The Data Breach API You Can Ship in Hours
REST API with <100ms response. Official SDKs in 8 languages included. Plans from $9/mo.
Want to test the data first? Try a free domain check
Start Free. Upgrade for Production.
The free community API checks your own exposure. xonAPI+ powers your product.
| Community API (free) | xonAPI+ (from $9/mo) | |
|---|---|---|
| check-email throughput | 2/sec burst · capped at 25/hour, 100/day per IP | 50 to 25,000 req/min sustained, no daily cap |
| Access | Keyless, per-IP, fair-use enforced | API keys with IP scoping, rotation, audit logs |
| Response detail | Basic breach check | Breach source, dates, exposed fields, password-risk |
| Reliability | Best effort | 99.99% independently monitored, credit-backed tiers |
| Webhooks, batch & domain endpoints | Not included | Included by tier |
| Support | Community | Next-business-day to 4-business-hour response |
Checking your own exposure? Use the free community API with no key and no signup. Building a product? Every paid plan is production-ready from day one, backed by a measured uptime SLA.
The Breach Data Behind the API
Of engineering to build breach detection from scratch
The Engineering Burden
Your users expect you to detect compromised accounts. But sourcing breach data is legally complex, parsing breach dumps requires specialized infrastructure, and maintaining a continuously updated index of 11.6B+ records is a full-time engineering project.
The Opportunity Cost
Building it in-house takes months of engineering and a dedicated team. Buying from legacy vendors means annual contracts, sales-gated pricing, and a sales cycle longer than your sprint. Meanwhile, account takeover attacks hit your users every day you wait.
xonPlus API gives you a single endpoint, <100ms response, and full breach coverage. Ship breach detection in hours, not months.
Your Devs Will Love It. Your Legal Team Will Approve It.
Production-ready breach detection: fast to integrate, safe to deploy, priced to scale
First Call in 15 Minutes
One endpoint, one header, official SDKs in 8 languages. No SDK quirks, no proprietary protocols. Just HTTPS and JSON.
Privacy by Design
Stateless lookups. Submitted emails are processed in memory and never stored or logged; only request metadata is kept for billing and abuse prevention. TLS 1.3, US-based infrastructure on SOC 2-certified Google Cloud.
Complete Breach Data
Each match returns the breach source, date, exposed fields, record count, and password-risk classification. Not just a yes/no.
Built for Scale
From 50 requests/min prototypes to 25,000 requests/min production workloads, with flat monthly pricing and no surprise overage fees.
See the API in Action
Live request examples, response formats, and your usage dashboard
API Documentation
cURL Request
curl -X GET "https://plus-api.xposedornot.com/v3/check-email/[email protected]?detailed=true" \
-H "x-api-key: APIKEY" \
-H "Content-Type: application/json"Python Request
import requests
url = "https://plus-api.xposedornot.com/v3/check-email/[email protected]"
headers = {
"x-api-key": "APIKEY",
"Content-Type": "application/json"
}
params = {
"detailed": "true"
}
response = requests.get(url, headers=headers, params=params)
result = response.json()
print(result)What customers are saying
Verified reviews from G2
Sundar Kumar
IT and Product Head, Corent Technology
"Xposedornot is a useful tool for data breach alerting system. Every organization requires this tool to receive timely alerts of their exposed breaches. Its user-friendly design and seamless integration make it a valuable asset for proactive data security."
Miguel Mendes
IT Security Lead, Bluecom
"Indispensable to monitor the exposure of your personal data. What I like most about ExposedOrNot is its real-time dashboard alerts, as well as integration with Slack and Teams, are very practical features to be informed immediately in the event of a compromise."
Bertold Kolics
VP Engineering, Verosint
"I have been working with XposedOrNot from the early days. My experience could not have been better. The service scales well, performs well under high load and it has a large set of breach data dating back to several years."
Senthil K
Information Security Officer, Invicara
"I love how XposedOrNot makes protecting our data so simple and effective from ATO. The alerts are timely, and the CXO dashboard gives a clear picture of breach trends and risks. It's more than just a tool, it's like having a personal assistant for your security."
Three Lines of Code. That's It.
Get your API key, make a request, use the data
const res = await fetch('https://plus-api.xposedornot.com/v3/check-email/[email protected]?detailed=true', { headers: { 'x-api-key': 'YOUR_API_KEY' } });
const { breaches } = await res.json();
// breaches: [{ breach_id: 'Wanelo', breached_date: '2018-12-01...', xposed_data: 'Emails;Passwords', ... }]Pick a Plan & Get Your API Key
Subscribe to any plan from $9/mo. Your API key is provisioned instantly in the console.
Make a Request
Query by email. Under 100 ms for 99% of requests, measured over 10,000 production calls.
Use the Data
Receive structured JSON with breach names, dates, exposed fields, and risk scores.
Works With Every Stack
Python, Node.js, Go, Ruby, PHP, Rust, C#/.NET, Java. If it speaks HTTP, it works with xonAPI+
Developer-First Integration
One API key. One endpoint. Full breach data in a single GET request. Official SDKs in 8 languages included.
our quick start guide
What makes integration simple
Multiple Language Support
JavaScript, Python, Go, Java, and more
Complete Documentation
Detailed Swagger docs, and interactive examples
Production Ready
Per-key rate limits, key rotation, and request-level audit logging
Pay for What You Use, Starting at $9/mo
No query surprises. No overage fees. Upgrade or cancel anytime.
Basic
Growth
Ultimate
Scale
| Compare plans | Basic $9.00 /mo | Growth $37.00 /mo | MOST POPULAR Ultimate $129.00 /mo | Scale From $147 /mo · five volume tiers |
|---|---|---|---|---|
| Rate limit | 50 req/min | 250 req/min | 1,250 req/min | 2,500–25,000 req/min |
| Approx peak throughput | ~1 req/sec | ~4 req/sec | ~21 req/sec | ~42–420 req/sec |
| Support response | Same business day | 4 business hours | ||
| Webhook notifications | — | — | ||
| Batch endpoint access | — | — | ||
| Direct engineering channel | — | — | — | |
All plans include: JSON + structured responses, official SDKs in 8 languages, cancel anytime, 30-day money-back guarantee
All plans include a 30-day money-back guarantee
By purchasing you agree to our Terms of Service and Privacy Policy.
By purchasing you agree to our Terms of Service and Privacy Policy.
Questions Developers Ask Before Integrating
Authentication, rate limits, data formats, and privacy
From the blog
All posts →
Getting started with xonAPI+: from key to first breach check in 15 minutes
One endpoint, one header, JSON both ways. A 15-minute onboarding walkthrough with every command executed live, unhappy paths included.
Dark Web Monitoring API: What "Real Time" Actually Means
Four clocks sit between a breach and your alert, and a data vendor holds two. The measured length of each, the webhook and polling mechanics, and three SLA lines that replace "real time".
Under 100ms Across 11.6B Records: How Our Breach Check Works
One key lookup across 11.6 billion+ records, not a search: why our breach check API stays under 100 ms, what's cached, and what happens when a part fails.
Your First API Call Is 15 Minutes Away
Live in 15 minutes. 30-day money-back guarantee.