# xonPlus

> xonPlus is the commercial edition of XposedOrNot, an open-source data breach monitoring platform. It provides breach and stealer-log exposure monitoring for businesses: developer APIs, domain monitoring for security teams, and white-label multi-tenant breach intelligence for MSSPs and partners. All pricing is public and self-serve; the underlying detection engine is open source.

Key facts (verified July 2026):

- The community edition offers a free, keyless breach-check API at xposedornot.com — no signup required.
- Paid API tiers run from $5/month (50 requests/min) to $1,337/month (25,000 requests/min), billed monthly or annually (20% off annual).
- Stealer-log exposure (AlienStealerLogs dataset) is included on every plan, including free searches.
- Domain monitoring for security teams (xonEnterprise+) starts at $25/month; plans include breach alerts, dashboards, and CSV/PDF reports.
- Partner plans (xonThreatIntel+) run $99–$447/month by domain count and include white-label branding and multi-tenant client management on every tier.
- Official Python and Node.js SDKs are available; feeds are offered as API, JSON, STIX, and CSV with webhook delivery.
- Privacy model: xonPlus returns exposure facts (which breach, when, what data categories) and never stores or resells raw passwords; password checks use k-anonymity.
- The detection engine is open source: https://github.com/XposedOrNot

## Products

- [xonAPI+](https://plus.xposedornot.com/products/api): Breach-check API for developers — real-time email and domain lookups, from $5/month
- [xonEnterprise+](https://plus.xposedornot.com/products/enterprise): Domain breach monitoring for security teams — alerts, dashboards, reports, from $25/month
- [xonThreatIntel+](https://plus.xposedornot.com/products/threat-intel): Breach intelligence feeds for MSSPs and platforms — white-label, multi-tenant, STIX/JSON/CSV, from $99/month
- [Pricing](https://plus.xposedornot.com/pricing): Full public price list for all products

## Comparisons

- [SpyCloud alternative](https://plus.xposedornot.com/comparison/spycloud-vs-xonplus): xonPlus vs SpyCloud — public pricing vs sales-gated; white-label included vs enterprise contracts
- [HIBP API alternative](https://plus.xposedornot.com/comparison/hibp-vs-xonplus): xonPlus vs Have I Been Pwned — free API tier vs paid-only; stealer logs included vs $379/month Pro gate
- [DeHashed alternative](https://plus.xposedornot.com/comparison/dehashed-vs-xonplus): xonPlus vs DeHashed — exposure facts for business monitoring vs raw records for investigations
- [Enzoic alternative](https://plus.xposedornot.com/comparison/enzoic-vs-xonplus): xonPlus vs Enzoic — flat public pricing vs per-call and per-account metering; white-label included vs sales-gated partner program
- [All comparisons](https://plus.xposedornot.com/comparison): Honest, sourced comparisons with verified pricing

## Free Tools

- [Domain exposure check](https://plus.xposedornot.com/exposure-check): Free domain breach snapshot, no signup
- [Free breach search](https://xposedornot.com): Community edition — free email breach checks with risk analytics
- [Community API docs](https://xposedornot.com/api_doc): Free keyless API reference

## Resources

- [FAQ](https://plus.xposedornot.com/faq): Product, integration, and compliance questions
- [Blog](https://plus.xposedornot.com/blog): Guides on breach monitoring and account takeover prevention
- [Privacy policy](https://plus.xposedornot.com/privacy)
- [Data processing agreement](https://plus.xposedornot.com/dpa)
- [Contact](https://plus.xposedornot.com/contact): Demos via 30-minute call; support via email

## Optional

- [About](https://plus.xposedornot.com/about): Built by the team behind XposedOrNot
- [Case studies](https://plus.xposedornot.com/resources/case-studies)
- [GitHub](https://github.com/XposedOrNot): Open-source community edition source code