xonPlus Logo
Used by Verosint, BlackDice & production apps worldwide

Ship Breach Detection in Hours, Not Months

REST API with <100ms response. Python & Node.js SDKs included. Plans from $5/mo.

10B+ breach records·<100ms response·99.9% uptime

Want to test the data first? Try a free domain check

The Fastest Breach Lookup API on the Market

<100ms
Global Response Time
10B+
Breach Records Indexed
Zero
PII Stored or Logged
99.9%
Uptime Across Regions
3-6 Months

Time to build breach detection from scratch

Source: Ponemon Institute, 2024

The Engineering Burden

Your users expect you to detect compromised accounts. But sourcing breach data is legally complex, parsing breach dumps requires specialized infrastructure, and maintaining a real-time index of 10B+ records is a full-time engineering project.

The Opportunity Cost

Building it in-house takes 3-6 months and a dedicated team. Buying from Recorded Future or SpyCloud means $5K+/mo and a sales cycle longer than your sprint. Meanwhile, credential-stuffing attacks hit your users every day you wait.

xonPlus API gives you a single endpoint, <100ms response, and full breach coverage. Ship breach detection in hours, not months.

Built for Developers Who Ship Fast

Production-ready breach detection with sub-100ms response and 99.9% uptime

API-First Monitoring

Plug into your ecosystem to monitor customer emails across public breaches, instantly.

Data Privacy by Design

Zero data storage and complete compliance with global privacy regulations.

Flexible Integration

Connect via REST API, webhooks, or SIEM plugins with minimal development effort.

Complete Breach Data

Access structured data on breach source, type, affected fields, and remediation steps.

See the API in Action

Live request examples, response formats, and your usage dashboard

API Usage Dashboard

API Documentation

cURL Request

curl -X GET "https://plus-api.xposedornot.com/v3/check-email/[email protected]?detailed=true" \
  -H "x-api-key: APIKEY" \
  -H "Content-Type: application/json"

Python Request

import requests

url = "https://plus-api.xposedornot.com/v3/check-email/[email protected]"
headers = {
    "x-api-key": "APIKEY",
    "Content-Type": "application/json"
}
params = {
    "detailed": "true"
}

response = requests.get(url, headers=headers, params=params)
result = response.json()
print(result)

Real-time API

Millisecond response times with 99.9% uptime SLA for mission-critical applications

Flexible Integration

Webhooks, callbacks, and batch processing for any use case or architecture

Your Devs Will Love It. Your Legal Team Will Approve It.

No Sensitive Data Required

Pass email or hash. That's it.

Deploy in Under 5 Minutes

Fully REST-based with plug-and-play examples.

Zero Storage, Zero Headaches

Nothing stored. Nothing to clean up. Nothing to audit.

Designed for Scale

From 10K to 100M lookups/month, with flat, predictable pricing.

4.9on G2

What security teams are saying

Verified reviews from G2

S

Sundar Kumar

CTO, Corent Technology

"We deployed xonPlus across our 200+ employee org and found 34 exposed accounts in the first scan. The Slack alerts and one-click remediation steps saved our IT team hours of manual investigation."

M

Miguel Mendes

IT Security Lead, Bluecom

"The real-time Slack and Teams alerts are a game-changer. We went from hearing about breaches on the news to getting actionable alerts within minutes. Integration took less than 15 minutes."

B

Bertold Kolics

VP Engineering, Verosint

"We integrated the xonPlus API into our identity verification platform in under 4 hours. The service scales well under high load and the breach dataset is one of the most comprehensive we've tested, covering data going back several years."

S

Senthil K

CISO, Invicara

"The CXO dashboard gives our board a clear picture of breach trends and risk reduction over time. We use the monthly reports directly in our ISO 27001 audit evidence. Setup was live in under 15 minutes."

Integrate Breach Detection Into Your App

Plans from $5/mo. Cancel anytime.

30-day money-back guarantee

Three Lines of Code. That's It.

Get your API key, make a request, use the data

// Check if email is in a breach
const response = await fetch(
  'https://api.xposedornot.com/v1/check-email/[email-hash]',
  { headers: { 'x-api-key': 'your_api_key' } }
);

const data = await response.json();
// { "breaches": ["LinkedIn2021", "Adobe"], "count": 2 }
<100ms response

Get Your API Key

Sign up and get your API key instantly. No credit card required for free tier.

Make a Request

Query by email hash, domain, or phone. Get results in under 100ms.

Use the Data

Receive structured JSON with breach names, dates, and exposed data types.

Works With Every Stack

Python, Node.js, Go, Java. If it speaks HTTP, it works with xonAPI+

Developer-First Integration

One API key. One endpoint. Full breach data in a single GET request. Python and Node.js SDKs included.

5minsetup time with
our quick start guide

What makes integration simple

  • Multiple Language Support

    JavaScript, Python, Go, Java, and more

  • Complete Documentation

    Detailed Swagger docs, and interactive examples

  • Production Ready

    Rate limiting, authentication, and 99.9% uptime SLA

Pay for What You Use, Starting at $5/mo

No query surprises. No overage fees. Upgrade or cancel anytime.

Starter

$5.00
$5.00 billed every month
API up to 50 RPM
JSON + structured responses
Community SDKs (Python, Node.js)
Perfect for testing & prototypes
Cancel anytime

30-day money-back guarantee

Pro

$73.00
$73.00 billed every month
API up to 1250 RPM
Priority support
Webhook notifications
Batch endpoint access
Community SDKs (Python, Node.js)

30-day money-back guarantee

MOST POPULAR

Scale

$147.00
$147.00 billed every month
API up to 2500 RPM
Priority support
Webhook notifications
Batch endpoint access
Dedicated account manager

30-day money-back guarantee

CUSTOM

Custom Plan

Contact us for pricing
Unlimited API requests
Dedicated support
Custom integrations
SLA guarantees
Enterprise features

30-day money-back guarantee

Questions Developers Ask Before Integrating

Authentication, rate limits, data formats, and privacy

Your First API Call Is 15 Minutes Away

Live in 15 minutes. 30-day money-back guarantee.