Have I Been Pwned
Query the Have I Been Pwned breach-data corpus — check emails and domains against known data breaches, pastes, and stealer logs.
Free account. No credit card required.
Three ways to use Have I Been Pwned
Ask your specialist
Pull data, take actions, or answer questions with this integration, right in a conversation.
Build a workflow
Create automated workflows that trigger on events, run on a schedule, or chain multiple tools together.
Power an app
Use this integration as a data source or action layer behind a dashboard, form, or internal tool.
Supported tools
Actions your AI agents can perform with Have I Been Pwned.
Get All Breached Sites
List every breached site in the system, optionally filtered by domain or spam-list status.
Get All Data Classes
List all data-class labels used across breaches.
Get a Single Breach
Return one breach by its stable Name.
Get Breached Email Addresses for a Domain
Return all breached email aliases on a domain you have verified.
Get Breaches by Hash Range (k-anonymity)
k-anonymity breach search by the first 6 chars of an email's SHA-1 hash.
Get Breaches for Account
Return all breaches an email address has appeared in.
Supported triggers
Start a workflow when something happens in Have I Been Pwned.
New Breach Added to Have I Been Pwned
Triggers when a new breach is added to the Have I Been Pwned corpus. Baselines on first run, then fires on the most recently added breach (via /latestbreach); if several breaches are loaded in the same poll interval, only the newest surfaces.
Get started automating Have I Been Pwned
Ready-to-use workflows
