Have I Been Pwned is a data breach search and notification service. It lets users check whether an email address appears in known data breaches and lists instances where data was found in paste records. It also offers an MCP server that connects AI agents to breach, password, paste, domain and stealer log data.
Directory
Search results
Published directory entries matching your search.
h8mail is a Python tool for email OSINT and password breach hunting. It finds passwords through breach and reconnaissance services or local data, supports premium lookup services, and can search .txt and .gz files locally using multiprocessing.
Breach Detective is a data breach search engine for checking whether personal data has been exposed in data leaks. It searches billions of records to show compromised credentials, including leaked passwords. Free, Pro and Ultimate plans differ in daily search allowances. Breach notifications are listed as coming soon.
Searchable timeline of publicly reported breaches with affected organizations, dates and data types.
Searches archived Facebook scraped-data collections for research on exposed public profile information.
Leak-awareness search page for checking whether identifiers appear in exposed datasets.
LeakPeek is a search service for checking whether an email, username, phone number or password has appeared in a data breach or password leak. It also offers searches of US and UK public records and a face search of public websites. Membership plans range from a 24-hour trial to three months of access.
OSINT search platform for finding emails, domains, files, leaks, and public records across sources.
Leak Lookup is a data breach search engine for searching database leaks and dumps. It offers username, email and IP address lookups across thousands of breaches to help track credentials compromised in the wild. A hash API provides hash-cracking capabilities and an API key is required to make requests.
Leakedpassword.com searches across multiple data breaches to check whether a password has been compromised. It also provides an API for use in signup processes to validate users' passwords, drawing its data from Have I Been Pwned and requiring no authentication.
A user-friendly Python toolkit for open source intelligence, providing key features such as image geolocation, social media profiling, email breach checks, domain lookup, metadata extraction, Google dorking, Wayback Machine queries, IP geolocation with blacklist checks, reverse image search, among others.
Scattered Secrets is a service that lets users search data breaches to see whether their password has been compromised. Its site describes how cybercriminals collect stealer logs and crack passwords to take over accounts, and presents the service as protection against account takeovers. A free account is offered.