Detect weak passwords used with corporate account on untrusted domains

[carbureted]

Detect username/password pairs on generic login forms On submit, check for enterprise account (user@example.com) If enterprise account, check password complexity If password complexity is below configurable requirement, send an alert with domain/username