Skip to content

How it works

From sign-up to a shorter trail

Six steps. Most people do the first three in under five minutes, then come back when the scan is done.

  1. Step 01

    Create an account

    Email and password, the country you live in, and explicit consent for processing your data. That is the whole sign-up.

    • No card, no sales call, no trial countdown on the free plan
    • Your consent is recorded with its timestamp and can be withdrawn

    Behind itConsent and its timestamp are stored against your profile — not implied from a checkbox we forgot to save.

  2. Step 02

    Connect a platform

    Pick a platform and authorise it. You sign in on the platform, not here, and grant only the scopes the scan needs.

    • Standard OAuth — we never see your platform password
    • Access tokens are encrypted before they are stored
    • Disconnect at any time and the stored token is destroyed

    Behind itTokens are encrypted with AES-GCM and decrypted only inside the worker that makes the API call.

  3. Step 03

    Run a scan

    Start a scan and close the tab if you like. It runs in the background across every platform you connected.

    • Up to 7 platforms in one run
    • Progress and per-platform errors are visible while it runs
    • Each scan is kept, so you can compare against the last one

    Behind itScans are dispatched onto a queue and processed by a worker, which is why a slow platform never blocks the rest.

  4. Step 04

    Read the findings

    Everything the scan surfaced lands in one table, scored, filterable, and grouped by what it exposes about you.

    • Sorted by risk so the worst is at the top
    • Filter by platform, content type or status
    • Open any finding to see exactly what was matched

    Behind itRisk is derived from how identifying the content is and how publicly reachable it is.

  5. Step 05

    Delete or file a request

    For content on a connected platform, delete it from here. For data someone else holds, we send the legal request.

    • Single or bulk deletion, queued and retried automatically
    • Erasure request generated under your own law and sent from your account
    • Every outcome is recorded — including the failures and why

    Behind itDeletions run through the same queue as scans, so a rate-limited platform is retried rather than lost.

  6. Step 06

    Keep watch

    Re-scan whenever you want to check nothing has crept back, and keep an eye on new breaches involving your addresses.

    • Re-run a scan any time to catch new exposure
    • One-off breach check on any email address, free
    • Continuous dark web monitoring is built but not switched on yet

    Behind itContinuous monitoring is gated on the breach-data subscription — see the Coming soon markers on pricing.

Questions

What people ask before they start

Anything else, ask us directly — hello@mydefense.io.

How long does a scan take?
Minutes, not hours — but it depends on how much content the account holds and how aggressively the platform rate-limits us. You do not have to wait on the page.
What happens if a platform fails mid-scan?
The failure is recorded against that platform and the rest of the scan continues. You see which platform failed and why, instead of a scan that silently returns less than it should.
Can a deletion fail?
Yes — a platform can refuse, rate-limit, or no longer expose the item. Failed deletions are marked as failed with the reason, and can be retried.
What can I not delete?
Anything you do not own on a platform we can act on: reposts by other people, screenshots, archived copies, and records held by data brokers. That last category is what the erasure request path is for.
Can I get my data out?
Yes. Your findings and scans are yours; you can export them, and deleting your account removes the stored tokens and profile.

Step one takes about a minute

Create the account, connect one platform, and let the first scan tell you where you stand.