In a crucial step towards enhancing cybersecurity, Internet Secure Services (ISS) has introduced its newly developed Credential Leak Investigation Service, affectionately known as "Kuremole." This service is designed to investigate and report on potential leaks of authentication information such as email addresses and passwords on behalf of customers. By actively monitoring these credentials, ISS aims to assist organizations in preventing incidents of security breaches and other related damages resulting from the misuse of leaked data.
With the rise in ransomware attacks and business email compromise schemes, many of the threats circulating the market today can be traced back to compromised authentication credentials. Once leaked, these credentials can be traded on underground markets, significantly increasing the risk of misuse and criminal activity. To tackle this pressing issue, ISS utilizes the widely recognized tool "Have I Been Pwned" (HIBP), allowing for regular checks to ensure that employees’ email addresses and passwords have not fallen into the wrong hands.
A critical feature of the Kuremole service is its comprehensive domain-based investigation capability. This ensures that even the email addresses of former employees, which are often overlooked, are included in the checks. By facilitating a thorough approach, ISS aims to eliminate risks from potentially exploited credentials.
Designed with ease of use in mind, Kuremole adapts the HIBP tool for corporate use, addressing various operational challenges that organizations might encounter. Traditionally, using HIBP required users to input each email address individually, which could become cumbersome and lead to potential gaps in security coverage, especially for organizations with numerous addresses. To mitigate these pitfalls, ISS has integrated a proprietary tool with the HIBP platform to enable batch investigations based on domain names. This feature allows for an extensive analysis of all email addresses associated with a particular domain, ensuring thorough security checks that also capture common addresses that might evade scrutiny otherwise.
Through Kuremole, organizations can expect several benefits. Not only will they gain insights into whether their email addresses and credentials were involved in past data breach incidents, but they will also learn when and where any leaks may have occurred. Reports will be provided by ISS in list formats such as CSV, making them usable for Security Operations Center (SOC) monitoring and Security Information and Event Management (SIEM) analysis. It is essential to note that since not all leaks are recorded in HIBP, organizations shouldn't assume they are safe solely based on HIBP data.
Despite these limitations, Kuremole offers organizations a low-cost, low-risk, and time-efficient solution to approach the critical problem of compromised credentials. This service serves as a powerful tool, providing concrete actions that organizations can take to protect themselves.
The operational process following the implementation of Kuremole involves utilizing ISS’s reports to inform internal emails about any leaked credentials. This method serves not only as a strong preventive measure against security breaches but also fosters heightened security awareness among employees.
Since its launch in June 2026, Kuremole has quickly become an invaluable asset for organizations looking to bolster their cybersecurity frameworks. The service is priced affordably to ensure accessibility for all organizational administrators, with standard and lighter versions available at ¥30,000 and ¥10,000 per month per domain, respectively.
Founded in 2021, Internet Secure Services has been dedicated to delivering comprehensive security solutions, striving to support business continuity through incident response and risk management. The mission is clear: to empower individuals involved in incident response to protect their organizations securely and effectively. For more information or to request a quote, businesses can visit the official service page or contact ISS directly via email.