How do I choose the right subscription tier?
For the most accurate recommendation, we strongly suggest adding your domains to the dashboard first. This allows us to assess your exposure and suggest the most appropriate tier.
There are limits on the number of domains you can monitor under a single subscription. These limits are based on how many of your domains have more than 10 breached email addresses, not the total number of domains you own.
For example, if you have 10 domains but only 3 of them exceed 10 breached addresses, you only need a Core 2 subscription, as it allows you to search up to 3 such domains.
Do I need to choose the "recommended" tier?
Yes. To search your domain successfully, you will need the recommended tier or a higher one. If you want access to stealer logs, you will need a Pro 1 or higher, regardless of domain size.
What happens if I choose a tier that does not fully cover my domain?
If your subscription is smaller than required, only subscription-free breaches will appear in the results. You can upgrade at any time, and the remaining value of your current plan is automatically prorated toward the new one. Upgrades can be purchased directly from your dashboard.
What determines the price?
Every breach is historical and immutable, and we maintain a complete record of them. Pricing is based on the total number of breached email addresses linked to your domain across all breaches that are not classed as subscription-free or spam lists. This total includes every email address that has ever existed on the domain.
There's a long-form blog post that explains the methodology in detail, plus there's a FAQ outlining steps that can be taken to minimise the cost of a subscription.
Subscription options for your domain:
| Subscription | Stealer Logs | MAX DOMAIN SIZE | MAX DOMAINS | Monthly | Yearly |
|---|---|---|---|---|---|
| Free | No |
10 breached addresses |
Unlimited |
FREE | FREE |
| Core 1 | No |
25 breached addresses |
1 domain |
US$5.29 per month | US$4.39 per month |
| Core 2 | No |
100 breached addresses |
3 domains |
US$25.99 per month | US$21.59 per month |
| Core 3 | No |
500 breached addresses |
5 domains |
US$43.99 per month | US$36.99 per month |
| Core 4 | No |
Unlimited |
10 domains |
US$189 per month | US$159 per month |
| Core 5 | No |
Unlimited |
20 domains |
US$379 per month | US$319 per month |
| Pro 1 | Yes |
Unlimited |
50 domains |
US$449 per month | US$379 per month |
| Pro 2 | Yes |
Unlimited |
100 domains |
US$849 per month | US$699 per month |
| Pro 3 | Yes |
Unlimited |
200 domains |
US$1,599 per month | US$1,299 per month |
| Pro 4 | Yes |
Unlimited |
400 domains |
US$2,999 per month | US$2,499 per month |
| Pro 5 | Yes |
Unlimited |
800 domains |
US$5,599 per month | US$4,599 per month |
*All prices are in USD and exclude taxes. Stripe adds any applicable taxes during the checkout process based on your jurisdiction.
What if I have multiple domains?
You only need one subscription, but the selected tier must support both the number of domains you want to monitor and the size of your largest domain.
What does a Pro 1 subscription add?
A Pro 1 subscription enables API access to stealer logs, including the ability to retrieve the website domains where victims entered their credentials.
Email addresses found in Stealer log breaches can still be searched on Core 5 or lower tiers. Pro 1 is only required if you need access to the associated website domains.
Do aliases count as separate addresses?
Yes. Each variation of an email address is treated as a unique address, even if they all resolve to the same mailbox.
For example, test+1@example.com and test+2@example.com are counted separately. The same applies to formats like test@example.com and te.st@example.com.