diff --git a/monkey/monkey_island/cc/ui/src/components/report-components/security/UsedCredentials.tsx.js b/monkey/monkey_island/cc/ui/src/components/report-components/security/UsedCredentials.tsx.js
new file mode 100644
index 000000000..b255a7ca9
--- /dev/null
+++ b/monkey/monkey_island/cc/ui/src/components/report-components/security/UsedCredentials.tsx.js
@@ -0,0 +1,41 @@
+import {getAllUsernames, getAllSecrets} from '../credentialParsing';
+import React from 'react';
+
+class UsedCredentials extends React.Component {
+  constructor(props) {
+    super(props);
+  }
+
+
+  render() {
+    let allUsernames = getAllUsernames(this.props.stolen, this.props.configured);
+    let allSecrets = getAllSecrets(this.props.stolen, this.props.configured);
+    allSecrets.map(x => console.log(x['type'], x['content']));
+    return (
+    allUsernames.length > 0 ?
+      <>
+        <p>
+          Usernames used for brute-forcing:
+        </p>
+        <ul>
+          {allUsernames.map(x => <li key={x}>{x}</li>)}
+        </ul>
+        <p>
+          Credentials used for brute-forcing:
+        </p>
+        <ul>
+          {allSecrets.map((x, index) => <li
+            key={index}>{x['type']}: {x['content'].substr(0, 3) + '******'}</li>)}
+        </ul>
+      </>
+      :
+      <p>
+        No credentials were used.
+      </p>
+  )
+
+  }
+
+}
+
+export default UsedCredentials;