The exposure score is a 0–100 rollup of how much of a subject’s identity is sitting outside their direct control: in breach corpora, public records, and discoverable social-media accounts. It’s designed to move with reality — adding new identifiers or seeing a fresh breach hit will move it.
How we calculate it
- Breach severity (paste-site combo lists weigh less than verified password dumps)
- Recency (a 2024 leak counts more than a 2013 one of the same severity)
- Volume of confirmed social-media accounts tied to the identifiers
- Public-records exposure (current address visibility, voter rolls, property records)
When it changes
The score is recomputed on every sweep. A jump of ≥+5 in one cadence period triggers an alert by default — you can tune that threshold in Alerts. We don’t share the precise weighting because the model is internal IP, but the inputs are listed above and the breakdown is visible per-subject.