Free keyless breach monitoring using curl, jq, and a cron job

A developer behind XposedOrNot, a free open-source breach index, has shared a lightweight shell script that monitors email accounts for new data breaches without requiring an API key or account signup. The script runs nightly via cron, querying the XposedOrNot API for each address in a list and sending an email alert only when the breach count increases from its last known value. State is tracked through small local files, and a built-in three-second delay between requests keeps usage within the API's per-IP rate limits. The tool currently indexes 774 known breaches, with the project noting that the median lag between a breach occurring and becoming publicly known is over four years. The entire codebase is MIT-licensed and available on GitHub, and domain owners can also verify ownership to access organisation-wide breach visibility for free.