I run pigfox.com as a one-person shop. It's two things now: 27 tools, 16 of them free, covering OSINT, email security, TLS and document forensics — and three live smart-contract demos on Base Sepolia, one of which lets a language model decide who gets the money.
Both halves follow the same rule, and that rule is the actual subject of this post.
The rule: evidence first, interpretation second
There's a genre of tool I refused to build — paste a domain in a box, a model hallucinates a paragraph, you get a confident answer nobody can verify.
Every tool here hits real infrastructure first. DNS. WHOIS. TLS handshakes. Certificate-transparency logs. Raw EXIF bytes. Raw Received: headers. PDF object tables. The output shows you the signals it collected so you can check them yourself.
