About DevToolbench

DevToolbench is a small, focused collection of free online developer tools built for engineers, designers, and QA teams who need quick, reliable utilities without the overhead of signing up, managing subscriptions, or trusting black-box SaaS products with their test data and credentials.

What we built

Three tools, each solving a specific problem developers encounter regularly:

• Password & email breach checker — find out if your credentials have appeared in known data breaches. Passwords are hashed locally (k-anonymity via HaveIBeenPwned); email addresses are checked against XposedOrNot with full transparency about what's sent and where.
• Bulk website speed test — audit up to 10 websites in a single batch using Google PageSpeed data. Performance scores, Core Web Vitals (LCP, CLS, TBT), and top-priority optimization suggestions per URL, with per-row error handling so one failure doesn't break the batch.
• Fake data generator — create up to 1,000 rows of realistic mock data across 14 field types, exported as JSON, CSV, or SQL INSERT statements. Runs 100% in your browser with zero network requests after the page loads.

Why it's free

Every tool runs on free public APIs and open-source libraries. Hosting is on Cloudflare's free tier, so operating costs are minimal. The site is ad-supported — unobtrusive ads cover infrastructure costs, and that's the entire business model. There is no premium tier, no feature paywall, and no plan to add one.

We believe developer utilities shouldn't require a credit card. Free tools lower the barrier for freelancers, bootcamp students, open-source maintainers, and anyone doing honest work who doesn't have a company expense account for subscription tooling.

Our approach to privacy

Transparency isn't a marketing angle for us — it's a design constraint. Every tool page explains in plain language exactly what data is sent where:

• The breach checker hashes your password locally; only a 5-character hash prefix reaches the network.
• The email check sends your address to XposedOrNot over HTTPS — and we say so explicitly instead of implying it's fully local.
• The speed test forwards URLs to our serverless proxy, which calls Google's PageSpeed API — the URL is stored in memory, not in a database.
• The data generator runs entirely client-side. Nothing you configure or generate is ever sent anywhere.

There is no account system, no login, no cookies, and no database. Our only analytics is Microsoft Clarity — cookieless and anonymous, with every form input masked — used solely to understand how the tools are used. Read the full breakdown in the privacy policy.

The technology

The site is built with Astro, deployed as static HTML on Cloudflare Pages with a tiny serverless function for the speed test's API proxy. There is no React, Vue, or Svelte runtime — pages are plain HTML with scoped CSS and lean client-side JavaScript. The fake data generator bundles @faker-js/faker at build time, and the breach checker uses the browser's native Web Crypto API. The entire site ships fast, works offline-capable for two of the three tools, and respects prefers-reduced-motion.

Contact

Found a bug, have a suggestion, or want to report a security concern? Reach out through the contact page. We read everything and respond when we can.