Index › IT › Products › Have I Been Pwned · November 2026 Edition
2 categories · Named, not ranked

Have I Been Pwned

Have I Been Pwned is a threat intelligence product for breach and credential monitoring · haveibeenpwned.com ↗

–Too few to rank
3/14Models named it
0First choices
1Warnings
November 2026 Edition · all company sizes counted.
Ranked inDigital risk protection #114 mid-marketThreat intelligence platforms #57
What AI models recommend

Named, too few times to rank.

A product needs 10 labels in a category before a share is stated. Have I Been Pwned has 3.

Why models recommend it

“Use Shodan (free tier), Have I Been Pwned, or Google Dorks for external intel”Grok 4.20 · Budget-constrained question · alternative

What gives them pause

“Avoid free/consumer tools like Have I Been Pwned for business-scale needs.”Grok 4.20 · Paraphrase question · warning

Also on the shortlist

The products named in the same answers as Have I Been Pwned, over the 10 answers that named it, and how often each was the first choice instead.

A side-by-side page exists where both products are among a category's top eight.

At a glance

Stated on Have I Been Pwned's own site, not checked by Gane.

For
Security professionals, MSPs, developers, government agencies
Price stated
Core: 4.39 USD/month; Pro: 379 USD/month; High RPM: 1150 USD/month; Enterprise: Custom pricing, contact us
Starting price
4.39
Visit haveibeenpwned.com ↗

How this is measured

Fourteen AI models from 12 labs are asked the same buying questions six ways, for three company sizes. Standings refresh every edition.

Gane sells AI visibility software. No company can pay to change a result.

Read the method →

Sources returned with these answers

The sites and pages the answers that named Have I Been Pwned came back with. A fact about retrieval, not a cause of the answer.

Fourteen of the fourteen models returned a source list in this edition: five return the pages they cited and nine the search results they consulted. These counts come from 9 of the 10 answers that named Have I Been Pwned and are not a share of its labels.

Domains cited

softwareadvice.com5
g2.com4
spotsaas.com4
aws.amazon.com3
b2breviews.com3
breachsense.com3
flare.io3
gane.ai/indexpublisher (Gane)3
upguard.com3
cloudsek.com2

Thirty of the thirty-three domain citations in answers naming Have I Been Pwned came from a third party's page. Three were to the publisher's own pages (the Gane Index), which the models cite like any other source; they are not counted as a third party.

Pages cited

Pages are listed as the models cited them.

By model

How each model answered on Have I Been Pwned across every prompt where it was named for a mid-market B2B company. Fourteen models, six prompts per category.
ModelFirst choiceAlternativeMentionWarningLabels
Claude Haiku 4.500000
GPT-5.4 mini00000
Gemini 3.5 Flash00000
Perplexity Sonar00000
Grok 4.2001113
Mistral Small00000
DeepSeek V4 Flash00000
Llama 4 Maverick00000
Qwen 3.7 Flash00000
Kimi K200000
GLM 4.7 FlashX00000
MiniMax M2.500000
GPT-6 Luna00000
Muse Glimmer 30B00000

What it publishes

Addresses on haveibeenpwned.com
1,117
subdomains included
Content
5
counted in the table below
Documentation
2
Product · Integration
49 · 0
KindPagesLast 90 days2025-10 to 2026-09LatestCategories named
Conference or event3undated
Report or ebook2undated
How it is countedHide how it is counted

Every page haveibeenpwned.com exposes, subdomains included. Kind is read from the address and title. The last 90 days, the latest date and the twelve months count pages by when they were published, from the site's feeds, a date in the address, or the page's own publication date, read from up to a hundred of its most recently changed pages; a page that says only when it last changed is counted in its kind but not in when, so the recent counts are a floor, and a kind none of whose pages gives a publication date reads undated. An event counts as online when its address or title says so (webinar, on demand, virtual or online summit); a conference, summit, trade show, expo or roadshow that does not say so is counted as a conference or event, which on a vendor's site is mostly in person. Read September 29, 2026.