Hands-on utilities I build and publish here — free, fast, and running entirely in your browser.
Convert PDFs, images, DOCX, spreadsheets, text, data, ZIPs and audio locally in your browser. Files are never uploaded.
Launch →Paste the raw headers of a suspicious email to trace its real origin, read the SPF, DKIM and DMARC results, and flag sender spoofing — all in your browser, nothing sent anywhere.
Launch →Enter your email or name to map where your personal data is publicly exposed — breaches, public profiles, people-search sites — and get a direct opt-out link for each.
Launch →Enter keywords (and an optional target site) to build ~50 advanced search queries across 10 categories — files, exposed folders, logins, social profiles and more. Click any dork to view live results.
Launch →Enter a domain to discover its subdomains from public certificate-transparency logs — passive recon that sends nothing to the target. For assets you own or are authorized to test.
Launch →Search the NIST National Vulnerability Database by product and version — or a CVE id — to see known security flaws, CVSS severity and fixes.
Launch →Paste a JSON Web Token to decode its header and claims, read the expiry in plain English, and flag insecure signing like the “none” algorithm. Runs entirely in your browser.
Launch →Audit a domain’s TLS certificate (issuer, expiry, trust) and whether it can be email-spoofed — SPF, DKIM, DMARC and MTA-STS — in one pass.
Launch →Route your browser through your own encrypted tunnel with a one-click extension — no account, no shared server, nothing to trust. Download and go.
Launch →Estimate crack times and get instant suggestions to harden any password.
Launch →Unshorten and expand suspicious links to see where they really lead — before you click.
Launch →Base64, URL and hex encoding-decoding with one-click copy. Nothing leaves your device.
Launch →Generate and verify SHA-256, SHA-1 and MD5 checksums for text and files.
Launch →Enter an email to see which known data breaches it appears in — and exactly what was exposed.
Launch →Enter any phone number, any country, to see which data breaches exposed it — and what leaked alongside.
Launch →A live awareness demo: see exactly what your browser hands over the moment you open a link — IP, location, provider and device fingerprint — the same data a malicious “IP logger” secretly collects. Shown only to you, stored nowhere.
Launch →PhoneInfoga-style number intelligence — parse any number’s country, line type and every format, then launch a full OSINT footprint across reverse-lookup, reputation and search sources. Parsing runs entirely in your browser.
Launch →Paste any URL to grade its load speed, page weight, mobile-responsiveness and security headers — with plain-English fixes.
Launch →Drop in a photo to reveal its hidden EXIF data — GPS location, camera fingerprint and timestamps — mapped and geolocated. Runs entirely in your browser.
Launch →Check what any domain or IP reveals about itself — records, location, and more.
Launch →Create transparent links that report coarse location and device details only after visitor consent.
Launch →New utilities are published here as they're built. Suggest one via the contact form.