We use BreachLock and have been very pleased with their engagement and reporting. Retest is simple and can be performed ad-hoc to validate remediation.