Find the Right Plan
From quick email searches to large-scale domain monitoring and high-throughput APIs, choose a plan that fits how you use HIBP.
Plan Finder
Answer a few questions and we'll recommend the best plan for you.
What do you want to do?
- Email search: Programmatically search for breached email addresses via the API.
- Domain monitoring: Track breach exposure for your domains and get alerted on new breaches.
- Both: I need email search via the API and domain monitoring.
Do you need anonymous (k-anonymity) searches?
- Yes: I need to search without exposing full email addresses.
- No: Direct email search is fine for my use case.
What email search rate do you need?
Choose the minimum number of email searches per minute you need:
- Up to 10 RPM
- 11–50 RPM
- 51–100 RPM
- 101–500 RPM
- 501–1,000 RPM
- 1,001–2,000 RPM
- 2,001–4,000 RPM
- 4,001–8,000 RPM
- 8,001–12,000 RPM
- 12,001–16,000 RPM
- 16,001–24,000 RPM
Tell us about your domain monitoring needs
Whose domains are you monitoring?
- My own domains
- My customers' domains too
How would you like to add domains?
- Via API / bulk upload: Automate domain management programmatically.
- Manually via dashboard: Add and manage domains through the HIBP dashboard.
How many domains do you need to monitor?
- 1–2
- 3–5
- 6–10
- 11–20
- 21–50
- 51–100
- 101–200
- 201–400
- 401–800
How many addresses do you want to monitor per domain?
- 1-25
- 26-100
- 101-500
- Unlimited
Do you need to search stealer logs?
- Yes: I want access to infostealer malware data for my domains.
- No: Breach data alone is sufficient for my needs.
Choose Your Plan
Three tiers designed for different needs:
- Core: For direct email search and monitoring your own domains.
- Pro: For direct and k-anonymity email search plus monitoring your own and your customers’ domains.
- High RPM: For high-volume, high-throughput email searching.
Core Plans
Core provides straightforward access to search for breached email addresses across your own domains.
| Plan | RPM | Max Domain Size | Max Domains | Price |
|---|---|---|---|---|
| Core 1 | 10 | 25 breached addresses | 1 domain | $4.39 per month |
| Core 2 | 50 | 100 breached addresses | 3 domains | $21.59 per month |
| Core 3 | 100 | 500 breached addresses | 5 domains | $36.99 per month |
| Core 4 | 500 | Unlimited | 10 domains | $159 per month |
| Core 5 | 1,000 | Unlimited | 20 domains | $319 per month |
Pro Plans
Pro expands on Core by enabling monitoring across both your own and your customers’ domains.
| Plan | Email RPM | Max Domains | Price |
|---|---|---|---|
| Pro 1 | 1,000 | 50 domains | $379 per month |
| Pro 2 | 2,000 | 100 domains | $699 per month |
| Pro 3 | 4,000 | 200 domains | $1,299 per month |
| Pro 4 | 8,000 | 400 domains | $2,499 per month |
| Pro 5 | 16,000 | 800 domains | $4,599 per month |
High RPM Plans
High RPM is designed for high-volume API usage focused on fast, scalable email address searches.
| Plan | Email RPM | Price |
|---|---|---|
| High RPM 4000 | 4,000 | $1,150 per month |
| High RPM 8000 | 8,000 | $2,299 per month |
| High RPM 12000 | 12,000 | $3,449 per month |
| High RPM 16000 | 16,000 | $4,333 per month |
| High RPM 24000 | 24,000 | $5,833 per month |
Frequently Asked Questions
What does "breached email addresses per domain" mean?
The number of unique email addresses on your domain that have appeared in known data breaches.
What's the difference between Core and Pro?
Core is designed for searching breached email addresses and monitoring your own domains. Pro includes everything in Core plus support for monitoring customer domains.
I'm an MSP, which plan do I need?
You’ll need a Pro plan. Core is intended for monitoring domains you control yourself.