Free · no sign-up · open source

Check it before you trust it.

Thirteen security tools we use ourselves, opened to everyone. Paste a link, drop a file, scan a QR code or type an IP — and get a plain answer in seconds.

Popular: a link a UPI request an attachment my email
  • Private by designFiles and passwords never leave your browser.
  • Open dataabuse.ch, Spamhaus, Tor, RDAP, Have I Been Pwned.
  • Built in BengaluruBy the Arventiq Labs security team. MIT licensed.

Before you click or pay

For everyone. Most fraud starts with a link, a QR code or an attachment.

Most usedIs this link safe?Link checkerPhishing pages, lookalike domains, hidden redirects.Open tool Where does this QR go?QR code checkerFake payment stickers and poster codes, decoded on your phone.Open tool IndiaIs this UPI request safe?UPI link checkerCollect requests, "pay ₹1 for refund" baits, fake bank names.Open tool Is this file safe to open?Attachment checkerDisguised programs, macros, scripted PDFs. Never uploaded.Open tool Who really sent this email?Email header analyserSpoofed senders, Reply-To tricks, SPF/DKIM/DMARC.Open tool

Your accounts and privacy

Passwords, breaches and what your connection reveals.

Has my email leaked?Breach exposureWhich breaches had your address, and what to change first.Open tool How strong is my password?Password checkerStrength, leaked-password check and a passphrase generator.Open tool What does my connection reveal?What the internet seesYour IP, network, location and a VPN leak test.Open tool

For IT teams, institutions and analysts

The checks we run during engagements, made self-service.

For ITCan our domain be spoofed?Domain security checkSPF, DKIM, DMARC, DNSSEC, HTTPS headers, certificates.Open tool Who is behind this IP?IP address checkerOwner, reverse DNS, botnet, spam and Tor lists.Open tool Is this download genuine?Download verifierSHA-256, SHA-1, MD5 against the published checksum.Open tool Decode or extract indicatorsDecoder & IOC extractorBase64, URL, hex, defang; pull URLs, IPs, hashes from text.Open tool How secure is our institution?Self-assessmentTwenty questions, five domains, an emailed report.Open tool

Why we built these

Every week someone in our network — a student, a parent, an administrator at a college we work with — forwards us a message and asks “is this real?”. Usually it takes two minutes and the same handful of checks. These pages are those checks, written down and automated, so you can run them yourself at 11 pm without waiting for a reply.

They are deliberately simple. A tool tells you what it found and why it matters; it will not pretend to certainty it does not have. When a check says “no red flags”, read it as “nothing we test for”, not “safe”.

How they work

  • Nothing you upload is stored. Attachments and passwords are processed on your device. For breach checks we send five characters of a hash, not the password.
  • We fetch links from our server, never from your browser, so a malicious site does not see you.
  • Threat data is open and credited on every result.
  • Rate limits apply (40 checks per network per 10 minutes) so the tools stay available to everyone.
  • Open source on GitHub, MIT licence. Fixes and ideas welcome.

Changes

2 Oct 2026
Added QR, UPI, breach exposure, domain check, download verifier, decoder and “what the internet sees”. Passphrase generator on the password page. Tools moved to the main menu.
1 Oct 2026
First release: link, attachment, IP, password and email-header checkers.

Known limits: the breach-exposure search needs an API key we are still arranging; VirusTotal and AbuseIPDB rows show “Not enabled” until keys are added; the QR decoder needs a reasonably sharp photo.

Built and maintained by the Arventiq Labs team in Bengaluru. Free for anyone, source on GitHub (MIT). Results are indications, not verdicts. Something wrong? Tell us.