infobreach.net is now seer.to. Your account works the same as before.

Have I Been Pwned alternative: Seer compared

Both tools start from the same question: has this identifier turned up in leaked data? Have I Been Pwned answers with the names of the breaches an email address appears in and deliberately never shows the leaked data itself; Seer returns the matching records. They do different jobs, and many people will want both.

Checked against the Have I Been Pwned pages under Sources on October 6, 2026.

What Have I Been Pwned is

Have I Been Pwned (HIBP) is a breach notification service run by Troy Hunt, independently owned and operated since 2013. It aggregates data breaches so people can see where their email address has been exposed, offers free notifications and the free Pwned Passwords service, and sells API keys and domain monitoring to organisations.

Free data breach notification service and breached password checker

Side by side.

CapabilityHave I Been PwnedSeer
Identifiers acceptedEmail address; verified domains; passwords via Pwned PasswordsEmail, username, phone, password, hash, IP, name, domain
What a result showsBreach names and data classes, never the recordsThe matched records, with source name and date
Breach and credential searchWhich breaches and pastes an email appears inRow-level breach records; values shown on Pro and up
Password checksPwned Passwords: free, k-anonymity, count of sightingsSearch breach rows by password or hash
Infostealer / device dataWebsite domains seen against an email; no passwordsWhole device records; unmasked on Premium
Username / social enumerationNot offered700+ platforms by username; email and phone sources
People / public recordsNot offeredUS public filings: addresses, relatives, aliases
Free tierEmail search, notifications, Pwned Passwords, small-domain monitoring10 searches a day; credentials masked; 2 unlocks a week
Monitoring and alertsFree email notifications; monitoring of verified domainsAsset and domain monitors; email alerts, webhooks on Premium
APIPaid key for email and domain search; Pwned Passwords API freePremium and Team; OpenAPI 3 document
Pricing modelFree site; API plans from $4.39 a month billed annuallyFree, Basic $12.99, Pro $29.99, Premium $150, Team $129 a seat
Data handlingSearches not logged; no passwords stored against emailsSearches audit-logged; searches and accounts never sold
Takedown / opt-outOpt out of public search after verifying the addressSuppress rows keyed to a verified email, all surfaces
Geographic scopeNo country limit stated; cited by agencies worldwidePeople search US only

Where each is the better pick.

Have I Been Pwned

  • Searching an email address, signing up for breach notifications and checking passwords are free, with no account needed for a public search.
  • Pwned Passwords is free and open source, uses k-anonymity so the password never leaves your machine in full, and can be downloaded and run offline.
  • It has run since 2013, law enforcement agencies including the FBI, NCA and Europol have contributed data, and governments worldwide cite it in their guidance.
  • Notifications only go to the address being monitored, and sensitive breaches and stealer-log domains are shown only to the verified owner of the address or domain.
  • Organisations can monitor their own verified domains for breach exposure, with small domains covered free and paid plans scaling to hundreds of domains.

Seer

  • Seer returns the breached rows themselves, with the source each came from and the date it is dated to, rather than only the name of the breach.
  • It searches by username, phone, name, IP, password or hash as well as email.
  • Stealer-log results are whole device records rather than a list of website domains.
  • It adds username enumeration across 700+ platforms and US people search in the same account.

Which to use.

Use Have I Been Pwned when

  • When you need a free check of whether your own email appears in known breaches
  • When you need ongoing breach notifications for your own address at no cost
  • When you need to block breached passwords in your own sign-up or login flow
  • When you need to monitor a domain you control and only need to know which addresses were exposed and where

Use Seer when

  • When you need to see the actual leaked records, not just the breach names
  • When you need to search by username, phone, IP, password or hash
  • When you need full infostealer device records for an email or domain
  • When you need breach, social account and US public-record results in one place

Questions.

Is Have I Been Pwned free?
Yes for individuals: browser email search, email notifications and Pwned Passwords are free, and domains with up to 10 breached addresses can be monitored free. API access and larger domain monitoring are paid, from $4.39 a month billed annually.
Is Seer a replacement for Have I Been Pwned?
No, they do different jobs. Have I Been Pwned tells you which breaches an email address appears in and never shows the leaked data or passwords; Seer returns the matching records themselves and searches by more identifiers, including usernames, phones and passwords.
Can Have I Been Pwned show me my leaked password?
No. Have I Been Pwned does not store passwords next to email addresses and will not send them to anyone; you can check a password separately in Pwned Passwords. Seer shows credential values on breach rows on Basic and above, and gives Free accounts 2 unlocks a week.
Does Have I Been Pwned search stealer logs?
Yes, in a limited form: a verified address owner can see the website domains their email appeared against in stealer logs, and domain owners on a Pro plan can pull the same via API. It returns no passwords. Seer returns the full record captured from each infected device.
Which is better for monitoring a company domain?
Have I Been Pwned monitors domains you have verified and reports which addresses on them appeared in which breaches, free for small domains. Seer monitors can watch an entire domain and alert by email, or by webhook on Premium, with the matching records available to search.

Start with one identifier.

Free runs 10 searches a day across breach and device records, and 10 each for people search and social. Withheld credentials unlock two a week, or a paid plan reveals them outright.