Skip to content
Browse documentation

Skill guides · 2 min read

Breach exposure search

Search authorized breach intelligence for a public identifier.

When to use it

Use this to review authorized breach intelligence for an identifier you are investigating. An email address is a clear starting point. Keep the query focused on the identifier rather than entering passwords, account credentials, or a list of unrelated subjects.

Before you start

Available on Pro and Agency. Fill every required field. Example values below illustrate the form; replace them with your intended subject.

FieldRequiredWhat to enter
Email or public identifierRequiredEnter email or public identifier.

Run the Skill

  1. In Skill library, find Breach exposure search and select Use template.
  2. Fill in the template fields using your subject’s details, then check the Preview.
  3. Select Insert into chat to load the prepared request into the investigation composer.
  4. Check the intended case and send the unchanged request to run this Skill. To change its inputs, return to the template and insert it again.
Example
Email or public identifier: [email protected]

Read the results

Review the redacted exposure findings, references, and ambiguity for each match. Distinguish a record containing the identifier from evidence about present account access or control. Exposure can be historical, duplicated, or insufficiently attributed. A result should provide context for further assessment while keeping credentials redacted; an empty result does not prove the identifier has never been exposed.

Need help with your account or an investigation? Contact support.