LeakCheck vs HackCheck (2026): Breach Data, Stealer Logs, API and Pricing

As of October 6, 2026, LeakCheck advertises 10B+ leaked records, lists 1,469 breach sources by name, returns info-stealer log records next to breach rows in an ordinary search, and sells its Pro API from $9.99 a month, with a free Public API beside it. HackCheck advertises 16,287,222,462 records, searches eight field types including full name and IP address, and starts API access at $14.99 for two weeks. For most developers and security teams, LeakCheck is the stronger buy: better documented data, stealer-log coverage, a cheaper API and a public uptime record.

Everything below comes from each vendor's public pages, documentation and status pages, read on October 6, 2026. HackCheck here means the breach search engine at hackcheck.io, not Abelssoft's desktop app of the same name.

At a glance

Breadth of data: the count and the receipts

Record counts are the least comparable number here, because compilation lists repeat the same credential many times. HackCheck's headline is bigger, and its homepage calls the service "the fastest and most comprehensive data breach search engine". Its FAQ says it collects from "multiple publicly available sources where data breaches are commonly published". It does not publish a source list.

LeakCheck does. Its breached databases page listed 1,469 sources on October 6, 2026 (the homepage counter still reads 1,366+), each with an entry count, a breach date and flags where they apply: unverified, no passwords, compilation. The largest entry, National Public Data at 708,882,970 rows, carries both the unverified and no-passwords flags; Collection 1, at 231,012,239 rows, is marked as a compilation. The same flags come back on each breach row in the API, with the source name, the breach month and the field categories the row holds.

LeakCheck also names its operator, a company registered in England and Wales under number 12101959, and offers business customers a Data Processing Agreement. HackCheck's terms and privacy policy name no company.

Info-stealer logs: where LeakCheck pulls ahead

Info-stealer malware copies the logins saved in an infected browser, with the site each one was entered on; our guide to stealer logs covers the background.

LeakCheck indexes these logs next to its breach data. Search an email address or username as usual and stealer-log records come back in the same results, each with:

• the origin URL, meaning the site or app the credential was entered on;
• the login, and the password as the browser saved it;
• a collected date, either an exact day (YYYY-MM-DD) or "April 2024 or earlier" for older bulk imports.

A record collected after your last password change is a live problem; an older one may already be handled.

On Enterprise you can turn the search around. Origin search, added in LeakCheck's move to API v2, returns every captured credential for a site, such as your company's sign-in page, in the browser or through the API as type=origin. Enterprise domain monitoring also alerts on new stealer-log logins to your sites.

HackCheck's public pages, plan table and API documentation, as read on October 6, 2026, do not mention info-stealer logs; its documented search types and export columns are breach fields.

Search types side by side

HackCheck covers two fields LeakCheck does not list, full names and IP addresses, and opens password and domain search at $39.49 a month, against LeakCheck Enterprise from $179 a quarter. LeakCheck has keyword search, which matches every address that starts with a given name, and email-hash lookup: send the SHA-256 of a lower-cased address (24 characters are enough) and the address itself never travels.

The API: authentication, limits and output

LeakCheck's Pro API v2 has one endpoint, GET /api/v2/query/{query}, with the key in an X-API-Key header. It detects email, username, phone and hash on its own; other types are set with type. One request returns up to 1,000 rows, with an offset of up to 2,500 for later pages, and each response carries a quota field with the queries you have left.

curl "https://leakcheck.io/api/v2/query/[email protected]" \
  -H "X-API-Key: $LEAKCHECK_APIKEY"

The default is 3 requests a second on any plan, and you raise it yourself in account settings. The free Public API takes an email, an email hash or a username and returns breach names, dates and exposed data categories, never the values, at 1 request a second. It is free for commercial use, provided your site carries a "Powered by LeakCheck" link. The official Python package, leakcheck on PyPI, includes a command-line tool.

HackCheck's API, documented on Postman, puts the key in the URL path (api.hackcheck.io/search/{api_key}/{type}/{term}) and accepts calls only from IP addresses you authorize. It offers paging, filters that include or exclude named databases, JSON or TSV output, a monitor API and wrappers for Python, Go and TypeScript. LeakCheck's v2 migration notes, by contrast, list "No more IP linking."

On speed, LeakCheck's homepage quotes 80 ms for a regular check and about 200 ms for a keyword check. In timed lookups on October 6, 2026, username and phone queries came back in well under a second, and an email address with about 21,000 matching rows took about 6 seconds. HackCheck publishes no timing figures.

Pricing tiers in October 2026

LeakCheck, per its pricing page:

HackCheck, per its pricing page:

HackCheck sells breach monitoring as an add-on from $2 a month; LeakCheck includes 25 monitors on Monthly. Neither refunds: LeakCheck's terms rule out refunds after payment, and HackCheck calls all payments "final and non-refundable".

The API entry price is the clearest gap: API access costs $9.99 a month at LeakCheck, full records included, against $29.99 a month at HackCheck, and LeakCheck's Lifetime plan includes the same Pro API for one $69.99 payment.

Reliability: what each vendor publishes

LeakCheck runs a public status page at leakcheck.statuspage.io. When we checked it on October 6, 2026, its Website & API component showed "100.0 % uptime" for the past 90 days, and its incident history listed no incidents for August, September or October 2026. That figure is self-reported, so it helps that a third-party page agrees: SaaSHub's unofficial LeakCheck status page, which combines automated checks with user reports, showed "100% up · 0 degraded days · 0 outages" for the last 30 days on the same date. It is built for volume too: a million queries a day on Enterprise and a rate limit you raise yourself. Its terms, like most, promise no uptime: the service is supplied "as is" and "as available".

HackCheck offers a broad search menu, IP-locked API keys and breach monitors with webhook alerts, but we found no public status page or uptime figure for it. Test both services against your own workload before you commit to a paid plan.

Which one for which job

For six more breach search engines, see our LeakCheck alternatives roundup.

Use breach search on your own accounts, your own domains and engagements you are authorized to run. Results from either service should not be used for employment, tenant, credit or insurance eligibility decisions.

The short version

LeakCheck is the better default for most buyers: 1,469 named, dated and flagged sources, stealer-log records with collection dates, a free Public API, a Pro API from $9.99 a month, and a status page that read "100.0 % uptime" over 90 days on October 6, 2026. HackCheck claims more records, adds full-name and IP search and reaches password and domain search for less, but documents no stealer-log coverage and publishes no uptime record. Check both pricing pages before you buy.

Frequently asked questions

Is LeakCheck better than HackCheck? For most API buyers, yes: a cheaper API ($9.99 against $29.99 a month), a free Public API, dated stealer-log records and a published source list. HackCheck is the pick for full-name or IP address search, or password and domain search below LeakCheck's Enterprise price.

How much does LeakCheck cost in 2026? As of October 6, 2026: Basic $2.99 a day, Monthly $9.99 a month, Lifetime $69.99 once, and Enterprise from $179 a quarter or $716 a year. The Pro API comes with Monthly, Lifetime and Enterprise.

How much does HackCheck cost? Silver $4.99 for two weeks, Gold $14.99 for two weeks or $29.99 a month, Diamond $39.49 a month or $399.49 a year. API access starts on Gold.

Does LeakCheck search info-stealer logs? Yes. Stealer-log records appear in normal email and username results with the site the credential was entered on and the date the log was collected. Search by site is on Enterprise.

Is the LeakCheck API free? The Public API is, including for commercial use with a "Powered by LeakCheck" link. It returns breach names, dates and data categories, never the values. Full records need the Pro API, from $9.99 a month.