The right tool, for every job.

Coding agents inherit every credential on the machine they run on — API keys in env files, tokens in agent configs, few of them scoped as narrowly as anyone remembers. BlastRadius finds them and reports what each one can actually do, in consequence language: “can delete your production volume”, not “has volumes:write”.

One npx command, zero dependencies. Discovery is fully offline; resolution is opt-in, and a credential is only ever sent to the provider that issued it. A raw secret never appears in any output.

Foundries have started auditing, and printers, agencies and in-plant shops are opening letters about fonts a developer self-hosted years ago. Glyphwatch downloads the font files your page actually serves and reads the licence the foundry embedded inside each one — not the filename, which lies.

The only other tooling for this belongs to the company that sends the letters. Glyphwatch sells nothing but the reading: no font catalogue, no licences to upsell, no foundry ties. It reports exposure indicators, never legal conclusions.

A floating teleprompter for Google Meet, Zoom, Loom, YouTube Studio — any browser tab. The Pro tier listens while you speak and scrolls the script to match your pace, even through stumbles and ad-libs.

Scripts never leave your device: no account, no cloud, no analytics. Pay once, own it.