Eight tools.
No account, nothing sent.

SecretScan

Before you publish

Finds access keys, passwords and sensitive files left in a text or a folder, before you publish or send it. Values found stay masked; replacement advice included.

HookCheck

Webhooks

Checks a webhook signature (Stripe, GitHub or generic format) and explains why it is rejected: whitespace, line endings, reformatted JSON, wrong secret, wrong algorithm.

WebhookNinja Local

Webhooks · self-hosted

A webhook receiver you host yourself: it checks the signature, ignores duplicates, keeps everything, forwards to your application with retries and replays in one command. No quota, no third-party service.

For developers: needs Python 3.8 and a reachable machine; it does not run in the browser.

ChainProof

File integrity

Seals a set of files or a folder: a manifest of fingerprints and an overall fingerprint. Later, it tells you what is identical, modified, missing or added.

Proves integrity, not the date to a third party: a date that holds up requires an external timestamp.

CryptoSign

Signing

Signs and verifies a file or a text, with keys generated on your machine and a password-protected private key. No command line.

Not a qualified electronic signature under the EU eIDAS regulation.

AnomalyScope

Data

Drop in a CSV file: it spots abnormal values in each column, shows the typical value and the deviation, with a chart. Handy for readings, sales, measurements.

FileCheck

Suspicious file

Before opening an attachment: misleading extension, archive contents, hidden executable, fingerprints to compare with the publisher's.

Gives clues; it is not an antivirus.

PassForge

Passwords

Generates passwords and passphrases with secure randomness, and estimates the strength of an existing password. The breach check only runs when you ask for it.