Guides for handling sensitive files safely, with local tools so nothing you are working on ever leaves your machine.
Half the web negotiates post-quantum handshakes while certificates stay classical. Run a five-minute local audit to see where your domains stand.
Six AI detectors compared on signup, free caps, price, and where your text is actually processed, plus how to read a 99% accuracy claim.
Verify your FIDO2 key is genuine with a browser-only routine: read its attestation chain, check fingerprint leaks, and test backup password strength.
Catch tracking tokens, API keys, and credential leaks in URLs before you share them. A 30-second audit workflow using CapyToolkit's URL Parser.
How Shannon entropy and zxcvbn pattern analysis expose the gap between perceived password strength and actual crack resistance.
Percent-encoding rules for API developers: which characters need escaping, when to use encodeURIComponent, and how to fix unencoded-request failures.
Decompose URLs into every component, inspect query strings for tracking tokens and leaked credentials, all without sending data to any server.
Inspect X.509 certificates in your browser without uploading. Read the full chain and catch expiry, weak keys, SHA-1 signatures, and misconfigurations.
Scan Kubernetes and Terraform configs for secrets before committing. Detect hardcoded credentials and security smells, and generate sanitized manifests.
Audit browser leaks, URL credential exposure, and hidden photo metadata with a client-side workflow. No uploads, no third parties.
Search tools, blog posts and pages…
