Free tools
WebRTC leak test
Browsers can reveal more than the public page path alone. This check stays local to the browser and looks for the ICE candidates WebRTC is willing to expose.
Browser candidate scan
This stays inside the browser. We ask WebRTC for ICE candidates and report whether any local or private addresses are exposed.
What to do with the result
If private or local candidates appear, treat that as a browser-surface leak signal. Then use Is my VPN working? to pair that with the current public IP view.