MFA Bypass Monitoring API

The MFA Bypass Monitoring API returns browser cookies stolen from employee devices by infostealer malware, matched to your domain and enriched with device and source context. A leaked session cookie lets an attacker skip the login page entirely - even with a strong password and MFA.

• Introduction - coverage, sources, and enrichment.
• Quickstart - your first request in 4 steps.
• Filters - narrow by cookie_type, browser, service_host, expiration_status.
• Record Data Fields - every field inside a record.