Terms

IDSentinel lets you check whether an email address or identifier appears in known info-stealer malware logs. It's provided for personal security awareness — deciding whether to change a password, enable two-factor authentication, or otherwise reduce your own exposure.

Only search identifiers you're authorized to check — your own, or ones you have explicit permission to look up on behalf of someone else (e.g. as part of your organization's security team).

Don't attempt to scrape, brute-force, or bulk-enumerate the lookup endpoint outside the rate limits attached to your plan. Don't use a report to harass, dox, or otherwise target the person it describes.

API access is available on Pro and Enterprise plans and is subject to the same acceptable-use rules as the web interface.

You're responsible for keeping your account credentials and any API keys you create confidential. Free accounts include a starting credit balance; additional credits can be added via voucher codes or referrals. Credits are non-refundable and hold no cash value.

The service is provided "as is." A clean result means no match was found in the data we currently index — it isn't a guarantee that an identifier has never been compromised. We make a good-faith effort to keep the underlying data accurate and current, but we don't warrant completeness.

We may suspend or terminate accounts that violate acceptable use, including abusive automated traffic or attempts to circumvent rate limits. You can delete your own account at any time from Profile settings.

We may update these terms as the product changes. Continued use after an update means you accept the revised terms.