Have I Been Pwned
by Have I Been Pwned · Data breach search and notification service
59.5 — BenchRank score out of 100
Screenshots of Have I Been Pwned
Homepage
Overview
Have I Been Pwned lets you enter an email address and see whether it appears in data breaches the service has loaded, currently reported as 17,765,749,944 addresses from 1,022 pwned websites. Alongside the free search it lists domain search, a Passwords service, a Notify Me alerting option, an API and an MCP server.
- Best for
- Security teams, developers and MSPs checking whether emails or domains appear in known breaches.
- Pricing
- The captured page shows no prices; it links to a Pricing page that was not captured.
- Runs on
- Web
Strengths and trade-offs
Strengths
- Free search across 17,765,749,944 breached addresses
- Domain search and API for monitoring corporate addresses
- Notify Me service alerts you when new breaches appear
- MCP server listed alongside the API for agent access
Trade-offs
- Coverage limited to the 1,022 breached sites loaded into the service
- Homepage shows no prices; pricing sits on a separate page
- Homepage carries a sponsored password manager placement
How this score is made up
Each dimension is scored out of 100 and combined into the headline score using fixed weights.
- MCP support
- 92 out of 100
- API quality
- 55 out of 100
- Documentation
- 60 out of 100
- Agent friendliness
- 60 out of 100
- Customer sentiment
- 80 out of 100
- Changelog
- 0 out of 100
- Marketing site structure
- 30 out of 100
- Operational trust
- 65 out of 100
Measured, but not part of the score
Useful to know, but not a mark for or against the product — so these do not affect the ranking.
- Openness
- 60 out of 100
- Maintenance
- 85 out of 100
This doesn’t look right — report a problem with Have I Been Pwned’s score
Alternatives in Identity & Access Management
Ranked 1
75.9 — BenchRank score out of 100Ory
Ory · API-first identity and access management, self-hosted or managed
Best for: Engineering teams wanting API-first identity and access management they can self-host or buy as SaaS
Ranked 2
73.8 — BenchRank score out of 100Logto
Logto · Open-source auth infrastructure with SSO, RBAC and multi-tenancy
Best for: Developers adding auth, enterprise SSO and multi-tenancy to SaaS or AI apps without building it
Ranked 3
73.1 — BenchRank score out of 100Hexclave
Hexclave · Open-source auth, payments, email and analytics building blocks
Best for: Startups wanting auth, payments, emails and analytics as one open-source, self-hostable platform.
