Instant visibility into underground credential leaks

Yes. All paid plans can be cancelled at any time — no fees, no questions. Your access stays active until the end of your current billing period.

Yes. LeakRadar is GDPR-compliant and operated by Radar Forge SASU (Paris, France).

• Hosting: OVH (France) + Cloudflare for DNS and WAF
• Payments: Stripe for cards, NowPayments for crypto
• We never share your account information or your search history with third parties
• Your account data is kept separate from the public leak index

Full details in our Privacy Policy.

Different services cover different angles of the same problem:

• HaveIBeenPwned tells you that an email appeared in a breach — not the password or the source.
• Hudson Rock focuses on stealer-log infections of individual machines.
• DeHashed and LeakCheck offer wide lookup coverage but limited monitoring and team features.

LeakRadar combines plain-text reveal, continuous monitoring, an API and team workflow in one product, with unlock-based pricing so you don't pay for queries you don't run.

See side-by-side comparisons.

Searching for credentials tied to your own email, domain or organization is legal everywhere we know of. It's the standard use case for security teams, IT admins and individuals checking their own exposure.

For searches involving third parties (pentesters, bug bounty hunters, threat intel researchers, MSP and MSSP teams), legality depends on your jurisdiction and your contractual scope. We require every user to confirm legitimate use at sign-up, and we don't grant access for malicious purposes. If you're unsure whether your specific use case is allowed, check with your legal counsel.

Eligible law enforcement, government and military teams in the EU or US can get free access for their official work by emailing contact@leakradar.io.

We index leaks exclusively from public forums and Telegram channels. We never buy data, never alter it, and we avoid any involvement in creating, reselling, or trafficking stolen material.

Yes. If your credentials appear in our database and you want them removed, use our data removal request form. You confirm the request by email, then our team reviews it manually. We process verified requests within a few working days and remove matching records from search results. This is your right under GDPR Article 17.

Note: removing your records from our index doesn't erase the underlying leak from the internet. The data is already public on multiple forums and channels. It just means it won't show up in LeakRadar searches anymore.