SpyCloud Compass

What SpyCloud Compass is

SpyCloud Compass is represented by a page that redirects to SpyCloud Endpoint Threat Protection, a web product for SOC teams responding to malware-related exposure. It provides evidence of data stolen by malware and connects that exposure to an organization's environment, including credentials, session tokens, and application access artifacts. Teams can use the identity exposure information in post-infection playbooks such as password resets, session invalidation, and access reviews, helping limit follow-on threats including account takeover, lateral movement, and ransomware. The product surfaces exposures associated with managed and unmanaged endpoints, including BYOD laptops and remote contractor devices. Monitored data types include credentials, accounts, applications, cracked passwords, session tokens, cookies, PII, and malware records. SpyCloud lists integrations with EDR, SIEM, and SOAR tools, as well as Active Directory, Entra ID, Okta, and Ping Identity. The product does not detect malware; it reports what malware stole. Enterprise Protection pricing is tiered by employee accounts protected and available on request.