The internet
already knows you.
We just help you see it.

Cyduck is a personal cyber observatory. One score, drawn from the accounts you trust most — email, phone, social — and the breaches, leaks and exposures attached to each. Quiet, in your browser, no chase.

FIG. 01
Personal Cyber Score · live
82
of 100
Resilient
Your accounts look healthy.
Two findings to address — about six minutes of work.
Last scan3h ago
Findings2 open
Nextin 5 days
Section I 02 — What we'd find

Type your email. See what's already out there.

Not a sales pitch. Not a teaser. The same lookup the Scorer runs when you join — only this one is free, anonymous, and forgets your address the moment it answers. Most addresses appear in three breaches or more. Here's yours.

— Cyduck never stores or logs the email you type here. Decrypt runs as a single anonymous HIBP query.

Section II 03 — The Cyber Scorer

One number that tells you, honestly, where you stand.

Every account you connect — email, phone number, social login — is matched against breach databases, scored for posture, and rolled into a single figure. Not a lecture. Not a dashboard for the sake of it. A weather report, for your digital self.

  • I. Email exposure.  Which breaches you appear in, which passwords leaked, which addresses are still in active circulation.
  • II. Phone & SIM posture.  SIM swap protection, carrier portal hardening, port-out lock — country-aware.
  • III. Social account hygiene.  2FA, recovery email, login alerts, session audit — across the platforms you actually use.
  • IV. Ranked next steps.  The two or three things that move the score most. Read once a month.
Open the Scorer
An aside · in production

Cyber Monsters

A small arcade in the works. Hunt phishers, dodge trackers, defend the duck. Until then, try the test — a few short scenarios that ask how you'd react in the moment that matters.

Play the test →
Coming soon

Cyber Monsters
arrives soon.

0 ducks passed · 3 more left
Letter From the founder — Arif

Most people don't think about cybersecurity. Until something breaks.

A hacked account. A leaked email. A message that looked harmless.

Cyduck exists for the moment before it happens. Not to scare you. Just to give you a small edge.

Everything here is built to be simple, fast, and private. No noise. No tracking. No nonsense.

If it helped you — even a little — that's enough.

Section IV

Often asked.
Honestly answered.

No filler. The questions people actually send us, in the words we use to answer them.

What does Cyduck actually do?
It's a small instrument for understanding your digital exposure. Strengthens passwords, checks for breaches, analyses suspicious messages — and rolls everything into one personal score, if you want it. Browser-first, quiet, fast.
Do you send my data anywhere?
Tools — no. Everything in the free tools runs in your browser. The Scorer (the dashboard) is opt-in and connects to breach databases on your behalf, but you control what's connected.
Is the Scorer free?
Yes, while in early access. We may add an optional paid tier for advanced monitoring later. The core score will remain free.
What about the email I typed in the decrypt above?
Nothing is stored. The query runs once against the public HIBP database, the result is shown only to you, and then the address is forgotten. No log lines, no analytics events, no email pixels.
Why a duck?
Because ducks look calm on the surface. Underneath, they're constantly working. Quiet, alert, smarter than they seem. We aspire.