About Cyberscan

What it is

Cyberscan is a collection of fast, free security tools for anyone who wants to check a password, find out if their email has been exposed in a data breach, scan a suspicious link, or generate a cryptographically strong password.

No account required. Cyberscan does not persist tool inputs or use them for tracking. Tools that query external services explain what is sent and to whom.

The tools

Password Tester — Realistic strength analysis using the zxcvbn algorithm, the same engine trusted by Dropbox and 1Password. Runs entirely in your browser.

Password Creator — Cryptographically secure passwords generated locally using crypto.getRandomValues(). Fully customisable; nothing ever leaves your device.

Email Breach Check — Your browser sends the email address directly to the XposedOrNot public API. XposedOrNot also receives your connection IP; Cyberscan servers do not receive this request. Results may remain briefly in the page's memory.

URL Scanner — Checks a suspicious link using the reputation sources available through VirusTotal. Coverage, results and response times depend on the provider.

Hash Generator — SHA-256, SHA-512, MD5 and more. All hashes are computed in your browser without uploads.

QR Reader — Decode a QR code and check an extracted web link with VirusTotal before opening it. Results and response times depend on the provider.

IP Lookup — Find your public IP and approximate location, plus ISP and ASN details. VPN, proxy or Tor signals appear only when the data provider supplies them.

Phishing Explainer — Paste an email, SMS or link to understand phishing warning signs. Core analysis runs in your browser; optional indicator checks use remote services.

Core principles

Privacy by design. Tools that can run locally stay in the browser. Email Breach and IP Lookup connect directly from your browser to their named providers, which receive your connection IP and the value needed for the lookup. Cyberscan servers do not receive those direct requests; results may be held temporarily in page memory.

Speed over complexity. Pure HTML, CSS, and JavaScript served from a global edge network. Local checks run in your browser; checks that use external services depend on those providers for results and response times.

Honest results. No inflated threat scores, no dark patterns to upsell a paid plan. Results reflect real-world risk assessments from the same sources used by security professionals.

Free forever. No plans, no subscriptions, no paywalls. Security basics should be accessible to everyone.

Contact

For questions, reports, or GDPR-related requests, reach us at: privacy@cyberscan.app

Data controller: Cyberscan Project — privacy@cyberscan.app