A free, client-side network and browser intelligence dashboard. Terminal/phosphor aesthetic, zero server-side logging — everything renders and runs in your browser.
Live demo: enable GitHub Pages on this repo (Settings → Pages → Deploy from branch → main / root) and it will be live at https://<your-username>.github.io/<repo-name>/.
- Live exposure score — a real-time gauge computed from actual signals the page collects (public IP, WebRTC availability, cookies, fingerprint surface, etc.), not a static claim
- Identity & address — public IP, IPv6 support, hostname, geolocation (with permission)
- Browser fingerprint — user agent, browser details, and a full fingerprint triad: live canvas, WebGL/GPU, and audio-stack fingerprint hashes
- WebRTC leak test — STUN-based discovery of what local/public IPs your browser's WebRTC stack actually exposes, with mDNS-obfuscation detection
- DNS leak test — identifies the real DNS resolver and edge node currently handling your traffic
- System & display — screen resolution, platform, language, timezone
- Network connection — connection type, RTT, downlink estimate, navigation performance timings
- Security & protocol — HTTPS status, capability checks (WebGL, WebRTC, WebSockets, Clipboard, etc.)
- TLS certificate inspector — current connection's transport security, plus a certificate-transparency log lookup for any domain (via crt.sh)
- DNS record lookup — resolve A / AAAA / MX / TXT / NS / CNAME records for any domain via Cloudflare's DNS-over-HTTPS
- Cookie dossier — every cookie readable by JavaScript on this page
- Hardware recon — media device counts (camera/mic/speaker), with geolocation on request
- Live threat intelligence — Shodan InternetDB lookups for any public IP (open ports, known CVEs, tags)
- Realtime internet status — Cloudflare Radar health checks, ThousandEyes outage feed, browser-measured reachability probes to major infrastructure
- CVE search — live NIST NVD vulnerability database search and trending critical CVEs
- Cybersecurity news feed — The Hacker News, BleepingComputer, and CISA alerts, parsed client-side
Nothing on this page is logged or stored server-side — there is no backend. All computation happens in your browser. Third-party API calls (IP lookup, DNS-over-HTTPS, Shodan, NVD, RSS feeds) go directly from your browser to those public services, subject to their own privacy policies.
This is a single static HTML file with no build step.
# any static file server works, e.g.:
python3 -m http.server 8080
# then open http://localhost:8080Opening index.html directly via file:// also works, though a few panels (TLS grade, some CORS-gated lookups) will show placeholder states until served over a real origin.
Plain HTML/CSS/JS. No build tooling, no frameworks, no dependencies beyond Google Fonts (VT323 + Share Tech Mono) and the public APIs listed above.
MIT — do whatever you want with it.