Passguard
Passguard is a Netherlands-based cybersecurity SaaS that monitors criminal infostealer marketplaces and Telegram channels to detect compromised corporate devices and session tokens, alerting security teams before attackers exploit stolen credentials. The platform serves CISOs and security operations teams at mid-to-large enterprises via freemium, Pro, and Enterprise tiers.
- Company typePrivate
- Founded2021
- HeadquartersLeusden, Netherlands
- Headcount1–10
- GTM typeB2B and B2C
- OfferingSoftware
What Passguard does
Passguard is a Netherlands-based, early-stage cybersecurity company headquartered in Leusden that operates a Software-as-a-Service platform focused on detecting infostealer malware activity against organizational assets. The platform continuously monitors criminal marketplaces and Telegram channels where infected devices and stolen session tokens are traded, alerting security teams when corporate devices, sessions, or credentials appear in these underground venues. Core capabilities include domain-level monitoring without requiring endpoint installation, actionable infection telemetry (operating system, malware family, session exposure details, infection timeline), a collaborative response dashboard for investigating and revoking compromised sessions, and a developer-facing API for integration into external security stacks.
The product architecture is built around exclusive access to major infostealer markets and Telegram channels, with the company claiming verified data and zero false positives. Underlying features include the Passguard Platform (core monitoring), Passguard API (developer integration), and three pricing tiers — Free (€0/month, monitoring 1 domain), Pro (€249/month, up to 5 domains and 15 infected-device details per year with up to 3 user accounts), and Enterprise (from €549/month, unlimited domains and flexible user/role management). Annual billing offers approximately 29% savings versus monthly.
Passguard pursues a hybrid go-to-market motion: product-led growth through a free tier and self-serve free-scan tool designed to drive top-of-funnel awareness, combined with enterprise field sales for larger contracts through demo and custom-pricing CTAs. Target buyers are CISOs and security-operations teams at mid-to-large organizations — particularly those with remote or hybrid workforces whose unmanaged devices create blind spots that traditional EDR cannot cover. Named customers include Damen Shipyards (maritime), Royal FloraHolland (floriculture marketplace), and Hadrian (investor-customer). The company was founded in 2021 and is privately held with no disclosed parent entity; it raised a €500K pre-seed round in September 2025 with participation from Hadrian, the Cybersprint founders, and additional cybersecurity-domain angel investors, and was ranked the #2 Cyber Start-up of Europe.
Passguard firmographics
Firmographics- Name
- Passguard
- Legal name
- Passguard
- Website
- https://passguard.com
- Company type
- Private
- Founded year
- 2021
- Operating status
- Operating
- Headcount range
- 1–10 employees
- Short description
- Passguard is a Netherlands-based cybersecurity SaaS that monitors criminal infostealer marketplaces and Telegram channels to detect compromised corporate devices and session tokens, alerting security teams before attackers exploit stolen credentials. The platform serves CISOs and security operations teams at mid-to-large enterprises via freemium, Pro, and Enterprise tiers.
- Ownership category
- akta.pro rank
Passguard industry classification
Industry- Product category
- Cybersecurity Threat Intelligence
- NAICS
- Investigation and Security Services (5616), Security Systems Services (56162)
- SIC
- Communications Services, Nec (4899)
- akta.pro primary industry
- Collaboration Account Takeover & Session Protection (HDADAKAH)
- akta.pro secondary industry
- Credential Stuffing & Password Attack Protection (HDADALAC)
Keywords
Where Passguard is headquartered
LocationHeadquarters
- HQ city
- Leusden
- HQ country
- Netherlands
- HQ region
- Europe
Offices1 record
Markets served
Passguard business model
Business model- GTM type
- B2B and B2C
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Infrastructure, Marketing or Sales, Operations
Revenue model
- Subscription-based SaaS: Three-tier subscription model (Free, Pro, Enterprise) providing infostealer monitoring services with tiered domain/portal monitoring limits and infection detail allocations. Annual billing offers approximately 29% savings.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Freemium | Monthly | Free tier - Basic exposure monitoring for individuals wanting to check if they're exposed |
| Subscription | Monthly | Pro tier - Full visibility across multiple domains and portals |
| Subscription | Monthly | Enterprise tier - Tailored protection for organizational environments |
Go-to-market motion2 records
Distribution channels2 records
Marketing channels4 records
Passguard product offering
Product offeringCore offering
Passguard operates a cloud-based cybersecurity SaaS platform that continuously monitors criminal marketplaces and Telegram channels where stolen session tokens and infected device logs from infostealer malware are sold. The platform alerts organizations to compromised credentials and active sessions belonging to their domains so security teams can revoke them before attackers exploit them to bypass MFA. A companion API enables programmatic integration of infostealer exposure data into external security tooling.
Product overview
Passguard offers a unified cybersecurity platform focused on infostealer monitoring. The core product consists of the Passguard Platform for continuous monitoring of infostealer marketplaces and a companion API for developer integration. The platform is offered across three pricing tiers: a Free tier for basic single-domain monitoring, a Pro tier (€249/month) for up to 5 domains with 15 device details annually, and an Enterprise tier (from €549/month) with customized monitoring capacity and user management. The platform provides exclusive underground marketplace access, actionable infection data including OS, malware type, session exposure, and infection timelines, along with a collaborative response dashboard for team investigation and session revocation.
Differentiator
Problem solved
Functional benefit
Products and services
- Passguard Platform
Quantifiable outcome
- Over 95% of infostealer attacks start on unmanaged devices
- +1 more outcomes
Companies that use Passguard
Customer profileNamed customers4 records
Segments2 records
Ideal customer profiles2 records
Passguard technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Feature5 records
Passguard partnerships and signals
Strategic signalScale indicators3 records
Recent moves5 records
Expansion highlights5 records
Passguard competitors and assessment
Company assessmentBroad incumbents
- ThreatConnect: ThreatConnect provides threat intelligence platforms that ingest dark-web and marketplace signals; larger enterprises evaluating Passguard Enterprise may consider ThreatConnect for a broader intelligence consolidation.
- Recorded Future: Recorded Future is a large incumbent threat intelligence platform that aggregates dark-web and criminal-marketplace data. It competes at the higher end of the market where Passguard also sells and can bundle infostealer/credential exposure into broader intelligence contracts.
- CrowdStrike: CrowdStrike's Falcon platform is the dominant enterprise endpoint/EDR suite and is rapidly adding identity and dark-web exposure capabilities that overlap Passguard's core session-token use case. Buyers often consolidate Passguard-like functionality into Falcon.
- Darktrace: Darktrace is a broad AI-based cybersecurity vendor whose enterprise footprint often includes identity and credential anomaly features. It represents incumbent competition for European CISOs evaluating Passguard.
- Arctic Wolf: Arctic Wolf delivers managed security operations that bundle dark-web monitoring and identity threat detection, making it a packaged alternative for enterprises that would otherwise buy Passguard's Pro/Enterprise tier.
Direct peers
- SpyCloud: SpyCloud monitors dark-web sources for stolen credentials, session cookies, and identity records to drive account-takeover prevention, a near-identical value proposition to Passguard's infostealer marketplace monitoring.
- Flare: Flare offers threat intelligence and dark-web monitoring with automated exposure detection for credentials and session tokens. It is a direct competitor in the same SME/enterprise identity-exposure niche.
- Hudson Rock: Hudson Rock provides infostealer intelligence and stolen credential monitoring directly competitive to Passguard's session-token and infected-device detection. Both vendors surface corporate exposure from criminal marketplaces.
Emerging players
- SlashNext: SlashNext focuses on phishing, BEC, and credential-abuse prevention including session hijack, overlapping with Passguard's session-token protection theme but anchored in messaging/email attack vectors.
- Have I Been Pwned: HIBP surfaces credential and breach exposure for consumers and enterprises, occupying an adjacent market segment that Passguard's Free tier partially overlaps with in the SME market.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat3 records
Key risks6 records
Key highlights6 records
Customer concentration
Passguard social profiles
Digital presencePassguard financial estimates
Financial estimateRevenue estimate
Valuation estimate
Passguard leadership team
Management profileNumber of profiles
Passguard funding detail
Funding detailFunding overview
Funding rounds2 records
Investors1 record
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Passguard M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Passguard
What does Passguard do?
Passguard operates a cloud-based cybersecurity SaaS platform that continuously monitors criminal marketplaces and Telegram channels where stolen session tokens and infected device logs from infostealer malware are sold. The platform alerts organizations to compromised credentials and active sessions belonging to their domains so security teams can revoke them before attackers exploit them to bypass MFA. A companion API enables programmatic integration of infostealer exposure data into external security tooling.
Is Passguard a public or private company?
Passguard is a private company. It is classified as venture growth investor backed and is currently operating.
When was Passguard founded?
Passguard was founded in 2021. It employs 1 to 10 people.
Where is Passguard based?
Passguard is headquartered in Leusden, Netherlands, in the Europe region.
How does Passguard make money?
One revenue line is on record: subscription-based SaaS.
Who are Passguard's main competitors?
Broad incumbents on record are ThreatConnect, Recorded Future, CrowdStrike, Darktrace and Arctic Wolf. Direct peers are SpyCloud, Flare and Hudson Rock. Emerging players are SlashNext and Have I Been Pwned.
Does Passguard have an API?
Yes. Passguard offers an API product as indicated by the navigation menu, though specific API documentation, authentication methods, endpoints, or technical details are not provided on the accessible website content. Developer documentation is at No Information.
What industry is Passguard in?
Passguard's product category is Cybersecurity Threat Intelligence. Its primary akta.pro industry code is HDADAKAH, Collaboration Account Takeover & Session Protection, with a secondary code of HDADALAC, Credential Stuffing & Password Attack Protection. Its NAICS code is 5616 and its SIC code is 4899.