Companies that use Have I been Pwned

Source: Analysis of Linkedin bios of 14,600 companies that use Have I been Pwned

I analyzed these companies and found that Have I Been Pwned users span an incredibly diverse range of industries, but they share common threads. These are companies handling sensitive customer data in their day-to-day operations. I see healthcare platforms managing patient information, financial services firms processing transactions, retailers with customer accounts, educational institutions protecting student data, and logistics companies tracking shipments. They build everything from property management software to wine distribution networks to defense manufacturing systems. What unites them is that they all maintain digital systems where account security directly impacts their business operations.

These companies skew toward established businesses rather than early startups. I see many with 50-500 employees, multi-decade operating histories, and stable business models. Several mention being founded in the 1990s or earlier. While there are some venture-backed companies in the mix, the majority appear to be profitable, operationally focused businesses. They mention things like ISO certifications, established client bases, and proven track records rather than disruption or innovation metrics.

Source: Analysis of tech stacks from 14,600 companies that use Have I been Pwned

I noticed that companies using Have I Been Pwned are security-conscious organizations with mature digital operations, likely in the B2B space. The combination of enterprise Microsoft tools, digital agreement platforms, and collaboration software tells me these are established companies that handle sensitive customer data and take compliance seriously. They're not startups experimenting with point solutions but rather organizations with dedicated security and IT teams managing complex tech environments.

The pairing of Intune and Azure DevOps makes perfect sense together. These companies are deep in the Microsoft ecosystem, using Intune to manage devices and Azure DevOps for their development pipeline. Adding Have I Been Pwned shows they're thinking proactively about credential security across their entire organization. The extremely high correlation with 1Password Data Breach Scanner is particularly telling because it means these companies are layering multiple breach detection tools, suggesting either regulatory requirements or a particularly cautious security posture. Miro's presence indicates these are collaborative organizations that likely have remote or hybrid teams working on complex projects that require visual planning and coordination.

The full stack reveals these are likely sales-led B2B companies in a growth or mature stage. Docusign's strong correlation suggests they're closing deals that require formal agreements and likely operating in regulated industries. Google Search Console shows they care about organic visibility, but the enterprise tools dominating the list tell me they're primarily focused on direct sales and customer retention rather than pure product-led growth. These aren't early stage companies figuring out their infrastructure but established players with formal security programs.