Test platform for Have I Been Pwned API integration
Enter an email address to check if it appears in known data breaches using the Have I Been Pwned API.
We do not store any email addresses. All checks are performed via the HIBP API.
Checks if a domain (or a full URL) appears in known breaches (HIBP domain query).
Uses HIBP Pwned Passwords (k-anonymity). Your password is hashed client-side (SHA-1) and is not sent in plaintext.
Enter an email address and click "Check" to see if it's been compromised in any data breaches.
Hugging Face provides two key capabilities:
Zero-shot NLI model (bart-large-mnli) scores each news article for cybersecurity relevance
Stores and serves historical breach data from ${HF_DATASET_REPO}
Last updated: Loading...
Breach data is auto-pushed to HF when domains are checked. Click above to refresh dataset status.
When you check a domain, we search Google News, Bing News, GDELT and 12 security RSS feeds for related cybersecurity reports.
Hugging Face AI classifies each article using zero-shot NLI (bart-large-mnli) to score cybersecurity relevance and rank results.
Breach data is also stored in a Hugging Face Dataset for historical analysis.
Real-time view of all breach searches recorded in the Hugging Face Dataset. Updated automatically every time a domain is checked.
Static hosting with serverless functions for API routing
Proxy server to handle API requests and avoid CORS issues
backend-proxy-s43a.onrender.comAI classification (bart-large-mnli) + breach dataset storage and retrieval
Primary source of breach data with real-time updates
User submits email check request via Vercel-hosted frontend. The request is routed through our Render backend proxy to avoid CORS and rate limiting.
Render backend forwards request to Have I Been Pwned API with appropriate authentication. Response is cached temporarily to handle multiple simultaneous requests.
Results are compared with our Hugging Face dataset to identify new breaches not yet in our local dataset. If new breaches are found, the dataset update process is triggered.
When new breaches are detected, our system automatically pulls data from multiple sources (including HIBP, dark web monitoring, etc.) and updates the Hugging Face dataset.
https://backend-proxy-s43a.onrender.com/api/hibp/check/{email}
This is the actual Render backend proxy that will be used in production. Click "Test Proxy" to verify it's working.