XposedOrNot

Tool Description: Free data breach search engine.

XposedOrNot

Quick Overview

URL

What it does

A breach-checking tool that tells you if an email address has been exposed in known data leaks, along with details about the breach.

How to use it

Enter an email address to instantly check if it appears in public data breaches and review what data may have been exposed.

Cost

Free (with paid option for alerts/monitoring).

Account required

No.

Mostly analytics and tracking tools (Google Analytics and Hotjar).

Ownership

Developed and maintained by Devanand Premkumar.

Use in Reporting

Useful for verifying data exposure, assessing risk, and supporting stories around breaches, cyber incidents, or personal data leaks.

What does XposedOrNot do?

XposedOrNot is a data breach intelligence tool. It aggregates information from publicly known breaches and lets you check whether a specific email address has been compromised.

It shows which breaches, what type of data was exposed (passwords, phone numbers, etc.), and sometimes the timeline of exposure.

The lowdown: It’s a quick way to understand someone’s digital exposure footprint, which can inform further investigation or risk assessment.

How to Use:

1. Enter the target email into the search bar then review breach results.

2. You can look at which breaches the email appears in, what data types were exposed, and the dates and frequency of exposure by viewing a detailed data breach report.

Cost

Free
Partially Free
Paid

Free to use with a paid option for alerts and monitoring (with account/API).

Data Processing

Account Required:

Cookies:

The cookies used are mainly analytics and tracking tools (Google Analytics and Hotjar)

Use in Reporting

XposedOrNot is useful to:

Confirm whether an individual or organisation has been affected by known breaches.
Add evidence to cybersecurity or data privacy stories.
Support risk assessments e.g. account compromise likelihood.
Provide context around credential leaks or cyber incidents.

Capabilities

Limitations

Checks email addresses against breach databases.

Only includes known and indexed breaches.

Identifies types of exposed data (passwords, phone numbers etc.)

Email-based (limited without a valid address).

Shows breach sources and timelines.

Data may be incomplete or outdated.

Offers alerts and monitoring.

Doesn’t prove current account compromise.

Quick and easy to use for quick checks.

Summary

XposedOrNot is a quick, accessible tool, useful as a first step in digital footprint analysis. It fits into the collection and enrichment stage of the OSINT workflow but should always be paired with context and additional verification.