Your own security analysts, watching your accounts every day.
DigitalWatch gives your business or family a team of AI security analysts. They read everything that happens in your Microsoft 365 or Google accounts, learn who your people are and what normal looks like, and tell you in plain English when something is wrong.
Read-only. Nothing to install. Built in New Zealand for teams of 1 to 15 people.
Attackers don't break in any more. They log in.
Today's attackers rarely bother with your password. They buy a stolen login session for a few dollars on a criminal market and walk straight into your inbox, with no password and no security code.
Then they wait. They add a rule that copies your mail to them and read along for weeks. When an invoice goes out, they change one bank number.
Email filters check each message as it arrives. Antivirus checks your laptop. Nobody is reading the story of what happens inside your accounts. That is the job DigitalWatch does.
One night on the watch
While you sleep, your team works through a shift. You only hear about the part that needs you.
- SunThe dark-web watcher
Checks criminal markets for your domain
Once a week. It finds one old password for your business in a stolen-login file and adds it to the picture.
- 5:25The researcher
Reads what's new in the threat world
New attacker addresses, domains and tricks, including New Zealand and Australian sources, ready for today's shift.
- 6:05Level 1, the watch
Reads every person's last few weeks
Sign-ins, mail rules, apps, sharing and settings for each of your 11 people, against what it knows about them. Eight are normal and closed.
- 6:12Level 2, the investigator
Looks harder at one thing
A new email app on Sam's mailbox, from an address Sam has never used. Not proof of anything, so it becomes a question, not an alarm.
- 6:20You
One message, one question
Plain English, with the one thing to do. On a quiet night, nothing at all.
Illustrative, based on real shifts on our own business accounts. Times and names changed.
Meet your team
A security team of your own, walled off from every other customer. It works the way a professional security operations centre works, with more senior analysts taking over harder cases. Its memory of your people belongs to you and is never pooled.
- Level 1: the watch
- Reads the last three to four weeks of every person's activity each day and closes out what is normal.
- Level 2: the investigator
- Takes anything the watch is unsure about and checks it against your people, your history and today's threats.
- Level 3: the lead
- Handles the rare serious case: what is affected, what to do and how urgent it is. Only then does anyone wake you.
- The researcher
- Every morning, finds what is new in the threat world, so your team knows what to look for that day.
- The dark-web watcher
- Every week, checks criminal markets and stolen-login dumps for your domains and your people.
- The tripwire
- A decoy document you name and save in your own Drive or SharePoint. Nobody has a reason to open it, so if it is opened we treat it as an emergency.
What we watch
We read account activity and settings, not the content of your email or files.
- Sign-insWhere, when and on what device, compared with that person's normal.
- Mail rules and forwardingThe quiet rule that copies your mail to a stranger.
- Apps given accessA new app that can read your mail or files.
- Security settingsA second factor added by someone who shouldn't have, or new admin rights.
- File sharingDocuments suddenly shared outside the business.
- The dark webStolen sessions and passwords for your domain.
- Today's threatsNew attacker addresses, domains and apps, checked against your activity.
- Your tripwireThe decoy document nobody should open.
How it works
- ConnectAn administrator approves read-only access to your Microsoft 365 or Google Workspace. Nothing is installed on any computer.
- Introduce your peopleA short conversation about who is who: who runs things, who pays the invoices, who works from where.
- We learn your normalFor the first two weeks your team watches quietly and learns your rhythms before it raises its voice.
- Your team works every dayIt investigates, closes out the noise and escalates what matters.
- You hear from us when it countsPlain English, with one clear thing to do.
We watch. You decide.
- Read-onlyDigitalWatch cannot change anything in your accounts.
- Nothing without your say-soWe tell you exactly what to do, and you decide.
- Walled offYour data sits in its own compartment, separated at the database, never pooled.
- Your alerts go to youNot to us, and not to a call centre.
- NZ Privacy Act 2020We collect only what the watch needs.
For your business, and for your family
For your business
Built for 1 to 15 people on Microsoft 365 or Google Workspace. Your team learns who handles payments and clients, so a changed invoice or a hijacked inbox stands out. No IT security hire, no dashboards to learn.
For your family
The same team watching the personal and family accounts that matter most: the principal, the assistant, the family, and the advisers who act on your instructions. Discreet, quiet and plain-spoken.
Pricing
Month to month, cancel any time. Prices in NZD, plus GST.
| Essentials | Business | Family | |
|---|---|---|---|
| For | ICT Hub Business Fibre customers, up to 5 people | Businesses of 1 to 15 people | One household |
| Includes | Daily watch, weekly dark-web check, tripwire, plain-English findings | Everything in Essentials, plus the full analyst team and the onboarding conversation | The Business service, set up for personal and family accounts |
| Price | $100 per person a month | $100 per person a month | $100 per person a month |
Questions people ask
Do you read our emails?
No. We read account activity and settings: who signed in, from where, what rules and apps were added and what was shared. Not the content of your mail.
We already have Microsoft or Google security. Why this?
Their tools filter and block. Nobody reads what happens inside your accounts and asks whether it is normal for this person. That is what your team does.
Does this replace our IT company?
No. Your IT company keeps things running. We watch, and we can share findings with them if you want.
Will you change anything in our accounts?
No. Access is read-only. When something needs fixing we tell you exactly what to do, and you decide.
What if you get it wrong?
We will sometimes ask a question that turns out to be nothing. That is by design: a good analyst asks rather than guesses. You will never get a wall of alerts.
How long does setup take?
Minutes to connect. About two weeks for your team to learn your normal.
Is it AI?
Yes. A strong AI model reads your activity the way a human analyst would, rather than ticking boxes against fixed rules, so it keeps up as attackers change.
Find out what's already out there
Tell us your domain and we'll check criminal markets for stolen logins and sessions belonging to your business. You get the result in plain English, free.