See your exposure. Reduce it.
Check what the internet can see, understand the risk, and reduce what it exposes with tools that clearly state where your data is processed.
No account required. Core checks run on your device.
Quick check for this browser
Runs locally and sends no result
Start the check to read available settings directly from this browser and review them item by item.
Local-first processing
Sensitive inputs stay in your browser whenever the task allows it.
No behavioral tracking
The product does not build advertising profiles from your usage.
Encrypted by design
Modern browser cryptography protects local encryption workflows.
Clear privacy controls
Every tool states where and how your data is processed.
Deeper inspection with reviewable evidence.
Tools collect structural evidence, explain every result, and state the processing boundary before you begin.
Developer
HTTP Message Boundary Differential Lab
Detect CL/TE ambiguity, conflicting lengths, authority disagreement, parser-sensitive whitespace and hop-by-hop boundary hazards without replaying requests.
Runs locallyWebsite Security
CORS & Preflight Decision Laboratory
Simulate a browser CORS decision and audit wildcard credentials, null origins, Vary behavior, exposed headers and mutation methods.
Runs locallyWebsite Security
Cache-Key Integrity & Poisoning Auditor
Review shared-cache directives, routing headers, Vary dimensions, cookies and query keys for evidence-backed poisoning and leakage surfaces.
Runs locallyDeveloper
GraphQL Complexity & Resolver Surface Lab
Measure structural depth, fields, aliases, fragments, introspection, operation batching and high-impact mutation names without executing the query.
Runs locallyWebsite Security
WebAuthn & Passkey Ceremony Auditor
Audit challenge entropy, RP ID, COSE algorithms, user verification, attestation privacy, timeout and credential exclusion options.
Runs locallyDeveloper
OpenAPI Threat & Authorization Mapper
Map every API operation, declared authentication boundary, object route, request schema and error contract from OpenAPI evidence.
Runs locallyYour data path is clear before use.
Local tools do not send their inputs to the server or storage. Tools that need an external connection say so clearly.
Read our privacy modelChoose a tool
Read its processing method before entering data.
Run the task
Sensitive data stays local whenever possible.
Review the result
Get a real result with its limits stated clearly.
Understand a finding without sending it anywhere.
A practical local reference uses documented rules to explain common privacy signals and suggest a next step without sending text outside the browser.
All current tools are available without creating an account.
Start with a privacy scan →