CredCheck

CredCheck is a web app with an optional browser extension that helps companies reduce the single most common human-driven risk: credential reuse and weak passwords. Employees log in with SSO and get a private “credential health” report that checks whether their work email appears in known breach datasets and whether their passwords are weak or reused across sites (via local, on-device checks in the extension—no raw passwords sent to servers). Security teams get aggregated, non-shaming metrics: percent of users with breached credentials, MFA adoption by group, and remediation progress over time. The app runs lightweight, monthly “credential check-ins” with short, actionable steps (enable MFA, change password, adopt a password manager) instead of long training modules. It integrates with Okta/Azure AD/Google Workspace to verify remediation (e.g., MFA enabled) and to target reminders only where needed. It’s not a full awareness platform; it’s a focused tool to measurably cut account-takeover risk.