Features

Your AI security analyst,
on call 24/7

DoxxScan™ maps every link between your real name, your handles, and what they reveal about you — home address, phone, employer, family. A built-in AI Concierge answers any question about your exposures, drafts opt-out emails for the brokers selling your data, and writes a custom remediation for each leak. Built for creators, streamers, gamers, traders, executives, and anyone whose address shouldn’t be Google-able.

15.4B+
records scanned
8
identifier types
<5s
scan time
AI
remediation
Smart Chain Crawl — 3 hops deep

Smart Chain Crawl — 3 hops deep

Most leak checkers stop at “your email is in 7 breaches.” DoxxScan chains outward: your email exposes your username, your username exposes your phone, your phone exposes your home address. Each hop is a new search vector. Warden Plus runs the full 3-hop crawl with address recursion.

Hop 1 — Primary search
Anchor on any one of 8 identifier types: email, username, phone, password hash, full name, IP, physical address, or gamertag. Returns every record that matches.
All plans
Hop 2 — Linked identifiers
Every identifier discovered in hop 1 becomes a new search vector. We follow your username into other forums, your phone into other breaches, your address into broker dumps.
Warden Plus
Hop 3 — Address recursion
The killer step. If hop 2 reveals a residential address, hop 3 maps every record tied to that address — flagging household members, prior tenants, and broker resells.
Warden Plus
Visual chain pipeline
Your DoxxScan report and dashboard render the full chain as a step-by-step pipeline so you see exactly which identifier led to which record. Nothing about the engine is a black box.
All plans
15.4B+ records, 6 chained vectors
Each hop searches across 15.4 billion+ breach records including combo lists, paste dumps, dark-web markets, and broker resell aggregations that basic checkers miss entirely.
All plans
Re-runs on demand
Run a fresh chain crawl any time from the dashboard with one click. Plus subs get a daily quota; the AI Concierge can fire one for you from chat too.
Warden Plus
AI Concierge — your security analyst

AI Concierge — your security analyst

Every other monitoring service stops at “here are your alerts.” DoxxScan’s AI Concierge actually does things. Ask it anything about your exposures in plain English. On Warden Plus, hand off the work entirely: it runs fresh crawls, drafts opt-out emails to brokers, and writes a custom remediation for each leak based on your specific data.

Grounded conversational chat
Ask questions in plain English: “How many open exposures do I have?” “What should I fix first?” “Who’s on Spokeo right now?” Replies are anchored to your real dashboard data. No made-up scores, no fabricated tools.
All plans
Custom AI remediation per exposure
For every leak, generate a remediation written for that specific exposure — service, severity, breach year, what was leaked, what overlaps with your other accounts. Not a template. Not a checklist.
Warden Plus
Draft an opt-out email in one click
From the broker-removal dashboard, click “Draft opt-out email” on any broker and the Concierge writes a polite, CCPA/GDPR-aware request for you to send. Channel-aware: email body for brokers that accept email, copy-paste body for those that use online forms.
Warden Plus
Run a fresh chain crawl from chat
Ask “run a fresh crawl” in the Concierge and a new crawl fires immediately. Results land on your dashboard in 30 seconds. Limited to 10 actions per 24 hours per account so the AI cost stays sane.
Warden Plus
Credentials never reach the AI
Strict isolation: the AI sees metadata only (service name, severity, breach year, field types). Your actual passwords, hashes, full addresses, and phone numbers never leave our server. Placeholder substitution happens after the AI replies.
All plans
Audit log for every action
Every Concierge action is logged with action type, timestamp, duration, and result. View your own audit trail any time. An AI agent that acts on your account should be inspectable, not magic.
All plans
Broker Removal Dashboard — 800+ sites, ranked for you

Broker Removal Dashboard — 800+ sites, ranked for you

800+ data brokers are selling your address, phone, and family right now — Spokeo, BeenVerified, Whitepages, Intelius, FastPeopleSearch, MyLife and dozens more. Our broker-removal dashboard ranks them by how likely they are to have your data, files authorized-agent opt-outs for you in paced daily batches, and tracks every send in your Sent Log. Sourced from the Vermont Data Broker Registry, California DROP, and the Big-Ass-Data-Broker-Opt-Out-List.

800+ brokers tracked, ranked by exposure risk
We don’t dump a flat list. The high-risk people-search sites — the ones that publish your home address, phone, and family — surface first, with the ones we can send for you (vs. manual-only) prioritized so you act on what matters fastest.
All plans
Channel-aware opt-outs
Some brokers want an email. Most want you to fill out a web form. A few need a fax. The dashboard surfaces the right primary CTA per broker so you never email a form-only site.
All plans
Opt-outs filed for you
Once you sign the authorized-agent authorization, we send formal CCPA/GDPR opt-out requests on your behalf — first batch immediately, the rest in daily batches. Every email body is visible in your Sent Log.
All plans
Weekly URL health-check
Brokers move their opt-out forms constantly. We HEAD-check every broker URL weekly and flag dead links so you never waste a click on a 404.
All plans
Progress tracking
Every broker moves through a tracked journey — queued, sent, awaiting reply, confirmed removed — with a day-30 re-verify pass that re-fires letters at any broker that ignored the first one.
All plans
You stay in control
Nothing sends until you review your data and sign the authorization — and you can revoke it any time from settings. Requests go from our agent address, never your inbox, and the few identity-verification brokers only you can complete are clearly flagged for you.
All plans
Near-real-time breach alerts — 15–30 minute latency

Near-real-time breach alerts — 15–30 minute latency

The industry standard is “weekly digest.” By the time you see a new breach in a weekly email, attackers have had six days. We poll new breach indexes every 15 minutes and fan out matches to your monitored identifiers within half an hour.

15-minute breach-feed poll
Every 15 minutes a job checks the global breach index for newly-added breaches and cross-references your monitored identifiers. Matches fire an alert immediately.
All plans
Weekly digest emails
In addition to real-time alerts, you get a polished weekly DoxxScan digest summarizing every change so nothing slips through the cracks.
All plans
Weekly re-scan cadence
Warden Plus re-scans every identifier weekly — and your included OneShot month runs on the same weekly cadence — so your DoxxScan is never stale.
All plans
Chain re-resolution on alert
When a new exposure fires, Plus subs get the full chain re-resolved automatically. New linked identifiers, address recursion, dashboard update. No re-trigger needed.
Warden Plus
Breach Intelligence

Breach Intelligence

Every DoxxScan report includes detailed intelligence. Not just “you were in a breach” but exactly what was exposed, when, how severe, and how it ties into the rest of your digital footprint.

Severity breakdown
Every exposure is tagged critical / high / medium / low based on what was leaked. Password hashes and financial data rank above email-only exposures.
All plans
Breach timeline
See exactly when your credentials appeared in each breach, which sites were affected, and what categories of data were involved.
All plans
Plaintext password flagging
Plus reveals when your actual passwords appear in plaintext across breach databases. The most critical exposure type to fix first.
Warden Plus
Password-hash cross-reference
Find accounts sharing the same password hash across different breaches. Reveals reuse even when the plaintext isn’t exposed.
Warden Plus
Attack-surface map
Visual map showing how far an attacker could reach from your email alone. The full blast radius of your digital exposure.
Warden Plus
Downloadable PDF report
Professional PDF with all findings, breach details, and custom AI remediation per exposure. Keep it for your records or share with your security team.
Warden Plus
Monitoring & Reports

Monitoring & Reports

Reports show you what’s exposed right now. Continuous monitoring watches your credentials and alerts you when they appear in new breaches.

Monitoring included with OneShot
Your $19 OneShot includes 30 days of full Warden Plus monitoring — all three identifiers and real-time alerts — at no extra cost.
All plans
3 identifiers monitored — Plus
Monitor up to 3 different identifier types: email + phone + name + address, or any combo. Each one gets its own chain crawl and real-time alerts.
Warden Plus
Monthly DoxxScan report
Once a month we re-scan every monitored identifier and deliver a polished DoxxScan report email summarizing every change since last month.
All plans
Weekly DoxxScan report
Weekly cadence on Plus. You see exposures faster and your chain stays fresh against the latest breach drops.
Warden Plus
Live dashboard
The dashboard shows every monitored credential, its exposure status, the chain crawl, your remediation progress, and your next scheduled report at a glance.
All plans
Identifier-swap cooldown
A 30-day cooldown (14 on Plus) per identifier slot prevents abuse: nobody can rotate monitored identifiers as a poor-man’s OSINT tool.
All plans

OneShot includes 30 days of Warden Plus free · No subscription required · Cancel anytime

Pricing

Choose your protection level

OneShot is one-time · subscriptions cancel anytime.

OneShot
$19 once
  • One full scan + removal letters to 800+ sites
  • 30 days of Warden Plus included free
  • Day-30 re-check with emailed proof
  • No subscription, never auto-charged
Get OneShot →
Most popular

Warden Plus

$8.25/mo

$99/yr billed annually · or $9.99/mo monthly

  • 3 identifiers monitored
  • Weekly re-scans + same-day alerts
  • AI + Analyst Concierge (hybrid)
  • Smart 3-hop chain crawl
  • Pre-drafted broker takedown emails
Activate Warden Plus →
Enterprise
Custom

Built around your team.

  • Dedicated protection team
  • API integration on creator signup
  • Executive Defense (per-principal)
  • Custom data-broker removal
  • SLA + on-call escalation
Talk to sales →

Secure checkout by Stripe · Apple Pay & Google Pay accepted · View full pricing comparison →

Roadmap

Built in public. Here’s what we’ve shipped.

From v4.0 launch in January 2026 to the latest deploy this week.

Foundation — GalaxyWarden v4.0
DoxxScan engine: 15.4B+ record breach-database search · per-row credential storage with mask-on-write · user accounts, subscription tiers, dashboard scaffold · Stripe-backed Warden + Plus tiers.
Jan 10, 2026 · Shipped
Conversion + monitoring scaffold
Cold-scan funnel + cleanup pricing · multi-step upgrade flows · email nurture sequences · recurring monitoring scaffold · admin funnel analytics.
Feb – Mar 2026 · Shipped
Smart Chain Crawl — the recursive walker
3-hop recursive PII chain crawl (email → phone → address) · persistent hop-trace storage · visual 3-step chain pipeline on report · Plus-tier depth differentiator.
Apr – Early May 2026 · Shipped
AI Concierge launch
Concierge chat grounded in real exposure data · three Plus actions (fresh crawl, opt-out drafting, custom remediation) · rate-limited + audit-logged + credential-isolated · 15-minute breach alerts · broker dashboard with channel-aware routing.
May 14–15, 2026 · Shipped
Discoveries + location intelligence
Five new discovery panels (Gravatar, phone triangulation, WHOIS, sources transparency, account timestamps) · standalone /ai-concierge page · /concierge command center · home/work-cluster inference + location map.
May 16, 2026 · Shipped
The real-action sprint
Live broker presence verification from the Concierge · authorized-agent send-on-your-behalf with full Sent Log transparency and automated reply handling · paced daily batches with day-30 re-verification.
June 2026 · Shipped
Location intelligence expansion
Google OAuth integration for Maps-review cleanup and “Remove from Google” requests · deeper household-coverage tooling.
Summer 2026 · In development

Your credentials may already be exposed.

Run your free breach scan in 30 seconds. See every breach you appear in. Then close the broker half for $19.

No card for the scan · OneShot is one payment · 30 days of Plus included free