Our Domain Search feature gives you visibility into breaches affecting email addresses across your domain(s), helping you understand and respond to potential exposure within your organisation.
What is Domain Search Monitoring?
Domain Search Monitoring allows you to:
• Identify breached email addresses under your domain(s)
• See which breaches those addresses appeared in
• Understand the types of data involved
• Monitor for new exposures over time
Important: What Data Is Provided
We only provide a generic description of the data classes involved in a breach, such as names, email addresses, passwords, phone numbers or other common categories.
We do not provide the actual compromised data itself. This means you will not see the exposed passwords, full personal records or raw breach contents through Domain Search.
The purpose of the service is to inform and support risk management, not to redistribute breached data.
How to Get Started
-
Go to the dashboard
Access the dashboard and enter the email address that will be used for the subscription. Each subscription supports one registered email address only. We recommend using a shared mailbox rather than a personal email address to ensure continuity and access within your organisation. -
Add and verify your domain(s)
Add your domain(s) and complete the verification process to confirm you are authorised to monitor them. -
Select the appropriate subscription size
Choose the recommended subscription tier that matches your domain's size.
Pro tip: If you purchase a subscription tier smaller than recommended, you will not be able to search your domain, and a warning about insufficient subscription size will appear. In that case, only subscription free breaches and spam lists will be displayed in your results. To identify which email addresses were impacted by recent breaches that are not subscription free or classified as spam lists, you will need to upgrade your subscription to be able to identify the impacted email addresses.
To understand how our subscription model works and how to select the correct tier, please read our article What subscription size do I need to search my domain?
-
Run your first search
Once your domain is verified and your subscription is active, you can begin searching and reviewing results. -
Breach notifications
A breach notification email will be sent if any email addresses associated with your domain are found in newly loaded data breaches.
Watch the Demo
You can see how Domain Search works in our demo here:
https://haveibeenpwned.com/Demos
Frequently Asked Questions
Do I need to verify my domain?
Yes. Verification is required before accessing results to ensure only authorised parties can monitor a domain.
Can I monitor more than one domain?
Yes, depending on your subscription level.
Will I receive the exposed passwords or full breach records?
No. We only provide high-level information about the types of data that were exposed, not the actual compromised data. You can learn more about the types of information and data classes stored in HIBP in this article: What information and data classes are stored in Have I Been Pwned (HIBP)?
If you are looking to improve visibility into your organisation’s exposure, Domain Search is the right place to begin.