Skip to main content
SGSiteGraph

haveibeenpwned.com

Have I Been Pwned: Check if your email address has been exposed in a data breach

Last scanned Jul 29, 2026, 7:00 PM · 8 views

89

Overall score

Great

Summary

Have I Been Pwned (HIBP) is a data breach search and notification service used by security teams, developers, and MSPs worldwide. This website uses Cloudflare Analytics behind Cloudflare CDN. SEO is fair (70/100) and accessibility is excellent (90/100). Security scores excellent (100/100) and performance excellent (100/100). Top issue: Title longer than 60 characters.

Have I Been Pwned (HIBP) is a data breach search and notification service used by security teams, developers, and MSPs worldwide. Search tens of billions of breached records, monitor corporate domains via API, and get alerted when new breaches appear.

Top issues to fix

6 issues found · 1 high priority

  • No H1 heading found

    SEO

    Add exactly one H1 describing the page's main topic — it anchors the document outline for search engines and screen readers.

  • Title longer than 60 characters

    SEO

    Shorten the title to under 60 characters so search results don't truncate it.

  • Meta description longer than 160 characters

    SEO

    Trim the meta description to under 160 characters to avoid truncation in search results.

  • robots.txt not found

    SEO

    Publish /robots.txt with a Sitemap: directive to guide crawlers.

  • sitemap.xml not found

    SEO

    Publish an XML sitemap and reference it from robots.txt to speed up page discovery.

  • 20 broken links on the page

    SEO

    Fix or remove broken links — they waste crawl budget and erode user trust.

70

SEO

5 issue(s) found

100

Performance

15 ms

100

Security

HTTPS & header checks

90

Accessibility

1 issue(s) found

Score history

+2 overall since Jul 21, 2026

Overall
89
SEO
70
Security
100
Performance
100
Accessibility
90

Organization

Company details published in this site's own structured data.

Have I Been Pwned (HIBP) is a data breach search and notification service used by security teams, developers, and MSPs worldwide. Search tens of billions of breached records, monitor corporate domains via API, and get alerted when new breaches appear.

Meta tags

Title
Have I Been Pwned: Check if your email address has been exposed in a data breach
Description
Have I Been Pwned (HIBP) is a data breach search and notification service used by security teams, developers, and MSPs worldwide. Search tens of billions of breached records, monitor corporate domains via API, and get alerted when new breaches appear.
Canonical
https://haveibeenpwned.com/
Language
en
Charset
UTF-8
Viewport
width=device-width, initial-scale=1.0
Robots meta
Manifest
https://haveibeenpwned.com/site.webmanifest?v=luhS2CarNDfOuu_d3qBkSvyT9iLLvojAlMx9SdCErWg

OpenGraph & Twitter Card

OpenGraph

og:title
Have I Been Pwned: Check if your email address has been exposed in a data breach
og:description
Search tens of billions of breached records, monitor corporate domains via API, and get alerted when credentials are exposed. Trusted by security teams, MSSPs, and government agencies worldwide.
og:type
website
og:url
https://haveibeenpwned.com/

Twitter Card

twitter:card
summary_large_image
twitter:title
Have I Been Pwned: Check if your email address has been exposed in a data breach
twitter:description
Search tens of billions of breached records, monitor corporate domains via API, and get alerted when credentials are exposed. Trusted by security teams, MSSPs, and government agencies worldwide.

Technologies

Detected frameworks, languages, and tools.

Hosting & CDN

Hosting provider
CDN provider
Cloudflare
IP address
ASN

DNS records

TypeValue
A
AAAA
MX
TXT
NS
CAA
CNAME
IPv6 supportNo

TLS / SSL certificate

Version
TLS 1.3
Issuer
Google Trust Services
Subject
haveibeenpwned.com
Valid from
Jul 6, 2026
Valid to
Oct 4, 2026
Days until expiry
66
SAN domains
haveibeenpwned.com, cache.haveibeenpwned.com

Security headers

  • Strict-Transport-SecurityEnabled
  • Content-Security-PolicyEnabled
  • X-Frame-OptionsEnabled
  • X-Content-Type-OptionsEnabled
  • Referrer-PolicyEnabled
  • Permissions-PolicyEnabled

Compression: gzip · 1 cookie(s) observed

Content & assets

Headings

H1 0 · H2 1 · H3 3

Links

19 internal · 9 external · 20 broken

Images

4 total · 0 missing alt

Scripts / Styles

4 scripts · 3 stylesheets

JS / CSS size

1.0 KB · 0 B

Page size

25.8 KB

Robots.txt & Sitemap

robots.txt
Not found
Disallow rules
0
sitemap.xml
Not found
URLs in sitemap
0

SEO issues

  • Title longer than 60 characters
  • Meta description longer than 160 characters
  • No H1 heading found
  • robots.txt not found
  • sitemap.xml not found

Accessibility issues

  • No H1 heading found

Scan details

Requested URL
https://haveibeenpwned.com
Final URL
https://haveibeenpwned.com
HTTP status
200
HTTP version
HTTP/2
Response time
15 ms
HTML size
25.8 KB
Redirect chain
https://haveibeenpwned.com

See something wrong on this report? Request a correction

Frequently asked questions

What technology does haveibeenpwned.com use?
haveibeenpwned.com is built with Cloudflare Analytics.
Is haveibeenpwned.com secure (HTTPS)?
Yes. haveibeenpwned.com uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 4, 2026.
Who hosts haveibeenpwned.com?
Hosting provider information for haveibeenpwned.com is not available yet.
What is haveibeenpwned.com's SEO score?
haveibeenpwned.com scored 70/100 for SEO in the latest analysis (fair).
What is haveibeenpwned.com's overall website score?
haveibeenpwned.com has an overall SiteGraph score of 89/100, combining SEO, performance, security, and accessibility.
Has haveibeenpwned.com's score changed over time?
haveibeenpwned.com's overall score has improved by 2 points (from 87 to 89) since Jul 21, 2026.