⚖️ LEGAL: For authorised penetration testing, security research, and legitimate privacy protection ONLY. You are responsible for legal compliance. Not for unauthorised access or illegal activity.
ℹ️ WHAT V2 DOES — HONESTLY: The v2 tools are real self-assessment tools: the fingerprint audit measures your own browser, connection checks test endpoints you own/configure, personas are synthetic lab data, and utilities run locally. This app does not spoof or mask your fingerprint in other browsers, proxy/anonymise your traffic, scan networks, or attack anything. Legacy tabs marked "simulated" still contain the v1 simulator, labelled as such. No "untraceable / anonymous / undetectable" claims are made — see UPGRADES.md for what was deliberately not built.
SelfScope — Self-Audit Lab for Security Professionals
See yourself the way the internet sees you.
A web-based self-audit lab for cybersecurity and penetration-testing professionals — real browser fingerprint self-audit, connection and proxy health checks for endpoints you supply, a synthetic persona lab for authorised testing, and local security utilities (hashing, JWT inspection, encoders, authorised single-host connectivity checks), with audit logging, 2FA, and API keys. Simulation/training elements remain labelled as such; no anonymisation, spoofing, scanning, or exploit capability.
All Pro plans include a 14-day free trial and a 30-day money-back guarantee.
Free
$0
Free demo tier — account + limited fingerprint self-audit (up to 3 saved reports). No card required.
SelfScope Pro Monthly
$29 / month
Full access. 14-day free trial, then $29/month. Cancel anytime via the customer portal. 30-day money-back guarantee.
SelfScope Pro Annual
$279 / year
Full access, billed yearly — save ~20% vs monthly. 14-day free trial. 30-day money-back guarantee.
SelfScope Pro Founder Lifetime
$499 one-time
One-time payment, first 100 buyers only, then withdrawn. Excludes future metered services. 30-day money-back guarantee.
Your plan
Sign in to see your current plan.
🔭 SelfScope v2
Self-Audit Lab for Security Professionals
See yourself the way the internet sees you.
A web-based self-audit lab for cybersecurity and penetration-testing professionals — real browser fingerprint self-audit, connection and proxy health checks for endpoints you supply, a synthetic persona lab for authorised testing, and local security utilities, with audit logging, 2FA, and API keys. Simulation/training elements remain labelled as such; no anonymisation, spoofing, scanning, or exploit capability.
Sign in with the first-run admin account (see FIRST_RUN_CREDENTIALS.txt after first start), or register a new operator account.
The four cards above are the legacy v1 simulator (session-consistent demo numbers), kept for training/demo use. Everything else in v2 is real, measured data.
Proxy chain (simulated)
No rotation yet this session.
Current plan
Loading billing status…
Browser fingerprint self-audit — your browser, measured live
Runs entirely in this browser: canvas / WebGL / audio signals, user agent & client hints, screen, timezone & language (compared with your connection's IP timezone via this server), detected fonts, plugins, and WebRTC local-IP exposure. It reports your fingerprint — it does not change, spoof, or mask anything. Saving a report stores the result under your account so you can track changes over time.
Report history
Loading…
Connection self-checks
Checks run from this server against endpoints you own or configure. Proxy URLs are stored encrypted at rest; credentials are never shown back or written to logs (lists show a masked hint only).
Server egress (this app's own connection)
Add a proxy endpoint you own
Loading…
Check history & latency
Loading…
Synthetic persona LAB
Generates entirely fictional test personas for authorised lab work — invented names, @example.com/@example.test addresses, 555 fictional phone numbers. Clearly labelled synthetic. Not real people's data; never use a persona to impersonate anyone or open real accounts.
Saved personas
Loading…
Hash & password tools
JWT inspector
Encoding tools
DNS lookup via your resolver
Port / connectivity check — your host only
ONE TCP connect attempt to a single host and well-known port. No ranges, no scanning, no banner grabbing. Every check is rate-limited and written to the audit log with your confirmation.
Audit logs
Your own activity (admins can view all users). Filter, then export.
Loading…
Two-factor authentication (TOTP)
Loading…
API keys
Programmatic access with X-API-Key: cgk_… or Authorization: Bearer cgk_…. Keys cannot perform admin, billing, or security-setting actions. The raw key is shown once.
Loading…
Admin — users
Loading…
Database backups
Automatic snapshots run on start-up and on the configured interval; newest are kept.
Service status
Loading…
Terminal (simulated)
SelfScope terminal — type "help" and press Enter. (Simulated; real tools are in their own tabs.)