Skip to content

Demo site. Fictional data; nothing is sent to anyone. Open the guided demo

The Exposure Scan

A free check of where your identity appears, with a score that summarises what the checked sources found and a list of exactly what was found. Details stay hidden until you confirm an email code, which makes the scan harder to use on someone else.

Run the scan

It takes about a minute. No account is needed.

This is a demo. The scan here returns fictional sample results for any name. It does not look anyone up, and nothing is sent to any company.

35

Exposure Score · 0 to 100

Low exposure

MINIMALLOWMODERATEHIGHSEVERE

Example result · fictional demo account

Your details

We email a code to the first address before showing results, and check all of them against breach databases. Never sold, never marketed to without asking.

Face matching is not switched on yet. This scan checks people-search sites and breach records by name and email. Face-search engines and AI dataset indexes are listed as not checked.

You confirm a 6-digit code sent to your email before any detail is shown.

What it covers

People-search sites
The public results page for your name and area on each site in our registry, opened the way a stranger would.
Breach records
Whether your email addresses appear in known breaches, using Have I Been Pwned.
Face-search engines
PimEyes and FaceCheck.ID forbid automated queries, so the scan gives you a one-minute self-check and records the result.
AI dataset indexes
With a selfie processed in your browser, a numeric signature is compared with our index of public dataset images. This part is in rollout.

How it works

  1. Enter your detailsName, city and an email address you control. Optional selfie, processed on your device.
  2. Confirm it is youWe email a 6-digit code. Until you enter it, only the score and counts are shown.
  3. The scan runsEach source is checked once, honestly identified. Sites that refuse automated checks are marked, not bypassed.
  4. See your resultAn Exposure Score from 0 to 100, broken down by dimension, and every finding with its source.
  5. See what is hidden and whyChecks that could not run, or that need you, are listed and add nothing to the score.
  6. Get the action planFor each finding: the opt-out route to do it yourself, and what UltoPulto would do.
  7. DecideKeep the result and act yourself, or choose a plan and let cases open.

What is built

Each capability carries its status. What the labels mean

  • Exposure ScanBuiltChecks people-search sites, known breaches, face-search engines (guided) and AI dataset indexes, and produces an Exposure Score. Breach lookups use the Have I Been Pwned service and need a licensed key, which is not yet connected; until then the demo shows sample breach results.
  • Identity check before resultsBuiltDetails stay hidden until you confirm a code sent to the email you entered, and the same name can only be scanned a few times a day. This makes it harder to look up someone else; it does not prove the name is yours.
  • Exposure Score with baseline and currentBuiltA 0–100 score with a published method. It changes as cases are confirmed removed.
  • On-device face matchingIn rolloutFace detection and embedding run in your browser. The models are being added to the public build.
  • AI dataset index matchingIn rolloutCompares a face signature with an index built from public dataset URL lists. The index is being built and reviewed.

Limits

What this does not do.

  • A listing found by name and area is a lead, not proof it is you. You confirm.
  • A site that blocks the check is reported as not checked. Your real exposure may be higher than the score.
  • The scan covers the sources in our registry, not the whole internet.