Have I Been Pwned at 10+: The Quiet Infrastructure Evolution

Troy Hunt reflects on how Have I Been Pwned has grown from a straightforward website with a database of 150 million email addresses into a layered architecture spanning serverless functions, edge computing, and new data storage models. Even the basic act of querying an email address now runs through an entirely different mechanism than the original design.

Most of this evolution happens out of public view. Hunt notes that nearly every week brings meaningful code changes aimed at improving speed, long-term sustainability, and cost efficiency. This week’s update highlights one such significant under-the-hood change, part of the ongoing effort to keep the platform viable as its scale and complexity continue to grow.