Skip to content
SiteList

Show HN: GlassBox – what the browser reveals, and how identifiable you are

codecanary.org

Unclaimed listing

Is this your site?

Claim itGet your badge

What it does

Client-side browser fingerprinting diagnostic tool that runs live measurements in the browser and displays collected signals for identifiability assessment.

Two ratings

SiteList review score

Clear live browser diagnostics and a strong open-source foundation. Fix wildcard invalid-path responses, then add metadata and informational pages to improve search reach.

Reviewed on Aug 26, 2026

Why this score? →

Screenshots

Captured during our latest review on Aug 26, 2026

Home · glassbox.codecanary.org

Pricing details

No paid tiers or usage-based pricing are evidenced; the tool runs entirely client-side with no backend billing infrastructure. Billed one time.

View source

Key features

  • Client-side fingerprinting probes

    Privacy & Security

    Runs all measurement probes locally in the browser without external analytics or beacons.

  • Cross-browser report comparison

    Analysis

    Pastes JSON reports from other browsers or sessions to score identifiability tiers and detect cross-browser linking.

View source

Buyer questions

Questions buyers actually ask

What is GlassBox best for?

GlassBox is best for privacy-conscious web users, security researchers, and web developers who want an immediate browser fingerprinting diagnostic without installation or an account.

What is GlassBox's biggest technical issue?

Wildcard SPA routing returns HTTP 200 for invalid paths, creating soft-404 index dilution. Configuring unmatched routes to return HTTP 404 is the first priority.

Can GlassBox compete for broader privacy searches?

Not yet. The site currently captures brand navigational intent, while competitors own broader informational queries. Guide pages targeting browser fingerprinting and privacy auditing can widen reach.

Is GlassBox trustworthy as an open-source tool?

The review found clean HTTPS and security-header configuration, reputable outbound link hygiene, and a verified active GitHub repository. Accessibility and measurement gaps still need attention.

Answers are based on SiteList's latest evidence review. Read the full review.

The expert review

GlassBox scores 72/100, with a solid technical foundation, clear live diagnostics, and clean outbound link hygiene. Its most material weakness is single-page architecture with wildcard 200 responses for invalid paths, compounded by missing snippet metadata and limited informational content.

72/100: capable tool with a clear search-growth ceiling

Read the full review

Verified user reviews

0 verified

No reviews yet. The evidence locker is empty.

Reviews from verified users appear here once approved.

Reviews are from the SiteList community. Some reviewers received incentives — disclosed in the review, always. The verdict is never for sale.

Scores across 13 dimensions

Domain
codecanary.org
Category
Security monitoring
Platforms
web
Last checked
Aug 26, 2026
Public dimensions
13

Home

qsa.sh — External security scan of your own IP, in your terminal screenshot 1 of 4: Home

qsa.sh — External security scan of your own IP, in your terminal

Score 86 out of 100 — Strong

qsa.sh

A terminal-based service that performs an external port and vulnerability scan of the user's own public IP address using open-source tools (naabu, nmap, nuclei), offering a free live-streaming tier and paid async/deep scan tiers.

Home

Fixvibe screenshot 1 of 4: Home

Fixvibe

Score 83 out of 100 — Strong

fixvibe.app

Security scanner for AI-generated web apps, including DAST, BaaS misconfiguration checks, leaked-secret detection, and AI-ready remediation prompts.

Home

VulnWatch Agency — Branded website security reports for digital agencies screenshot 1 of 4: Home

VulnWatch Agency — Branded website security reports for digital agencies

Score 77 out of 100 — Strong

vulnwatch.tech

VulnWatch is an automated website vulnerability scanner that uses a proprietary AI Analyst module to transform raw scanner data into prioritized security reports. It provides executive summaries, ranked risks, and actionable remediation plans for web applications, WordPress sites, and network services.

Home

Duckduckgoose screenshot 1 of 4: Home

Duckduckgoose

Score 69 out of 100 — Fair

duckduckgoose.ai

DuckDuckGoose builds explainable deepfake detection for identity, fraud and compliance teams, backing every verdict with forensic evidence.