What DeHashed does

DeHashed is a breach intelligence and open-source intelligence (OSINT) platform that aggregates compromised data from clear-web and deep-web sources into a searchable database spanning more than 24 billion records across 24,025 indexed data sources, including 10+ years of historical WHOIS data. The company serves individual consumers checking personal exposure, security analysts and professional investigators, Fortune 500 enterprises, law enforcement and government agencies (which receive free access), NGOs and 501(c)(3) nonprofits, and developer/SOC teams that integrate the data programmatically. Primary use cases include credential-compromise detection, account-takeover prevention, identity-fraud investigation, brand and domain protection, and large-scale OSINT investigations, supported by integrations such as Maltego and a strategic partnership with WHOISXMLAPI.

The platform consists of four interconnected core products — DeHashed Search (querying breached data by username, email, IP, phone, name, and VIN), DeHashed Monitoring (real-time alerting via email, SMS, and webhook), DeHashed WHOIS (domain and IP intelligence with reverse and historical lookup), and the DeHashed API (REST endpoints for programmatic access) — plus Data Wells, a publicly accessible directory listing every source in the collection. Underlying capabilities include proprietary data-aggregation pipelines, continuous indexing, reverse-search across WHOIS, IP/DNS, MX, and nameserver dimensions, and a claimed 6-hour average incident response time. The platform is positioned as FCRA-, GDPR-, CCPA-, and PIPEDA-compliant.

DeHashed runs a freemium go-to-market: most search and monitoring services are free for individual users, while paid tiers unlock higher task limits, full domain monitoring, and enterprise features. Subscription plans include Domain Monitoring at $29.99 per domain per month and Enterprise at $99.99 per month for 500 tasks, complemented by usage-based API credit bundles (Search API from $15 for 500 credits; WHOIS API at $0.04 per credit with volume discounts). Distribution is hybrid — product-led self-serve for individuals and developers, enterprise field sales for Fortune 500 and government clients, and a contact-based free-access program for law enforcement, NGOs, and registered nonprofits. The company is privately held, bootstrapped, headquartered in Las Vegas, Nevada, and operates with 11-50 employees, with no disclosed venture funding rounds.

Name

DeHashed

Legal name

DeHashed

Website

https://dehashed.com

Company type

Private

Founded year

2017

Operating status

Operating

Headcount range

11–50 employees

Short description

DeHashed is a breach intelligence platform indexing 24+ billion records across 24,000+ sources, offering Search, Monitoring, WHOIS, and API products. It serves individuals, security analysts, Fortune 500 enterprises, law enforcement, NGOs, and developer and SOC teams via a freemium and usage-based pricing model.

Ownership category

akta.pro rank

Product category

Breach Intelligence and OSINT

NAICS

Web Search Portals and All Other Information Services (519290), Security Systems Services (except Locksmiths) (561621)

SIC

Services-Prepackaged Software (7372)

akta.pro primary industry

Identity Threat Detection & Response (ITDR) (HDAEAJAH)

Keywords

• Breach data search
• Threat intelligence platform
• Dark web monitoring
• WHOIS intelligence
• OSINT API

Headquarters

HQ city

North Las Vegas

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Technology or R&D, Infrastructure, Personnel, Marketing or Sales, Operations

Revenue model

1. Freemium with Premium Tiers: Core search and monitoring services offered free to individual users; paid tiers provide higher task limits, domain monitoring, and API access.
2. API Credits: Pay-per-query model for API access, with credits purchased in bundles. WHOIS API charges $0.04 per credit for reverse searches.
3. Subscription Plans: Monthly subscription tiers including Domain Monitoring ($29.99/domain/month) and Enterprise Level ($99.99/month for 500 tasks).
4. Credit Packages: Prepaid credit bundles for Search API (500 credits/$15, 5,000 credits/$150, 10,000 credits/$300) and WHOIS (2,500 credits/$100, 25,000 credits/$1,000).

Pricing tiers

Go-to-market motion3 records

Distribution channels4 records

Marketing channels4 records

Core offering

DeHashed operates a breach intelligence and OSINT platform that aggregates compromised credentials from the clear-web and deep-web into a searchable index of 24+ billion records. It sells Search, Monitoring, WHOIS, and API products to security teams, investigators, law enforcement, enterprises, and individual consumers, with freemium access and paid subscription/usage-based tiers.

Product overview

DeHashed is a Security & Intelligence firm offering a platform of four interconnected core products: Search (a breach data search engine for usernames, emails, IPs, and more), Monitoring (real-time breach alerting via email, SMS, and webhooks), WHOIS (domain and IP intelligence with historical data and reverse search), and API (programmatic OSINT access for developers and enterprises). A fifth offering, Data Wells, serves as the publicly accessible breach directory listing the 24,025+ data sources and 24+ billion records in the platform. The platform is used by law enforcement agencies and Fortune 500 companies for threat intelligence, fraud prevention, and OSINT investigations.

Differentiator

Problem solved

Functional benefit

Products and services

• DeHashed Search A breach data search engine for querying compromised credentials by username, email address, IP address, phone number, name, VIN, and more, used by security teams, OSINT investigators, and consumers for threat detection and account compromise prevention.
• DeHashed Monitoring A real-time breach monitoring service that tracks sensitive personal and organizational data across clear-web and deep-web sources and delivers notifications via email, SMS, and webhook when compromises are detected.
• DeHashed API A REST API providing programmatic access to DeHashed breach intelligence datasets, enabling advanced queries, automated prevention workflows, list scanning, and integration with SOCs, native applications, and OSINT tools such as Maltego.
• DeHashed WHOIS A unified domain and IP intelligence product offering enriched WHOIS responses, 10+ years of historical WHOIS records, reverse WHOIS lookup, reverse IP/DNS lookup, reverse MX, reverse nameserver search, and deep subdomain enumeration for OSINT investigations.
• Data Wells A publicly accessible directory listing the breach data sources in DeHashed's collection, with over 24,025 sources and 24,136,091,117 records updated continuously, used to demonstrate dataset scale and freshness to investigators.

Quantifiable outcome

• 48,000+ incidents responded to (2020)
• +3 more outcomes

Named customers11 records

Segments6 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration1 record

Feature6 records

Partnerships

Three partnerships are on record, tiered core and minor.

• WHOISXMLAPIcoreTechnology or IntegrationClose partnership for contextualization and interpretation of WHOIS and DNS data. Teams work together to provide enriched domain intelligence data for a safer Internet. Includes API integration for combined data services.
• DetectBeeminorGTM or Marketing PartnerFraud prevention service that uses DeHashed data. Customer testimonial describes aligned cybersecurity-first mindset. Companies look forward to growing together in the cyber security landscape.
• Breakin LabsminorGTM or Marketing PartnerInformation technology and cybersecurity firm listed as a trusted company using DeHashed data for security offerings.

Scale indicators9 records

Recent moves5 records

Expansion highlights5 records

Emerging players

• WHOISXMLAPI: Domain, WHOIS, and DNS intelligence API provider that is both a public technology partner of DeHashed and a comparable provider of reverse-WHOIS, IP, and domain enrichment data. Comparable for the WHOIS/DNS-intelligence subset of DeHashed's product line.
• Flare: Digital-risk and threat-monitoring platform including illicit-community and breach-data exposure detection. Adjacent peer covering similar enterprise use cases (third-party risk, ATO prevention) with a newer SaaS-first go-to-market.

Direct peers

• SpyCloud: Enterprise-focused breach-data and account takeover prevention platform recapturing stolen credentials, cookies, and PII from criminal forums. Directly comparable as a paid API-centric competitor targeting fraud and ATO use cases rather than consumer breach search.
• Intelligence X: OSINT search engine for leaked datasets, historical breach records, and darknet content with similar investigator and developer audience overlap. Most similar product/market positioning in the breach-intelligence category.
• Constella Intelligence: Identity-breach intelligence platform (formed from the merger of 4iQ and Constella) that combines stolen credentials with identity-graph analytics for ATO and fraud prevention. Directly comparable in serving enterprise fraud and security teams with breach-derived identity data.
• LeakCheck: Subscription-based breach-credential lookup service similar in interface and consumer/SMB positioning. Direct peer competing on price and dataset breadth in the breached-data search category.
• Have I Been Pwned: Long-established consumer and enterprise breach-notification service offering credential and email exposure search. Closest direct conceptual peer to DeHashed's Search and Monitoring products, differing primarily in monetization model (donations/enterprise licensing) and dataset scope.
• Hudson Rock: Cyber-intelligence provider specializing in credentials, cookies, and system information stolen via info-stealer malware, sold to enterprise security teams. Direct peer on data-source type (criminal-extracted data) and buyer (corporate fraud/SOC teams).

Broad incumbents

• Recorded Future: Large-scale threat-intelligence platform covering breach data alongside malware, vulnerability, and geopolitical intelligence with an enterprise analytics layer. Broader incumbent that includes similar breach telemetry within a much larger portfolio; competes for enterprise security budget.
• Intel 471: Established cybercrime intelligence vendor focused on adversary and access intelligence with adjacent breach-credential offerings. Broader incumbent where DeHashed's breach search is a narrower, more self-serve point solution.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/dehashed
• LinkedInlinkedin.com/company/dehashed

Compliance4 records

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about DeHashed