Ban passwords breached and actively tried by attackers.

Strengthen password screening with a sanitized attacker dictionary and breach context.

The job to be done

Prevent use of passwords that are both present in breach corpora and actively used against internet services. Review targeted username patterns without exposing individual captured credentials.

What you get in five minutes

Open Console → Blocklist and compare broad and high-confidence counts.
With Professional, filter leaked-only entries and download TXT, JSON or an Entra ID compatible list; review it against your identity policy before deployment.

Every week

Refresh the list and compare qualified entries, last-seen dates and breach prevalence.
Use the weekly digest for blocklist changes and the gated API for sanitized targeted username signals by protocol.

Put the evidence to work

Blocklist: Broad/high confidence, leaked-only and search controls, with attack context and downloads for entitled organizations.
API keys: Use scoped credentials for the blocklist, local password range check and targeted username APIs.
Notifications: Paid weekly digests include credential blocklist changes alongside observed activity.

Choose the access you need

Public and Researcher Console views show aggregate blocklist counts. Values and downloads require Professional or Enterprise. Credential Intelligence beta is included with Professional during beta; Enterprise has the same access. The planned add-on price is $149/month, not a current separate subscription.

Console → Billing

Start with an observation.

Explore the free tiers, then choose the evidence and delivery your workflow needs.

Start free See pricing