Individuals & society
Free password and email breach checks, plus plain-language steps to recover. No account required.
Free · 1 email/domain check/mo
// exposure check
Three fast, privacy-respecting checks: is your password in a known breach, is your email in a breach, and can attackers spoof mail from your domain. Each comes with a clear, AI-guided fix.
// 1 · password breach check FREE
Privacy-first: your password is hashed in your server session and only the first 5 characters of the hash are sent to the breach database (k-anonymity). The password itself is never sent, stored, or logged.
// 2 · email breach lookup
// 3 · domain spoofability BUSINESS
Checks SPF, DMARC, and MX — the records that stop criminals from spoofing your domain in phishing and invoice-fraud attacks. DNS-only, no payloads.
// who this is for
Free password and email breach checks, plus plain-language steps to recover. No account required.
Free · 1 email/domain check/mo
Pro unlocks 100 checks/month across email and domain spoofability, with AI remediation plans.
Pro · 100/mo
See Pro →Domain-wide spoofing protection, scheduled re-checks, and team seats. Roadmap: continuous monitoring + alerting.
Talk to us →Yes. Passwords are checked with k-anonymity: only a short hash prefix leaves your browser, the full password is never sent, stored, or logged.
It tells you whether an email address appears in known public breach data, so you know which accounts to rotate and where to enable multi-factor authentication.
It evaluates your SPF, DKIM, and DMARC records to estimate how easily an attacker could send forged email that appears to come from your domain.
Password checks are free and unlimited within fair-use limits. Email and domain checks are free for individuals and metered, with higher limits on Pro.