toolcompass.

Find your next AI tool

Search by product name or task. Press Escape to close.

Have I been pwned?

● Identity checked

Research · Vendor site 2026-10-04

Have I Been Pwned aggregates breached credentials and stealer-log data so individuals and organizations can search emails, monitor domains, and query APIs. Paid subscriptions add programmatic search rates, domain monitoring, and stealer-log access beyond the public site tools.

Updated 2026-10-04View sources
Official website
Category
Research
Free access
The public site supports free breach lookups for email addresses without a subscription.
API access
Homepage JSON-LD and navigation advertise REST API v3 access with tiered rate limits on paid plans.

Is Have I been pwned? right for you?

A good fit for

Security teams, MSPs, and developers who need breach intelligence for emails, domains, and automated monitoring.

Before you choose

Core API plans start at $4.39 USD per month on the subscription page; higher RPM and stealer-log features require more expensive tiers.

Find the right plan

HIBP’s subscription page routes teams through API rate, domain monitoring, address counts, and stealer-log needs, positioning Core as the entry paid tier for programmatic breach intelligence.

What it can do

Features & capabilities

Unknown is different from unavailable. Each fact carries its own evidence.

CapabilityValueEvidenceChecked
Breach corpusSubscription page cites billions of pwned addresses across hundreds of breaches plus stealer-log options on Pro tiers.Facts sourced2026-10-04
Domain monitoringPlan finder asks whether users need API email search, domain monitoring, or both.Facts sourced2026-10-04
MCP serverHomepage schema lists an MCP server for AI agent integration alongside the REST API.Facts sourced2026-10-04

Understand the total cost

Have I been pwned? pricing & plans

Core

$4.39 /mo

Listed at $4.39 USD per month on the public subscription and schema pricing data.

API access
Entry paid tier for programmatic breach search
Domain monitoring
Available on paid plans per plan finder
Explore pricing & history

Alternatives to Have I been pwned?

View all ↗

The practical questions

Frequently asked questions

What is Have I been pwned? used for?

Have I Been Pwned aggregates breached credentials and stealer-log data so individuals and organizations can search emails, monitor domains, and query APIs. Paid subscriptions add programmatic search rates, domain monitoring, and stealer-log access beyond the public site tools.

Does Have I been pwned? have a free plan?

The public site supports free breach lookups for email addresses without a subscription.. This record lists ongoing free access; check the plan limits before starting.

How much does Have I been pwned? cost?

The listed monthly price is $4.39 USD at monthly billing. See the plan cards for entitlements, billing commitments and seat minimums.

Can I use Have I been pwned? through an API?

Homepage JSON-LD and navigation advertise REST API v3 access with tiered rate limits on paid plans.. API access and subscription access may have different terms; consult the linked sources.

What should I check before choosing it?

Core API plans start at $4.39 USD per month on the subscription page; higher RPM and stealer-log features require more expensive tiers.

Price history

No retained pricing changes yet. A current price alone does not establish a historical trend.

How this profile is supported

Facts apply to the named version and check date. Send a sourced correction if something changed.