Skip to content
XposedOrNot logo

XposedOrNot

Searches indexed data breach records for an email address or domain and reports which breaches, leaked fields and a risk score appear.

From $9/moActively maintained

SecurityOpen sourceFree tier
xposedornot.com ↗XFacebookGitHub
Open xposedornot.comAlternativesSet it up for my teamIs XposedOrNot yours? Claim the card →
At a glanceswept Oct 14, 2026

≈ 1.3kvisits/mo

Little sign of use · estimate, read Oct 14, 2026

For
Individuals checking whether their email or passwords appeared in data breaches, and security teams assessing company domains
Price
From $9/mopricing page, read Oct 16, 2026Trial & discounts: save 20% yearly · 30-day money back
Activity
Actively maintainedrelease 5 days ago · site updated 5 days ago
Company
since 2017per their site
Runs as
API
Used for
  • check whether an email address appears in known breaches
  • review exposed passwords and decide which accounts to secure
  • assess how many breaches a company domain appears in
read off xposedornot.com on Oct 16, 2026
Worth knowingcomputed from what we read · each with its source
  • Used more than 79% of the 335 tools on its shelfINITE Atlas →
  • On the web since 2017, older than 89% of its shelfINITE Atlas
  • Has an MCP server (1 in the registry)public registry →
  • Publishes llms.txt, a file written for AI assistantsxposedornot.com ↗
Pricingpricing page, read Oct 16, 2026

From $9/mo

Trial & discounts save 20% yearly · 30-day money back

pricing page

The companyeach fact with its source · read Oct 16, 2026
Your datawhat they publish, each line with its page · read Oct 16, 2026
  • Security contactsecurity.txt

These are XposedOrNot's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.

How a program reaches itfound, not claimed · read Oct 16, 2026

MCP server details →

This card as JSON, for your agent →

Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.

Alternatives in Securityby use, among tools still maintained

Figure and bar: visits/mo, estimate · year: online since

Compare XposedOrNot with

Pick up to two.

All 10 alternatives to XposedOrNot →

All Security tools →

Not it? Say what you need

beta

Three tools from the Atlas for the job you describe, each with what fits and what does not.

From people who use itnot part of the reading

No notes yet. What do you use XposedOrNot for?

Sign in to leave a note
Questions this page answers
  • What is XposedOrNot?

    Searches indexed data breach records for an email address or domain and reports which breaches, leaked fields and a risk score appear. It is listed in the Atlas under Security.

  • Who is XposedOrNot for?

    Individuals checking whether their email or passwords appeared in data breaches, and security teams assessing company domains

  • How much does XposedOrNot cost?

    Paid plans start at $9/mo, per XposedOrNot's pricing page on 2026-10-16.

  • Do people use XposedOrNot?

    Little sign of use: ≈ 1.3k visits/mo · estimate, 2026-10.

  • Is XposedOrNot still maintained?

    Actively maintained: release 5 days ago · site updated 5 days ago.

  • How do I cancel XposedOrNot?

    In its own words (terms of service, 2026-10-16): “You may cancel your subscription at any time through your account settings.”

  • What are alternatives to XposedOrNot?

    In Security, by use: Scamwise, FootprintIQ, LayerCall, Cobytes, PDFized, Scan My Shadow.

How we read a tool

No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.

  • Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
  • Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
  • Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
  • The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.

How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.