Current dark web monitoring scans individual user emails one at a time via Have I Been Pwned. Partners want the option to scan an entire domain instead, surfacing breach data for a client (or prospect) without needing a full user list first.

Related existing asks on this board: automated scanning cadence, exporting scan results, and alerting only on new breaches. Domain-based scanning would likely need to work alongside those, not replace them.