Open-source API for real-time data breach monitoring and email exposure alerts
- Stars80
- Forks8
- Open Issues0
MIT
- Python
- HTML
- CSS

About XposedOrNot
XposedOrNot is an open-source API that checks whether an email address has appeared in public data breaches and sends alerts when risk is found. It is built for monitoring online identity exposure and returning breach details plus useful stats about an email.
The API supports real-time breach checks and analytics through its reference interface and playground. The code is written in Python, and the quick start uses Google Datastore for local debugging. It also includes a Google Cloud SDK emulator flow for POSIX platforms such as Linux and macOS.
Basic endpoints such as email checks, breach analytics, and the breach list need no API key, while domain breach monitoring is an enterprise feature that does. The hosted API is rate limited per IP, and because it is MIT licensed it can also be run locally from source on Linux or macOS using a Google Datastore emulator for development.
Key features
- Real-time checks for email exposure in public data breaches
- Returns breach details and email statistics
- API playground for trying requests
- Key-free endpoints for email and breach checks
- Domain breach monitoring for enterprise use
Details
- First released
- 2023
- Platforms
- Web · CLI
- Deployment
- self-hostable
- Language
- Python
- License
- MIT
- Rate limit
- 2 req/s · 100 req/day per IP
