Torito Explore GitHub

Security and privacy
for real-world threats.

Practical tools to investigate exposure, follow the signals,
and keep sensitive information in your hands.

Explore toolsView projects
Detect exposure. Verify the chain. Protect what you share. An isometric security workbench: a credential inspection travels through a layered certificate chain and engraved verification seal, then into selective document redaction and an audio masking layer. The sequence is illustrative, not live security data. ROOT / PUBLIC CT ISSUER CERTIFICATE PUBLIC SIGNAL / LOCAL MATCH CREDENTIALS DISCLOSURE LOCAL AUDIO 01 / DETECT 02 / MONITOR 03 / PROTECT
Built for the curious.
Made for the real world.Explore the toolkit
01 / Your everyday toolkit

Security tools.
Your data stays yours.

Free utilities for security research. Process tokens, files, and evidence locally in your browser. Start with three of our everyday essentials.

01JWT labDecode tokens, verify signatures, and inspect OAuth / PKCE.02Email inspectorFollow delivery hops and investigate suspicious links.03Evidence redactorReview sensitive values before sharing your evidence.
Explore all browser tools

JWT lab

JWT labExample
Header · algorithm{ "alg": "HS256", "typ": "JWT" }
Payload · readable claims{
  "sub": "example-user",
  "name": "Alex Example",
  "role": "reader"
}
Decoded ≠ verified. Inspect the signature separately.
Open JWT lab

Email inspector

Email inspectorExample
Example message · headersFrom: notifications@example.com
To: analyst@example.org
Delivery path01   mail.example.com
  ↓
02   mx.example.org
Review hops and authentication headers.
Inspect headers and links before deciding what to trust.
Open Email inspector

Evidence redactor

Evidence redactorExample
Example text · selected redactionsIncident note / 001
Name: [REDACTED]
Email: [REDACTED]
Reference: CASE-EXAMPLE
Status: ready for review
Review each replacement before exporting.
Keep the context. Remove the sensitive details.
Open Evidence redactor
02 / A little more control

Understand the risk.
Keep the upper hand.

Small, focused tools for the moments that matter. Each built around a real problem, with a clear path from investigation to action.

Illustration of a configuration file being inspected for an exposed API key.
01 / Detection

Detect what’s exposed.

Exposed credentials and cloned websites can hide in plain sight. SupaExplorer inspects your Supabase security; Beacky helps detect copies of your site.

Explore the projects
Illustration showing public certificate logs flowing through a local regex filter.
02 / Monitoring

Follow the signals.

New certificates leave a public trail. CertPatrol follows Certificate Transparency logs and filters domains with your regex patterns, right from your terminal.

Discover CertPatrol
Illustration of redacted fields on a document beside a protective shield.
03 / Privacy

Share only what you mean to.

Protect sensitive documents before they leave your hands. PDF Protect watermarks files in your browser; Evidence redactor helps you review sensitive values before sharing.

Open Evidence redactor
03 / The independent projects

One problem.
One purposeful tool.

Seven focused projects and tools.
Find the right one for your next investigation.

01

SupaExplorer

Scan your Supabase project for exposed credentials and security flaws.

Detection
02

Beacky

Detect phishing and site cloning with invisible beacons.

Detection
03

Safe ID by Datos Argentinos

Protect identity documents with watermarks and sensitive data obfuscation.

IdentityOpen source
04

CertPatrol

Follow Certificate Transparency logs. Find the domains that matter.

MonitoringOpen source
05

CertPatrol Orchestrator

Manage CertPatrol fleets, isolated searches, and results in SQLite.

MonitoringOpen source
06

Audio Privacy

Record locally with synthetic aircraft sounds and compare exported audio.

Privacy
07

PDF Protect

Watermark PDFs directly in your browser, on your own device.

PrivacyOpen source
04 / About Torito

Built independently.
Shared openly.

Torito is an independent suite of security and privacy tools, shipped publicly since 2025. Useful software, built around the problems we meet in the real world.

Our open-source projects are available on GitHub. Read the code, audit the approach, or make it your own.

Explore the source Read. Audit. Fork.
A good place to begin

A little curiosity.
A better set of tools.

Explore tools