Have I Been Pwned (HIBP) is a data breach search and notification service used by security teams, developers, and MSPs worldwide. Search tens of billions of breached records, monitor corporate domains via API, and get alerted when new breaches appear.
Trust signals
Pricing
FREEMIUM
Auth
API_KEY
CORS
No
Rate limit
Rate limited; API key required for breach and paste searches
Health
92ms
Trust score
89 (B)
Last checked Sep 4, 2026 · uptime 24h 100% / 7d 100% / 30d 100%
Strong candidate; weakest signal is CORS.
Links
- Homepagehaveibeenpwned.com
- Documentationhaveibeenpwned.com/API/v3
- Base URLhaveibeenpwned.com/API/v3
Integration checklist
- Auth is API_KEY
- No CORS — route calls through your backend.
- Rate limit: Rate limited; API key required for breach and paste searches