Torito
Tools that put privacy first and keep your data secure. From certificate monitoring to identity protection, built for security professionals and privacy-conscious users.
Each tool is designed with privacy and security as core principles
Protect your ID cards with intelligent watermarks and selective data obfuscation.
Completely free, works locally in your browser, and features smart watermarking resistant to AI-based removal.
A fast, lightweight Certificate Transparency (CT) log tailer for your terminal. Filter domains with regex, run locally for privacy, and monitor in real time—no third-party servers, no tracking.
A modern, local, privacy-friendly CertStream alternative.
Orchestrate and observe multiple CertPatrol workers from a single dashboard. Launch isolated searches, stream CT discoveries, and keep results in SQLite with automation-ready APIs.
Ship CT monitoring faster with a modern control plane for your CertPatrol fleet.
Chrome extension for detecting leaked API keys and stress-testing Supabase database policies without leaving the browser.
Automatically identifies exposed credentials from Supabase, AWS, Google Cloud, Stripe, Twilio, and more. Test row-level security, scan for hard-coded keys, and catch vulnerabilities before they become breaches.
A Streamlit web app for exploring and testing exposed Supabase databases through the PostgREST API.
Connect to any Supabase project, browse tables, query data with filtering and pagination, and perform write operations, all with auto-discovery of table schemas.
Phishing-site detection with invisible beacons.
Add a stealth marker; if a copycat loads it from an unauthorized domain, you get instant alerts. Collects geo information and IP addresses from pixel requests for detection purposes.
MailVeritas is a paid API that checks if an email domain is disposable, no user data needed, just the domain.
Get instant results to block fake signups and keep your user base real, all without sharing any personal info.
All our tools are built on a core principle: privacy and transparency first. Whether it's monitoring certificates, protecting identity documents, or verifying email domains, most of our tools process everything locally without sharing personal information. When data collection is necessary for functionality (like detection services), we clearly disclose what is collected and why.
We believe in transparency, which is why most of our projects are open-source. You can review the code, suggest improvements, and trust that there are no hidden data collection methods. Even our paid services are designed to minimize data collection and clearly explain any necessary data usage.
Created for security professionals, researchers, and privacy-conscious individuals who need reliable tools without compromising their data security.
