Free browser check · network identity & WebRTC leaks
What does your network exit look like to websites?
Check how your public IP is described by public sources, and whether WebRTC exposes an address your VPN or proxy was meant to cover. Exitglass shows every source it could reach and every gap, instead of hiding uncertainty behind one universal score.
Your connection
Run the IP and WebRTC check
What happens when you click
- Nothing runs until you click. There are no accounts and no history on our side.
- Identity check: your browser asks the Exitglass API, which looks up only the IP address that reaches it.
- WebRTC test: your browser sends a STUN request to Cloudflare and Google STUN servers, which can see your IP address, as in any WebRTC call. The results stay in your browser.
A · Identity & reputation
What public sources say about your exit IPChecking sources…
Evidence coverage
Unavailable sources remain visible as gaps. Missing evidence is not counted as a clean result.
B · WebRTC leak test
Runs entirely in your browserGathering WebRTC candidates (up to 5 seconds)…
A server IP is not automatically unsafe.
Hosting and cloud networks are normal for APIs, infrastructure, and many VPN services. Some consumer services handle them differently from home or mobile networks, so Exitglass reports it as context.
“Not found” is not a permanent guarantee.
It means the available sources did not report the activity at check time. Lists differ, update on different schedules, and can be unavailable. Exitglass counts reachable sources, never missing ones.
One IP in, evidence out.
The tool never asks for another target, credentials, or account details, and the WebRTC half never sends its results anywhere.
How to read the results
Short explanations of what each part of the check means and what to do next.
Residential, hosting, VPN, or proxy.
An IP belongs to a network operator. Home internet and mobile carriers are usually classed as residential or mobile, cloud providers as hosting. VPN, proxy, and Tor evidence comes from separate public lists. Exitglass keeps these as separate evidence cards rather than merging them into a grade.
Why sources can disagree.
Each list has its own method and refresh schedule. When sources conflict, Exitglass shows “Sources disagree” or “Not enough evidence” and the coverage count, such as 3 of 4 sources available, so you can judge how much weight a result deserves.
When the browser reveals another address.
WebRTC asks STUN servers which public address your traffic appears to come from. If a VPN or proxy covers web requests but not that UDP exchange, the address can differ from the one websites see. A match with your web exit means the two paths agree.
Two common surprises.
If WebRTC shows an IPv6 address while your web exit is IPv4, the tunnel may carry only IPv4. A raw private address such as 192.168.x.x means the browser exposes your local network layout to pages, while a random .local name means it is hidden.
Frequently asked questions
What does the IP check show?
It shows the public IP address that reaches Exitglass, who operates the network, and whether public sources report hosting, residential proxy, VPN/proxy, or Tor exit activity for it. Every source is listed, and sources that could not be reached are shown as gaps instead of passes.
Why is there no single purity score?
Different lists use different methods and update at different times, so one number hides disagreement. Exitglass shows what each evidence category found and how many sources were available.
What is a WebRTC leak?
WebRTC lets a web page ask the browser for network candidates, including addresses learned from STUN servers. If a VPN or proxy only covers normal web traffic, that request can reveal a public address that differs from the one websites see over HTTP.
Does the WebRTC test send my results to Exitglass?
No. The test runs in your browser and the results stay there. Your browser does send a STUN request to Cloudflare and Google STUN servers, which can see your IP address, as with any WebRTC call.
What does a .local address mean?
Modern browsers replace your local network address with a random name ending in .local (mDNS). That means pages cannot read your local IP address. A raw private address like 192.168.x.x means the browser exposes it to pages.
Why does the WebRTC test show an IPv6 address when my web IP is IPv4?
Your network may have native IPv6 that a VPN or proxy does not tunnel. Websites reached over IPv4 see the VPN, while WebRTC can still report the IPv6 address. Check whether your VPN supports IPv6 or disable IPv6 on the interface.
Is a hosting or data center IP bad?
No. Hosting networks are normal for servers and many VPN services. Some consumer services treat them differently from home or mobile networks, so it is context, not a verdict.
Does Exitglass store my IP or results?
The tool has no accounts and nothing runs until you click. The identity check uses only the IP that reaches Exitglass, and WebRTC results never leave your browser.
Repeat the check locally, in more depth.
The browser tool shows one moment from one browser. The native Mac app runs checks from your Mac, keeps the results on your Mac, and adds deeper tools.
- Check-up: identity and location, reputation, leak tests (DNS, WebRTC/STUN, IPv6, proxy and TUN state, egress consistency), and service reachability, each with visible source coverage.
- Monitor (Pro): background re-checks and alerts when your exit changes.
- Local history, with comparison of past check-ups in Pro.
- DNS, TLS, and HTTP diagnostic tools.