Comparison
Checked 2026-10-20OSINT Pro compared with Have I Been Pwned
A free breach notification service for email addresses, running since 2013. OSINT Pro is a pay per lookup search across 14 identifier types that names the source of every row.
Have I Been Pwned published plans
2 tiers
| Tier | Price | Allowance |
|---|---|---|
| Core | $4.39 to $319 / month, billed yearly | Paid API tiers across the Core range |
| Pro | From $379 / month, billed yearly | Above the Core range |
Read from their public subscription pages on 2026-10-20. Prices are billed yearly. We did not open a dashboard, so the allowance of each individual tier is not quoted here.
| Point | OSINT Pro | Have I Been Pwned |
|---|---|---|
| Free use | One free lookup with a single record revealed, then masked results | Free email search in the browser, free breach notifications, free Pwned Passwords |
| What you can search | 14 types: email, username, phone, full name, domain, IP, crypto address, Discord ID, Steam ID, MAC address, machine UUID, company, password and file hash | Email address or username, domains you have proven you own, and passwords through Pwned Passwords |
| Sources | Breach aggregators such as Snusbase, IntelX and LeakCheck, stealer log and dump collections, and public sources such as crt.sh, RDAP and Sherlock, queried at once | Their own breach collection, which their site lists as 1,047 breaches |
| Source on each result | Yes, every row keeps the name of the source it came from | Shows which breaches an address appeared in |
| Stealer logs | Stealer log collections are among the sources | Own email visible in the dashboard, domain stealer log data on Pro |
| Passwords | Reverse password lookup | Breached emails are loaded without passwords, and Pwned Passwords checks a password against hashes |
| Monitoring and alerts | Not yet | Free email alerts and paid domain monitoring |
| Public API | None yet | Paid API, Core 1 from $4.39 a month billed yearly |
| Paid pricing | $1.75 for a single credit, packs down to $0.79 a credit, plans at $19.99 and $39.99 a month | Core $4.39 to $319 a month, Pro from $379 a month, billed yearly |
| Sign in | Access key, no email needed | Email verification link or passkey |
| Exports | TXT, CSV or JSON, with the query and lookup type in the file header | JSON through the API |
| Payment | PayPal or crypto | Paid plans are bought from the dashboard after signing in |
Where we differ
- Free alerts for your own email
- HIBP watches an address and emails you when it turns up in a new breach, at no cost. OSINT Pro has no monitoring or alerts yet.
- Password checks without a query
- Pwned Passwords tells you whether a password has been seen using part of its hash, free and without an account.
- Domain monitoring for IT teams
- HIBP monitors a domain you have proven you control, and small domains are free. It is built for ongoing alerts rather than one-off lookups.
- A public API
- HIBP sells API access from $4.39 a month. OSINT Pro has no public API yet.
- Identifiers that are not email addresses
- A username from a phishing kit, a Discord ID from an extortion message or a machine UUID from a stealer log sample cannot be searched on HIBP. OSINT Pro has a lookup for each of those.
- Provenance on every row
- Deciding which passwords to rotate first depends on whether a record came from a 2016 forum dump or a stealer log from last month. Every OSINT Pro row keeps the name of its source.
- One search across many datasets
- OSINT Pro sends the query to all of its sources at once and merges the results, instead of opening several tabs and copying rows by hand.
- No email address to sign up
- An OSINT Pro account is an access key, so there is no inbox to leak.
Using both
Plenty of people should use both. Sign up for HIBP alerts for your own addresses and your company domain, since that is free and runs on its own.
Reach for OSINT Pro when you are actively working a case or an incident and need more identifier types and sources than an email search covers.
Honest limits
An empty result on either site only means the sources checked did not have that identifier. It does not mean you are safe. Names and usernames are not unique, so confirm a match with a second identifier before you act on it.
OSINT Pro is meant for defensive and investigative work: checking your own or your company's exposure, scoping an incident, or confirming an identifier during an investigation.
Questions
Is OSINT Pro a free Have I Been Pwned alternative?
Not fully. You get one free lookup that reveals a single record, then results are masked unless you use credits or a plan. HIBP's personal email search is free.
Does Have I Been Pwned show passwords?
No. HIBP loads breached emails without the passwords that came with them. Its Pwned Passwords service only tells you whether a password has been seen before.
Can Have I Been Pwned search a username or a phone number?
HIBP takes an email address or a username in its search box. It does not search phone numbers, IPs, Discord IDs, crypto addresses or file hashes. OSINT Pro has lookups for all of those.
Does OSINT Pro send breach alerts?
Not yet. There is no monitoring right now. For alerts on your own email, use HIBP's free notifications.
How much does OSINT Pro cost?
One free lookup that reveals a single record. After that a single credit is $1.75 and bigger packs drop to $0.79 a credit. Credits do not expire. Plans are $19.99 a month for 15 lookups a day and $39.99 a month for 50 a day, and paying yearly saves 17%.
Disclosure
About this comparison
OSINT Pro is not affiliated with Have I Been Pwned and no endorsement is implied. Product names belong to their owners and are used here for identification and comparison.
Details were taken from Have I Been Pwned's public pages on 2026-10-20 and can change without notice. If something here is out of date, tell us and we will correct it, including if the correction favours them.