Check links. Audit apps. Expose emails.

Select an APK to audit

The APK is unzipped inside your browser — the file never uploads. We read AndroidManifest.xml and risk-rate every permission.

Choose APK file

Check any email address

We inspect the domain's threat intel, MX validity, SPF/DMARC spoofing protection, and disposable-provider lists.

---

Optional: is a password compromised?

Paste a password you want to test. We hash it with SHA-1 on your device and send only the first 5 characters (k-anonymity) to the Pwned Passwords registry — the password itself never leaves this page.