Watchtower identifies website vulnerabilities and alerts you when one is found. Website vulnerability information is refreshed daily to verify items in your vault. 1Password downloads the information and checks it locally against your Logins. Watchtower will list Logins associated with sites which have (or had) known vulnerabilities.
Sadly, my list of passwords that should be changed is of the "there goes my afternoon" magnitude.