Skip to content

The Infostealer Index · Vendor profile

Have I Been Pwned

Have I Been Pwned is Troy Hunt's breach-notification service, launched in 2013. Since 2025 it has loaded stealer-log data that verified domain owners can query by email or domain, but it never returns passwords, cookies or machine details.

Search & lookup service Australia haveibeenpwned.com

Score profile

Each bar is out of 10. The thin line marks the average across all 34 vendors.

Infostealer Specialization 4 −1.4
Machine-Level Infection Context 1 −3.9
Exposure Segmentation 7 +2.1
Session Cookie & Token Coverage 1 −3.4
Collection Freshness 4 −2.8
Infostealer Research & Attribution 8 +1.6
Free Tools & Free API 9 +4.9
API & Integrations 8 +1.3
Pricing Accessibility & Time-to-Value 9 +3.6

Stands out on

  • Free Access9 vs 4.1
  • Accessibility9 vs 5.4
  • Segmentation7 vs 4.9

Trails the field on

  • Machine Context1 vs 4.9
  • Sessions1 vs 4.4
  • Freshness4 vs 6.8

At a glance

Best suited to
Basic, low-cost exposure checks on domains you own
Pricing
Free individual search; stealer-log API on Pro plans
Founded
2013
Ownership
Independent

Capabilities

5 of 8 infostealer capabilities fully available, based on public product information.

Machine-level infection data No
Session cookies & tokens No
Employee vs. customer split Yes
Third-party / supply-chain exposure No
API access Yes
Free tier / free API Yes
Self-serve signup Yes
Public infostealer research Yes

Closest peers

Vendors whose nine scores most closely match Have I Been Pwned's — the ones you'd most likely shortlist together.

#29 · 40.3 75% match
Compare
#28 · 41.0 74% match
Compare
#27 · 41.2 73% match
Compare
#19 · 48.1 71% match
Compare
#25 · 43.9 69% match
Compare

Also see Hudson Rock vs Have I Been Pwned.

Questions & answers

Where does Have I Been Pwned rank in the Infostealer Index?

Have I Been Pwned is #14 of 34 overall with 53.1/100, and #1 of 6 in the search & lookup service category.

What is Have I Been Pwned strongest at?

Compared with the field average, Have I Been Pwned stands out most on free access (9/10 vs 4.1), accessibility (9/10 vs 5.4) and segmentation (7/10 vs 4.9).

Which vendors are most similar to Have I Been Pwned?

Based on how closely their nine scores match, the nearest profiles are SOS Intelligence, ThreatMon and Intelligence X.

How is Have I Been Pwned priced?

Free individual search; stealer-log API on Pro plans. Check with the vendor for current pricing.

Sources

Public material the scores are based on.

Shortlisting Have I Been Pwned? Check your exposure first

Rankings only go so far. Look up your domain for free and see which employees, customers and suppliers have already been hit by infostealers.

Scores are Hudson Rock's editorial opinion of each vendor's infostealer intelligence, based on public information (websites, documentation and published research) as of October 12, 2026. Only infostealer-related capabilities are assessed, not a vendor's overall quality or other products. Field averages, peer matches and comparisons are calculated from those scores.

This is general information, not a recommendation to buy or avoid any product, and it may be out of date: confirm details with each vendor. Product names and logos belong to their owners and are used only to identify them. Vendors can request a correction through Hudson Rock's contact page.

Free Tools Check your exposure