web scans · NFR account for 3 users · For MSPs under $650k in revenue · Billed annually |
| Essential | $299 a month | Unlimited training for clients and users · 50 dark web scans · 2 CRIS credits · NFR account for 10 users · compliance bundle · Billed annually |
| Professional | $399 a month | Monthly penetration test, vulnerability scan, advanced and quick assessment credits · 100 dark web scans · 10 CRIS credits · NFR account for 10 users · Billed annually |
The facts
Each one read from CyberGuard360 Deep Diver's own pages, with the date it was checked.
What it does
- Account takeover
- The maker says infostealer monitoring detects stolen session cookies before attackers can use them, helping stop account takeover early.checked 7 Oct 2026
- Alerts
- The platform says Deep Diver can alert the partner or send white-labeled alerts directly to the client.checked 8 Oct 2026
- Audience
- CyberGuard360 says it is built exclusively for managed service providers and delivers services through MSP partners.checked 8 Oct 2026
- Cookie exposure
- The maker says stolen session cookies can let attackers access an authenticated session and bypass MFA.checked 7 Oct 2026
- Delivery
- Alerts for dark web and infostealer findings can be sent to the MSP and its client under the MSP’s brand.checked 7 Oct 2026
- Exposure monitored
- Deep Diver monitors breach dumps and infostealer malware logs, including stolen credentials and session cookies that may let attackers access authenticated sessions and bypass MFA.checked 8 Oct 2026
- Integrations
- The platform can sync users from Microsoft Entra ID and Google Workspace, and supports direct email delivery for phishing simulations.checked 8 Oct 2026
- Notable limits
- Pricing states that Spark has no dark web monitoring, while Launchpad offers it as an add-on and Essential and Professional include it.checked 7 Oct 2026
- Phishing
- Phishing campaigns include AI-written lures, and users who click are automatically enrolled in refresher training.checked 8 Oct 2026
- Policies and documents
- Policy management includes NIST-based policies, bulk deployment and employee attestation tracking; document storage has access controls and audit logs for views and changes.checked 8 Oct 2026
- Product
- Deep Diver is CyberGuard360’s dark web monitoring engine, which watches for compromised credentials tied to protected domains and raises white-labeled alerts to partners or their clients.checked 8 Oct 2026
- Product identity
- Deep Diver is CyberGuard360’s dark web monitoring engine for MSPs, monitoring compromised credentials tied to protected domains and issuing white-labeled alerts.checked 7 Oct 2026
- Security
- The maker describes its Swift Owl private AI workspace as ISO 27001 certified; the page does not state that Deep Diver itself is certified.checked 7 Oct 2026
- Security and compliance
- CyberGuard360 describes Swift Owl as a private AI workspace built on client documents and ISO 27001 certified; its risk assessments map to frameworks including CMMC, CIS, HIPAA, FTC and PCI.checked 8 Oct 2026
- Service limits
- The pricing page lists dark web scan allowances of 5 per month for Spark, 25 for Launchpad, 50 for Essential and 100 for Professional.checked 8 Oct 2026
- Support
- The company says it replies to contact requests within one business day and lists phone support Monday to Friday, 9 to 6 ET.checked 8 Oct 2026
- Training
- The platform includes self-paced security awareness, AI usage and phishing awareness tracks, plus weekly security shorts.checked 8 Oct 2026
- What it monitors
- Deep Diver watches breach dumps and infostealer malware logs for stolen credentials and session cookies.checked 7 Oct 2026
- Who it is for
- CyberGuard360 says it serves MSP partners exclusively and directs non-MSP buyers to an MSP partner.checked 7 Oct 2026
The company
- Company history
- The company says CyberGuard360 was born in 2019 after co-founder Al Alper sought a way to manage compliance for hundreds of MSP clients.checked 8 Oct 2026
- Founded
- 2019checked 28 Sep 2026
- Headquarters
- The company lists its address as 1470 Tobias Gadson Blvd, Ste 202, Charleston, SC 29407, and says it is headquartered in the United States.checked 7 Oct 2026
Money
- Free access
- Spark is a free account with five dark web prospect scans per month and 1,000 Swift Owl AI credits per month.checked 7 Oct 2026
Where it runs
- Other platform features
- The wider platform includes security awareness and AI usage training, AI phishing simulations, policy and document management, security testing, and CSET-based risk and compliance assessments.checked 7 Oct 2026
The full review of CyberGuard360 Deep Diver
Overview
CyberGuard360 Deep Diver monitors protected domains for compromised credentials and session cookies, with client-facing alerts delivered through an MSP. It suits managed service providers that want branded exposure alerts alongside training and security tools. Its main appeal is that client-ready monitoring sits inside a broader MSP platform; access is restricted to MSP partners.
Key features
Deep Diver scans breach dumps and infostealer malware logs for stolen credentials and session cookies. A stolen cookie may let an attacker reuse an authenticated session and get around MFA, so cookie monitoring addresses a meaningful account-takeover route that password-only alerts can miss. CyberGuard360 says early detection can help stop an attack, though an alert is a chance to respond, not a guarantee that access will be blocked.
Findings can be sent to the provider or directly to its client under the provider’s brand. That is useful for MSPs who need to present monitoring as part of their client service, but offers little to a business that wants to buy and manage the product itself. User syncing from Microsoft Entra ID or Google Workspace supports phishing delivery to synced inboxes.
The wider platform adds self-paced security awareness and AI usage training, weekly security shorts, AI-written phishing simulations, policy and document management, security testing, and risk and compliance assessments. Users who click a phishing lure are enrolled in refresher training. Policies support NIST-based templates, bulk deployment and employee attestations; document controls include access restrictions and audit logs. Assessments map to frameworks including CMMC, CIS, HIPAA, FTC and PCI. These additions make Deep Diver more compelling for providers assembling several client security services than for buyers seeking monitoring alone.
CyberGuard360 describes Swift Owl, its private AI workspace, as ISO 27001 certified. That certification applies to Swift Owl; the company does not describe Deep Diver itself as certified.
Pricing
CyberGuard360 uses a freemium model, but its free Spark account does not include dark web monitoring. Spark costs nothing, billed Free forever, and provides five prospect scans per month, 1,000 Swift Owl AI credits per month, training, weekly shorts and auto-branded marketing templates. It can help an MSP try prospect scanning and training, but it is not a free monitoring tier.
Launchpad costs $79 a year, billed annually. It is aimed at MSPs under $650k in revenue and includes 25 end-user licenses, 25 dark web scans and an internal-use account for three users. AI phishing, risk assessments, compliance, penetration testing and vulnerability scanning are add-ons. Monitoring is an add-on too, so the entry paid tier’s scan allowance does not by itself include ongoing monitoring.
Essential costs $299 a year, billed annually. It includes unlimited client and user training, 50 dark web scans, two CRIS credits, an internal-use account for 10 users, a compliance bundle, dark web monitoring, risk assessment and PCI. Penetration testing and AI phishing remain add-ons. It is the clearest fit for MSPs that want monitoring bundled with training and compliance work.
Professional costs $399 a year, billed annually. It raises the scan allowance to 100 and includes 10 CRIS credits, an internal-use account for 10 users, monthly penetration testing, vulnerability scanning, and advanced and quick assessment credits. Testing and compliance for more clients and AI phishing are add-ons. The higher tier is better suited to providers with broader testing and assessment needs; buyers should account for add-ons when comparing the total cost.
There is no free trial. Spark’s five monthly prospect scans and Launchpad’s 25, Essential’s 50 and Professional’s 100 are scan quotas, not interchangeable with the separate question of whether ongoing monitoring is included.
Platforms
Deep Diver is a web product. The company lists phone support Monday to Friday, 9 to 6 ET, and says it replies to inquiries within one business day.
Who it's for
Deep Diver is for MSPs delivering security services to client organizations. Providers that want branded dark web alerts, cookie exposure monitoring and adjacent training or assessment tools have a strong reason to consider it. Businesses buying directly, or MSPs that require monitoring on a free account, should look elsewhere.
Pros and cons
Pros
- Monitors both stolen credentials and session cookies in breach and infostealer sources, covering exposure that can enable account takeover and MFA bypass.
- White-labeled alerts can go to the MSP or its client, supporting a branded client service.
- Essential and Professional combine monitoring with training and broader security or compliance capabilities.
Cons
- Sales and service run exclusively through MSP partners, excluding direct buyers.
- Spark has no monitoring, and Launchpad charges extra for it, so the free and lowest-cost plans do not provide the central ongoing service on their own.
- Several useful capabilities remain add-ons, including AI phishing and, depending on tier, testing and assessments.
Alternatives
Dark Web Monitoring Services is the broader category directory for comparing monitoring options.
DARKX is a freemium alternative with a free plan and a web and API footprint; consider it if you want a separate monitoring product with a free tier.
Jsmon Dark Web Monitoring has a free one-time trial and web and API access; it may suit a buyer who wants to start with a trial rather than CyberGuard360’s free prospect scans.
PhishEye offers a free plan for monitoring one brand and a single typosquat scan; consider it when brand and typosquat monitoring is the need.
Dark Web ID is a paid alternative for readers comparing dark web monitoring services.
eMonitor offers web, desktop, self-hosted and API platforms, with a Starter plan at $3.90 a month billed annually; consider it when those platform options or its published entry price fit better.
RiskProfiler KnyX is another paid alternative for readers comparing security and risk tools.
Symbol Cyber Threat Surveillance is a paid alternative with daily searches of internet sources; consider it if that search approach fits your monitoring needs.
Allure Security Dark Web Monitoring is another paid option to compare.
Verdict
MSPs that want branded alerts for compromised credentials and session cookies, especially alongside training and assessment tools, should consider Deep Diver. Its strongest case is the combination of client-ready monitoring and a broader service platform. Direct buyers and providers unwilling to pay for a monitoring tier or add-on should choose another option.
Getting started
- Open the CyberGuard360 website.
- Create a Spark free account or choose a paid plan.
- Use the web platform.
- For Launchpad, add dark web monitoring if needed; Essential and Professional include it.
- Sync users from Microsoft Entra ID or Google Workspace to support phishing delivery to synced inboxes.
Limits worth knowing
Spark includes five dark web prospect scans per month and 1,000 Swift Owl AI credits per month, but no dark web monitoring. Launchpad has 25 dark web scans and offers monitoring as an add-on; Essential includes 50 scans and Professional includes 100.
Questions
How much does CyberGuard360 cost?
Spark is free.
Does the free plan include dark web monitoring?
No. Spark includes five dark web prospect scans per month, but no dark web monitoring.
Which platforms does Deep Diver support?
The listed platform is web.
Who is CyberGuard360 for?
CyberGuard360 says it serves MSP partners exclusively and directs non-MSP buyers to an MSP partner.
Which plans include dark web monitoring?
Essential and Professional include monitoring. Launchpad offers it as an add-on; Spark has no monitoring.
Alternatives to CyberGuard360 Deep Diver
- 1
eMonitor
WebAPILinuxmacOS6.7From $3.90 a month - 2

DARKX
Free planWebAPI6.6From $21 a month - 3
Passguard
WebAPI6.3From €250 a month - 4
PhishEye
Free planWebAPI6.3Free plan - 5

DarkThreat
WebAPI6.2From $2,000 a year - 6

DarkWebSonar
WebAPI6.2From $49 a month
