Security Tools
Harden web applications without installing a scanner. Audit HTTP security headers, inspect a TLS certificate chain, and generate Content Security Policy and Subresource Integrity values to paste into your markup.
For key material and secrets, the RSA and JWK generators and the secret sharing tool use the Web Crypto API so private values are created in your browser.
15 Security Tools
.env Validator
Paste an env file and instantly find duplicate keys, invalid ports, malformed database URLs, broken flags, and other common configuration mistakes.
Security ToolsCVE Explorer
Fetch details for a specific Common Vulnerabilities and Exposures (CVE) ID.
Security ToolsFuzzy Domain Finder
Generate and analyze variants of a domain name to find potential phishing or typosquatting threats.
Security ToolsPassword Generator
Create strong, secure, and random passwords.
Security ToolsShare Secret
Share a secret with a password-protected, encrypted link.
Security ToolsCSP Generator
Generate Content Security Policy headers.
Security ToolsHMAC & Bcrypt Generator
Generate and verify HMAC signatures and bcrypt password hashes in your browser.
Security ToolsJWK / JWKS Generator
Generate JWK and JWKS key sets for RS256, ES256, ES512, HS256, and HS512.
Security ToolsLLM Shield
Obfuscate text to make it difficult for AI to parse while remaining human-readable.
Security ToolsOTP Generator
Generate and verify Time-Based One-Time Passwords (TOTP).
Security ToolsRSA Key Generator
Generate public and private RSA key pairs.
Security ToolsSecurity Headers Checker
Analyze HTTP response headers for security.
Security ToolsSRI Hash Generator
Generate Subresource Integrity hashes for scripts and stylesheets.
Security ToolsTLS/SSL Certificate Checker
Check a domain's SSL/TLS certificate details.
Security ToolsWebhook Signature Verifier
Verify a webhook signature from GitHub, Stripe, Slack, Shopify or any HMAC-based provider, or compute the signature for a test payload.
Security Tools