Tools / Breach check

Has this address, or this brand, shown up in known breaches?

Domain mode checks whether a site itself appears in the public Have I Been Pwned catalog. Email mode checks a mailbox when configured, and always gives a response playbook.

Try (known catalog example) or your company domain. Email / DNS + expiry