Pigfox is a suite of security and OSINT tools: reverse image tracing, fake recruiter detection, domain recon, and EXIF inspection. Magic-link auth, credit-based, no subscription. Run a check in seconds without handing over a password or waiting on a sales call.

Hi PH 👋 I'm Peter, and I built Pigfox alone. It started with a recruiter message that felt off. Checking it properly meant a reverse image search here, a WHOIS lookup there, an EXIF viewer that wanted my email first. Every individual step was easy and the whole thing took forty minutes. So Pigfox does the assembling. Fake Recruiter Check runs the profile, the domain, and the message patterns in one pass and gives you a verdict. TraceCheck traces a photo back to where it actually came from. Domain Recon pulls DNS, WHOIS, certs, and infrastructure fingerprints together. EXIF Inspector shows you what a photo is quietly carrying. Under the hood it's a Go monolith on Postgres. One binary, no microservices, no Kubernetes. Auth is magic-link, so there's no password of yours for me to lose. Credits instead of a subscription, because most people need this four times a year, not daily. Happy to go deep on any of it — architecture, the OSINT sources, why I keep choosing boring infrastructure. Ask me anything.

Honestly the fake recruiter detection is genuinely useful, ran it on a suspicious LinkedIn message and it flagged stuff I hadn't even noticed yet. Magic link login without a password is just a nice touch too.

Pigfox

Verify the recruiter, the domain, and the photo

Verify the recruiter, the domain, and the photo