Have I Been Pwned - Enrich Users' Data

Have I Been Pwned - Enrich Users' Data enriches users returned by the selected query or selected on the relevant asset page with breaches, pastes and pwned passwords identified by 'Have I Been Pwned' (HIBP) website.

Required Fields

These fields must be configured to run the Enforcement Set.

• API key - The API Key that have been purchased from 'Have I Been Pwned'.

• Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Connecting Additional Axonius Nodes.

Additional Fields

These fields are optional.

• Have I Been Pwned (HIBP) domain (default: https://haveibeenpwned.com) - The hostname or IP address of the Have I Been Pwned (HIBP) server.

• Verify SSL (optional) - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

• HTTPS Proxy (optional) - Connect the adapter to a proxy instead of directly connecting it to the domain.

• Alternative email suffix (default: empty) - Specify a comma-separated list of additional email suffixes, that will be also be checked for breaches, pastes and pwned password identified by 'Have I Been Pwned' (HIBP). This field may be useful if users emails in the organization have several email suffixes.

• Domain include list (default: empty) - Specify a comma-separated list of email domains.

  • If supplied, Axonius will request Have I Been Pwned to check only users from the given query their email is in the specified list.
  • If not supplied, Axonius will request Have I Been Pwned to check all users from the given query.

• Rate Limit (requests per minute) (default: 10) - Use this field to handle rate limit issues by HIBP documentation. It is possible to buy an account with a better rate limit.

• Extra fields for enrichment - Add email fields to be evaluated by Have I Been Pwned. Select an adapter and a field. Click Add Fields to add more fields. Click the x to the right of a field to delete it.