Monitor and detect cyber security breaches
Let us guide you through a range of tools and resources to help you monitor and detect security breaches early and effectively.
Access a range of tools and services that help you monitor for and detect cyber attacks.
An introduction to detecting security breaches
Unfortunately, security breaches happen all too regularly, resulting in unauthorised access to digitally stored data, applications, networks or devices. This happens when an interloper is able to bypass your security measures. Sometimes this unwanted activity goes unnoticed, which can be both costly and dangerous.
We offer a range of tools and services that can help you monitor for or detect cyber security breaches.
Early Warning
Early Warning helps organisations investigate cyber attacks on their network by notifying them of malicious activity that has been detected in information feeds.
Eligible sectors: Any UK organisation with a static IP address or domain name can sign up to use Early Warning.
Check your Cyber Security
A free government service to help UK organisations check for cyber vulnerabilities.
Email security check
The email security check service allows you to quickly check that you have applied standards like DMARC and TLS correctly to prevent spoofing and protect privacy. You don't need to register to use it and the check can be run in seconds.
IP address & website check
The IP address & website check service allows you to check if cyber criminals could attack your systems to gain access to your data via the internet. You don’t need to register and if any issues are found, we’ll provide step-by-step guidance on what you should do next.
Web browser check
The Web browser check service allows you to check if your web browser is out of date and vulnerable to exploitation by criminals. You don’t need to register and if your web browser needs updating, we’ll provide step-by-step guidance on what you should do and how to set up automatic updates.
Host Based Capability (HBC)
HBC is a software agent available for use on OFFICIAL devices in government.
The NCSC conducts analysis to detect malicious activity on those endpoints. The service provides security baseline reports, and forewarns customers about their exposure to the most critical of vulnerabilities.
Protective Domain Name Service (PDNS)
PDNS prevents users from accessing domains or IPs that are known to contain malicious content and stops malware already on a network from calling home.
Eligible sectors: Public Sector.
Vulnerability Disclosure
The NCSC is working to mature the UK's approach to vulnerability disclosure and remediation by providing the following:
Vulnerability Disclosure Pilot
We aim to improve the UK government's ability to adopt vulnerability disclosure best practices. Contact us if you want to be involved in the pilot (central government only).