Wild APIs
1,609 listings19 categoriesVerified weeklySubmit an API

Data Breach APIs

Data breach APIs check whether an email, domain or password has turned up in known leaks. Have I Been Pwned checks passwords via k-anonymity without a key and looks up breach exposure by domain, XposedOrNot returns breach details and risk scores with no key required, and Intelligence X searches leaked data, darknet content and pastes more broadly.
3 listings
TableRows
APIPricingAuthFormatFree tierStatus
Have I Been PwnedChecks passwords against breach data (k-anonymity, no key) and looks up known data-breach exposure by domain.
Identity & Security › Threat Intel
FreemiumAPI keyJSONUnlimitedLive
Intelligence XSearch leaked data, darknet content, pastes and archived public web pages by term or selector.
Identity & Security › Threat Intel
FreemiumAPI keyJSON<100/dayLive
XposedOrNotChecks emails and domains against known data breaches: breach details, exposed data types and risk scores.
Identity & Security › Threat Intel
FreemiumNoneJSON100–1k/dayLive

Choosing a Data Breach API

Is there a free Data Breach API?

Yes. Have I Been Pwned, XposedOrNot and Intelligence X have a free tier alongside paid plans.

Which Data Breach APIs work without an API key?

XposedOrNot needs no key or sign-up, so you can try it with a plain request.

Can I call a Data Breach API from front-end JavaScript?

XposedOrNot allows cross-origin requests and needs no key, so it works straight from the browser. For the others, call them from your server so your key stays private.

Can I use Data Breach APIs in a commercial project?

XposedOrNot and Intelligence X restrict it, for example to non-commercial or attributed use, so read the terms first.

Broader: Threat Intel APIs · Identity & Security APIs

More in Threat Intel: IP Reputation APIs · Phishing & Malicious URLs APIs · CVE & Vulnerabilities APIs