Ship Breach Detection in Hours, Not Months
REST API with <100ms response. Python & Node.js SDKs included. Plans from $5/mo.
Want to test the data first? Try a free domain check
The Fastest Breach Lookup API on the Market
Time to build breach detection from scratch
Source: Ponemon Institute, 2024
The Engineering Burden
Your users expect you to detect compromised accounts. But sourcing breach data is legally complex, parsing breach dumps requires specialized infrastructure, and maintaining a real-time index of 10B+ records is a full-time engineering project.
The Opportunity Cost
Building it in-house takes 3-6 months and a dedicated team. Buying from Recorded Future or SpyCloud means $5K+/mo and a sales cycle longer than your sprint. Meanwhile, credential-stuffing attacks hit your users every day you wait.
xonPlus API gives you a single endpoint, <100ms response, and full breach coverage. Ship breach detection in hours, not months.
Built for Developers Who Ship Fast
Production-ready breach detection with sub-100ms response and 99.9% uptime
API-First Monitoring
Plug into your ecosystem to monitor customer emails across public breaches, instantly.
Data Privacy by Design
Zero data storage and complete compliance with global privacy regulations.
Flexible Integration
Connect via REST API, webhooks, or SIEM plugins with minimal development effort.
Complete Breach Data
Access structured data on breach source, type, affected fields, and remediation steps.
See the API in Action
Live request examples, response formats, and your usage dashboard

API Documentation
cURL Request
curl -X GET "https://plus-api.xposedornot.com/v3/check-email/[email protected]?detailed=true" \
-H "x-api-key: APIKEY" \
-H "Content-Type: application/json"Python Request
import requests
url = "https://plus-api.xposedornot.com/v3/check-email/[email protected]"
headers = {
"x-api-key": "APIKEY",
"Content-Type": "application/json"
}
params = {
"detailed": "true"
}
response = requests.get(url, headers=headers, params=params)
result = response.json()
print(result)Real-time API
Millisecond response times with 99.9% uptime SLA for mission-critical applications
Flexible Integration
Webhooks, callbacks, and batch processing for any use case or architecture
Your Devs Will Love It. Your Legal Team Will Approve It.
No Sensitive Data Required
Pass email or hash. That's it.
Deploy in Under 5 Minutes
Fully REST-based with plug-and-play examples.
Zero Storage, Zero Headaches
Nothing stored. Nothing to clean up. Nothing to audit.
Designed for Scale
From 10K to 100M lookups/month, with flat, predictable pricing.
Sundar Kumar
CTO, Corent Technology
"We deployed xonPlus across our 200+ employee org and found 34 exposed accounts in the first scan. The Slack alerts and one-click remediation steps saved our IT team hours of manual investigation."
Miguel Mendes
IT Security Lead, Bluecom
"The real-time Slack and Teams alerts are a game-changer. We went from hearing about breaches on the news to getting actionable alerts within minutes. Integration took less than 15 minutes."
Bertold Kolics
VP Engineering, Verosint
"We integrated the xonPlus API into our identity verification platform in under 4 hours. The service scales well under high load and the breach dataset is one of the most comprehensive we've tested, covering data going back several years."
Senthil K
CISO, Invicara
"The CXO dashboard gives our board a clear picture of breach trends and risk reduction over time. We use the monthly reports directly in our ISO 27001 audit evidence. Setup was live in under 15 minutes."
Integrate Breach Detection Into Your App
Plans from $5/mo. Cancel anytime.
Three Lines of Code. That's It.
Get your API key, make a request, use the data
// Check if email is in a breach
const response = await fetch(
'https://api.xposedornot.com/v1/check-email/[email-hash]',
{ headers: { 'x-api-key': 'your_api_key' } }
);
const data = await response.json();
// { "breaches": ["LinkedIn2021", "Adobe"], "count": 2 }Get Your API Key
Sign up and get your API key instantly. No credit card required for free tier.
Make a Request
Query by email hash, domain, or phone. Get results in under 100ms.
Use the Data
Receive structured JSON with breach names, dates, and exposed data types.
Works With Every Stack
Python, Node.js, Go, Java. If it speaks HTTP, it works with xonAPI+
Developer-First Integration
One API key. One endpoint. Full breach data in a single GET request. Python and Node.js SDKs included.
our quick start guide
What makes integration simple
Multiple Language Support
JavaScript, Python, Go, Java, and more
Complete Documentation
Detailed Swagger docs, and interactive examples
Production Ready
Rate limiting, authentication, and 99.9% uptime SLA
Pay for What You Use, Starting at $5/mo
No query surprises. No overage fees. Upgrade or cancel anytime.
Starter
30-day money-back guarantee
Pro
30-day money-back guarantee
Scale
30-day money-back guarantee
Custom Plan
30-day money-back guarantee
Questions Developers Ask Before Integrating
Authentication, rate limits, data formats, and privacy
Your First API Call Is 15 Minutes Away
Live in 15 minutes. 30-day money-back guarantee.
