Breachtide correlates four independent breach intelligence feeds for every email address you verify, hashes the result, and delivers a graded alert only when the picture genuinely changes. No noise. No duplicate notifications. No surveillance of addresses you do not own.
Most monitoring tools surface a single public index. Breachtide cross-references four independent feeds, deduplicates the overlap, and ranks the result by what actually matters to a defender: whether a usable credential is now in circulation.
Decades of compiled breach corpora indexed by exact email address. The first place to confirm whether a credential set has ever been exposed.
Active stuffing combolists harvested from forums and chat dumps. The earliest reliable signal that a working password is in circulation.
A continuously refreshed index of disclosed breaches. Names the source database and the earliest known appearance of the address.
On a confirmed hit, the enriched lookup returns the exact values that leaked: passwords, hashes, government ID, address, phone. Encrypted at rest for 90 days, visible on every paid plan. The Free tier sees the field categories without the values themselves.
Each sweep produces a sorted, hashed result. If the hash matches the previous sweep, nothing happens. If it changes, the delta is classified by severity and sent once, with the exact fields that newly appeared and a dashboard link to inspect the rest.
Every step is recorded, signed, and replay-safe. The same sequence runs whether the cadence is weekly, daily, or twice-weekly priority.
A one-time confirmation link goes to the inbox. Without that click, no sweep ever runs.
Each verified address is queried across four independent feeds on a per-plan cadence.
The sorted result is hashed against the previous sweep. Identical hash, no alert.
A change is graded by severity and sent once, with the exact fields that newly appeared.
Webhook deliveries are signed with HMAC-SHA256 against a per-account secret you rotate at any time. Email deliveries land in plain prose with the same field-level detail. Either format names the source, the delta, and the fields that newly appeared.
// POST {your_webhook_url} // header: X-Breachtide-Signature: sha256=<hmac> { "event": "alert.created", "severity": "critical", "address": "[email protected]", "source": "combolist", "summary": "new plaintext password in circulation", "delta": { "previous_count": 3, "new_count": 4, "new_source_dbs": ["forum.dump.2026-04"], "newly_exposed_fields": ["password"], "has_new_plaintext": true, "is_first_scan": false }, "observed_at": "2026-05-07T14:22:08Z", "dashboard_url": "https://breachtide.com/dashboard/emails/me_0193..." }
Breachtide does not let you scan email addresses you cannot prove ownership of. Every monitored address starts with a one-time confirmation link delivered to that inbox.
High-value targets for credential stuffing and account takeover. Continuous coverage across the email addresses tied to your name and your companies.
Source-protection workflows depend on knowing immediately when a sensitive address surfaces in a leak. No bulk lookups, no scraping a target list.
A single dashboard for every address you actively use. Family accounts, banking aliases, recovery inboxes, all monitored on one bill.
Plain-language alerts to the notification address you set. Includes the field-level detail when your plan permits it, redacted otherwise.
Signed JSON delivery into your endpoint of choice. Per-account HMAC secret, rotate from settings, retried with backoff on 5xx.
Read-only API for pulling current scan state and alert history into a SIEM or in-house dashboard. Token-prefixed, scoped, revocable.
Pay in Bitcoin, Ethereum, USDT, and other chains through OxaPay. Works for every paid plan, on monthly or annual billing.
Pay in BTC, ETH, USDT, TRX, and other supported chains. Each invoice settles a fixed billing period; renewal is a fresh invoice, never an automatic pull from a wallet. No card data, no banking trail.
The only personal data Breachtide stores is the verified email address you ask it to monitor. Crypto checkout means even the billing identity stays off the books.
No credit card to sign up. The free tier covers one verified email address. Upgrade only when you need more capacity.