Find leaked or exposed credentials by email, username, phone, domain, hash, or breach origin.
LeakInsight is a data breach detection API available on RapidAPI, providing access to a database of over 14 billion leaked credential records through a single endpoint. It supports searches by email, username, phone number, full name, IP address, hash, domain, and reverse password lookup, returning breach metadata such as date, source, type, and severity. Input is automatically normalized (e.g., domains, phone numbers, emails, hashes) before searching.
Access is tiered across four plans: General, Pro, Ultra, and Mega. Hash and domain search require Ultra or higher; reverse password search is limited to Mega. Password and IP address visibility are masked on the General plan and fully visible on paid plans. The General plan is priced at $0.00/mo, Ultra at $99.99/mo, and Mega at $449.99/mo.
The API is documented with REST/JSON examples in Python and JavaScript, and is intended for use in login/registration checks, SIEM/SOAR pipelines, fraud prevention, and incident response. It is used by organizations such as MSSPs, fintech companies, e-commerce platforms, SaaS providers, and identity platforms for breach detection and account takeover prevention.
Yes, the BASIC/General plan is $0.00/mo but limits password and IP address results to masked values.
ULTRA costs $99.99/mo and adds hash and domain search, while MEGA costs $449.99/mo and adds password reverse search.
Requests are authenticated via RapidAPI with X-RapidAPI-Key and X-RapidAPI-Host headers sent to the leakinsight.p.rapidapi.com base URL.
The API is REST/JSON based and the documentation includes Python and JavaScript examples.
It targets security-focused organizations like MSSPs, fintech, eCommerce, SaaS, and identity platforms for tasks like account takeover prevention and incident response.
Show your product to thousands of developers
· 100k monthly pageviews
· 7k newsletter subscribers
Passwords which have previously been exposed in data breaches.
Perform OSINT via Intelligence X.
Bot detection and fraud prevention API with IP reputation and email validation.
Managed User Authentication Service.
Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC).
Mozilla observatory http scanner.