Every check, in one place
24 checks across identity, email, domains, and network. Each one ends in a grade and a short list of fixes. Run them in your browser or in the app.
Username presence
Which well-known sites have an account under your handle, so you can see what one name links together.
Breach exposure
Which known data breaches included your email address, and what was taken.
Infostealer exposure
Whether credentials for your email were captured by info-stealing malware on an infected computer.
GitHub exposure
What your public GitHub account gives away: contact details, commit emails, keys, and telling repo names.
Phone number exposure
What a phone number gives away: whether it is live, its line type and carrier, and why it is the identifier that SIM-swap attacks and data brokers key on.
Data broker exposure
The brokers and people-search sites most likely to hold a profile on you, what each one keeps, and a direct opt-out link — highest reach first, so the removals that ripple furthest come first.
Password exposure
Whether a password has shown up in known breaches. It is hashed on your device and never sent anywhere.
Email posture
Check whether your email domain is protected against spoofing and downgrade.
Email address check
Check an email domain's mail routing, spoofing protection, disposable status, and public Gravatar. Mailbox existence is not verified.
DNS records
Inspect the public records that route and verify a domain.
Domain surface scan
Queue a compact review of DNS and public web-response signals.
Security headers
Grade the HTTPS response headers and cookies of a site you run.
Domain registration
Registrar, expiry, locks, DNSSEC, and whether your contact details are public.
Certificates & subdomains
Find every host name that public certificate logs reveal for your domain, and which still resolve.
Archived snapshots
See how far back the Internet Archive has copies of your site, including pages you removed.
Tech stack
Identify the platform, hosting, and third-party scripts a site exposes to visitors.
IP address context
See what an IP address reveals: who owns it, where it sits, and what its reverse DNS says.
Exposed services & CVEs
See which open ports, software, and known CVEs are visible on an IP from the public internet, using Shodan's passive scan data.
Wallet exposure
What an Ethereum address reveals: balance, activity, who it has dealt with, and spam tokens dropped on it.
Find a company
Start from the name you know. Returns the companies that could be it, each with the identifiers the public registers ask for, so you never have to know a legal name.
US screening lists
Whether a name appears on the restricted-party lists the US government publishes: Treasury, Commerce and State.
GLEIF entity record
Legal identity and corporate ownership from the global LEI index: jurisdiction, national registration number, status, and parent companies. Covers entities that needed an identifier for a regulated market.
Locate a photo
Read the clues in a photograph — a landmark, a sign, the light — to estimate where it was taken, and check whether a claimed location holds up. A verification aid, not a locator.
Photo metadata check
See what a photo gives away before you send it: the GPS coordinates, the moment it was taken, and the device that took it. The file is read and discarded, never stored.
No checks match that.
Every check is for your own footprint, or one you are authorized to assess. See the acceptable use policy.