Managing Your Account: Contacts, Alerts, and Preferences

Keeping your account contacts and notification preferences up to date ensures that findings reach the right people the moment they’re discovered. A critical finding surfaced at 2 AM is only useful if it goes to someone who can act on it — and a quarterly report delivered to a former employee’s inbox helps no one. This page explains how to manage every aspect of your Leverage Cyber account configuration, from primary contacts to offboarding.

​

Updating Primary Contacts

Your primary contact is the individual who receives all findings alerts, report delivery notifications, and account communications from Leverage Cyber. Only one primary contact is designated per account, though additional alert recipients can be added separately (see the next section). The primary contact is typically the person who led the initial onboarding — often a CISO, security manager, or IT director. If that person changes roles, leaves the organization, or you want to redirect account communications to a different individual, submit a contact update request as follows:

1. Send an email to contact@leveragecyber.com from the current primary contact’s address or from a known authorized contact on the account.
2. Include the new primary contact’s full name, business email address, and phone number.
3. Optionally include their title and preferred communication method (email, phone, or secure portal messaging).

Leverage Cyber will confirm the update and send a welcome message to the new primary contact within one business day. Until the update is confirmed, all communications will continue to go to the existing primary contact.

​

Adding and Removing Alert Recipients

Alert recipients receive real-time notifications when new Critical or High findings are discovered, when credentials are identified in a leak, or when a previously resolved finding is re-detected. Alert recipients are separate from the primary contact and can be configured independently. You can add or remove alert recipients at any time by emailing contact@leveragecyber.com with:

• The full name and email address of each recipient to add or remove
• Whether you want each new recipient to receive all alerts or only alerts above a specific severity threshold (for example, Critical only)
• Your preferred notification format if different from the account default (email summary vs. full finding detail)

There is no limit on the number of alert recipients you can configure. Common configurations include routing Critical findings to a 24/7 SOC email alias, routing High and Critical findings to the primary security team, and routing Medium and Low findings to a weekly digest for the broader IT team. Changes to alert recipients take effect within one business day of confirmation.

​

Report Delivery Preferences

Changing Report Format

By default, Leverage Cyber delivers all reports as PDF documents. If you need machine-readable data for integration with your GRC platform, SIEM, or internal risk tracking tooling, you can request that reports also include a raw CSV data export.The CSV export contains all findings in the report with their associated metadata — asset, finding type, severity, ALE value, discovery date, and remediation status. It is delivered alongside the PDF in the same secure delivery method.To change your report format, email contact@leveragecyber.com and specify whether you want PDF only, or PDF plus CSV export. The change applies to all subsequent report deliveries, including quarterly reassessments and any ad-hoc reports.

Changing Report Delivery Method

Leverage Cyber offers two secure report delivery methods:

• Secure portal delivery — Reports are uploaded to your account’s report library in the Leverage Cyber dashboard. You receive an email notification that a new report is available, with a direct link to download it from the portal. This is the default delivery method.
• Encrypted email attachment — Reports are delivered as PGP-encrypted or password-protected attachments directly to your primary contact’s inbox. This method is available for organizations that prefer to receive deliverables without logging into a portal, or that have internal workflows built around email-based document intake.

To switch delivery methods, or to configure different methods for different report types (for example, portal delivery for quarterly reports and encrypted email for ad-hoc reports), email contact@leveragecyber.com with your preference.

Adding Executive Digest Recipients

An executive digest is a condensed version of your report or quarterly reassessment designed for senior leadership — it highlights your risk score, total ALE, the top five findings by financial impact, and a summary of remediation progress, without the full technical detail of the standard report.Executive digest recipients receive only the digest version and are not added to the standard alert notification list. This is the recommended configuration for board members, CFOs, and other senior stakeholders who need risk visibility without the operational detail.To add executive digest recipients, email contact@leveragecyber.com with the names and email addresses of the intended recipients and confirm that you want them to receive the executive digest format. Digests are generated automatically from the same data as the full report and delivered concurrently.

Requesting Ad-Hoc Reports Outside the Quarterly Cycle

Continuous monitoring subscribers receive quarterly reassessment reports as part of their standard engagement. However, there are scenarios where you may need a fresh full-scope report outside of that cycle — for example, ahead of a board meeting, in preparation for a merger or acquisition, or in response to a security incident affecting your industry.To request an ad-hoc report, email contact@leveragecyber.com with:

• The reason for the request and any specific focus areas (for example, a particular subsidiary domain or a specific finding category such as credential exposure)
• Your required delivery date if time-sensitive

Ad-hoc reports are scoped the same as your standard quarterly reassessment unless you specify otherwise. Delivery timelines depend on scope — standard full-scope ad-hoc reports are typically delivered within 48 to 72 hours of the request. Ad-hoc reports are stored in your report library alongside scheduled reports.

​

Updating Your Organization Scope

Your monitoring scope is defined during onboarding as a list of domains, subsidiaries, and legal entity names. As your organization evolves, so does your external attack surface — and Leverage Cyber needs to know about changes to ensure your coverage stays complete. Notify your Leverage Cyber analyst or email contact@leveragecyber.com whenever any of the following occur:

• New domain registration — you register a new domain for a product, campaign, or brand
• Merger or acquisition — your organization acquires another company and you want the acquired entity’s external footprint included in your monitoring scope
• New subsidiary or business unit — a new subsidiary is formed or a business unit launches under a separate brand or domain
• Divestiture or brand retirement — a domain or subsidiary is sold or retired and should be removed from your monitoring scope
• Rebranding — your organization changes its name or primary domain

When you notify Leverage Cyber of a scope expansion, reconnaissance on the new assets begins within one business day. You will receive a confirmation email acknowledging the scope change, and the new assets will appear in your attack surface map as they are discovered and attributed. Scope expansions do not require a new onboarding call — a brief email with the new domain name or entity name is sufficient.

​

Offboarding and Data Retention

When a Leverage Cyber subscription ends — whether through non-renewal, cancellation, or conclusion of a one-time engagement — the following data retention policies apply:

• Active subscription data — all findings data, asset inventory, report history, and account configuration are retained in full throughout the active subscription period
• Post-subscription retention — following the end of your subscription, your account data is retained for 90 days in an inactive state. During this period, all reports remain downloadable from the portal and your assigned analyst remains reachable for questions about historical findings
• Data deletion — after the 90-day retention window, your account data is permanently deleted from Leverage Cyber’s systems in accordance with our data handling policy. If you wish to request deletion before the 90-day window expires, email contact@leveragecyber.com with a formal deletion request from your primary contact’s address

If you plan to end your subscription, download all reports you want to retain before the subscription end date. After the 90-day retention window closes, Leverage Cyber cannot recover or reissue historical reports. For organizations subject to data protection regulations that require documented proof of deletion, Leverage Cyber can provide a written deletion confirmation upon request.