Public Breach Databases

Build Pick: Custom ES Cluster

Buy Pick: Dehashed

  • $15.50/month, or $179 annually
  • separate pricing for API credits and web access
    • API pricing: $3 for 100 credits
  • Contains passwords
  • certain sensitive data is not accessible to normal accounts (i.e. SSNs)
  • offensive focus, but could be useful for defenders to determine what is exposed/change passwords

Also Worth It: Have I Been Pwned (HIBP)

  • worth it, $3.50 per month subscription fee
  • highly effective data breach notification service
  • passwords accessible in certain circumstances

IntelX

  • pricing unclear, but can use https://phonebook.cz for free to gather certain attributes (i.e. email addresses)