Autofill Exposure Auditor — Test Your Browser

Autofill Exposure Auditor is an educational security simulator that demonstrates a common web privacy vulnerability: hidden field harvesting. Modern browsers offer an 'Autofill' feature that saves time by filling in your address, phone number, and credit card info. However, malicious sites can exploit this by including fields you can't see (hidden by CSS). When you autofill a simple 'Email' field, your browser might also fill in your home address or phone number into these hidden fields without your knowledge.

The tool renders a form with two visible fields (Name and Email) and several invisible fields (Address, Phone, etc.) using the standard `autoComplete` attributes. When you submit the form, our script inspects the values of all fields — visible and hidden. Since the processing is entirely client-side, your data is never sent to our server; it is only displayed back to you to show what was captured.