Is Your Domain in a Breach Database?
Your domain is matched against 11.5B+ breach records from public disclosures and dark web sources, updated regularly.
How the check works
Your domain is matched against 11.5B+ breach records from 763+ publicly disclosed breaches and stealer logs. Every breach is verified before it enters the index, and lookups run against exposure facts only: which breaches involve accounts on your domain, when they happened, and what data categories were exposed.
Read more about where the data comes from and how breaches are verified.
How to read your results
- Exposed emails: how many distinct email addresses on your domain appear in indexed breaches.
- Breaches: the number of separate breach incidents involving your domain, each listed with its name and date.
- Total exposed records: the combined count of records tied to your domain across all of those breaches.
- Risk level: a weighted score from None to Critical based on how many accounts, breaches, and records are involved.
- PDF report: a downloadable summary you can share with your security team or leadership.
What to do next
- Reset passwords and enforce MFA for exposed accounts, starting with executives and admins.
- Review which data categories leaked in each breach. Exposed passwords demand immediate action; exposed emails alone mainly raise phishing risk.
- Set up continuous monitoring so the next breach does not go unnoticed. xonEnterprise+ alerts you typically within 15 minutes of new breach data landing, from $25/mo.
Frequently asked questions
Is the domain exposure check really free?
Yes. The check is free, instant, and requires no signup or credit card. You get a point-in-time snapshot of your domain's breach exposure, plus a downloadable PDF summary.
Do you store the domains I check?
No. Lookups are processed in memory and never logged. We store only what already exists in our breach index: exposure facts like breach names, dates, and exposed data categories.
How is this different from continuous monitoring?
The free check is a snapshot of exposure from breaches already indexed. xonEnterprise+ watches your domains continuously and alerts you, typically within 15 minutes, when your domain appears in new breach data. Plans start at $25/mo.
Why does my domain show breaches I don't recognize?
Employees sign up for third-party services with their work email addresses. When one of those services is breached, your domain's accounts are exposed in that breach, so the breach name refers to the leaked service, not to your own systems.
How fresh is the breach data?
New breach data is ingested daily and every breach is verified before indexing. See our data sourcing page for how breaches are verified and what we never store.