Torito Explore GitHub
Independent tools. Real-world protection.

Security and privacy
for real-world threats.

Practical tools to investigate exposure, follow the signals,
and keep sensitive information in your hands.

Explore toolsView projects
Detect exposure. Monitor certificates. Protect sensitive information. An animated technical illustration connects credential inspection, a certificate, a protected document, and an audio waveform. This is an illustration, not live security data. CONFIG CERTIFICATE 01 / DETECT 02 / MONITOR 03 / PROTECT
Built for the curious.
Made for the real world.Explore the toolkit
01 / Your everyday toolkit

Security tools.
Your data stays yours.

Free utilities for security research. Process tokens, files, and evidence locally in your browser. Start with three of our everyday essentials.

01JWT labDecode tokens, verify signatures, and inspect OAuth / PKCE.02Email inspectorFollow delivery hops and investigate suspicious links.03Evidence redactorReview sensitive values before sharing your evidence.
Explore all browser tools

JWT lab

JWT labExample
Header · algorithm{ "alg": "HS256", "typ": "JWT" }
Payload · readable claims{
  "sub": "example-user",
  "name": "Alex Example",
  "role": "reader"
}
Decoded ≠ verified. Inspect the signature separately.

Illustrative preview.
Open the tool to work with your own data.

Open JWT lab

Email inspector

Email inspectorExample
Example message · headersFrom: notifications@example.com
To: analyst@example.org
Delivery path01   mail.example.com
  ↓
02   mx.example.org
Review hops and authentication headers.
Inspect headers and links before deciding what to trust.

Illustrative preview.
Open the tool to work with your own data.

Open Email inspector

Evidence redactor

Evidence redactorExample
Example text · selected redactionsIncident note / 001
Name: [REDACTED]
Email: [REDACTED]
Reference: CASE-EXAMPLE
Status: ready for review
Review each replacement before exporting.
Keep the context. Remove the sensitive details.

Illustrative preview.
Open the tool to work with your own data.

Open Evidence redactor
02 / A little more control

Understand the risk.
Keep the upper hand.

Small, focused tools for the moments that matter. Each built around a real problem, with a clear path from investigation to action.

Illustration of a configuration file being inspected for an exposed API key.
Fig. 01 / Concept illustration
01 / Detection

Detect what’s exposed.

Exposed credentials and cloned websites can hide in plain sight. SupaExplorer inspects your Supabase security; Beacky helps detect copies of your site.

Explore the projects
Illustration showing public certificate logs flowing through a local regex filter.
Fig. 02 / Concept illustration
02 / Monitoring

Follow the signals.

New certificates leave a public trail. CertPatrol follows Certificate Transparency logs and filters domains with your regex patterns, right from your terminal.

Discover CertPatrol
Illustration of redacted fields on a document beside a protective shield.
Fig. 03 / Concept illustration
03 / Privacy

Share only what you mean to.

Protect sensitive documents before they leave your hands. PDF Protect watermarks files in your browser; Evidence redactor helps you review sensitive values before sharing.

Open Evidence redactor
03 / The independent projects

One problem.
One purposeful tool.

Seven focused projects and tools.
Find the right one for your next investigation.

01

SupaExplorer

Scan your Supabase project for exposed credentials and security flaws.

Detection
02

Beacky

Detect phishing and site cloning with invisible beacons.

Detection
03

Datos Argentinos — Safe ID

Protect identity documents with watermarks and sensitive data obfuscation.

IdentityOpen source
04

PDF Protect

Watermark PDFs directly in your browser, on your own device.

PrivacyOpen source
05

CertPatrol

Follow Certificate Transparency logs. Find the domains that matter.

MonitoringOpen source
06

CertPatrol Orchestrator

Manage CertPatrol fleets, isolated searches, and results in SQLite.

MonitoringOpen source
07

Audio Privacy

Record locally with synthetic aircraft sounds and compare exported audio.

Privacy
04 / About Torito

Built independently.
Shared openly.

Torito is an independent suite of security and privacy tools, shipped publicly since 2025. Useful software, built around the problems we meet in the real world.

Our open-source projects are available on GitHub. Read the code, audit the approach, or make it your own.

Explore the source Read. Audit. Fork.
A good place to begin

A little curiosity.
A better set of tools.

Explore tools