Security Tools
Harden web applications without installing a scanner. Audit HTTP security headers, inspect a TLS certificate chain, and generate Content Security Policy and Subresource Integrity values to paste into your markup.
For key material and secrets, the RSA and JWK generators and the secret sharing tool use the Web Crypto API so private values are created in your browser.
20 Security Tools
.env Validator
Paste an env file and instantly find duplicate keys, invalid ports, malformed database URLs, broken flags, and other common configuration mistakes.
Security ToolsCVE Explorer
Fetch details for a specific Common Vulnerabilities and Exposures (CVE) ID.
Security ToolsFuzzy Domain Finder
Generate and analyze variants of a domain name to find potential phishing or typosquatting threats.
Security ToolsPassword Generator
Create strong, secure, and random passwords.
Security ToolsShare Secret
Share a secret with a password-protected, encrypted link.
Security ToolsCertificate & CSR Decoder
Decode PEM certificates and CSRs: subject, issuer, validity, SANs, key usage, extensions and fingerprints.
Security ToolsCompromised CA & Revocation Checker
Test whether your browser or client trust store blocks compromised intermediate CAs (such as the October 2026 eMudhra incident) and revoked certificates.
Security ToolsCSP Generator
Generate Content Security Policy headers.
Security ToolsEmail Authentication Checker (SPF, DKIM, DMARC)
Check a domain's SPF, DKIM, DMARC, BIMI, MTA-STS and TLS-RPT records in one pass, with a score and fixes for every problem found.
Security ToolsHMAC & Bcrypt Generator
Generate and verify HMAC signatures and bcrypt password hashes in your browser.
Security ToolsJWK / JWKS Generator
Generate JWK and JWKS key sets for RS256, ES256, ES512, HS256, and HS512.
Security ToolsLLM Shield
Obfuscate text to make it difficult for AI to parse while remaining human-readable.
Security ToolsOpen Ports Lookup
See which ports and services an IP address or hostname exposes to the internet, with known CVEs — without scanning it.
Security ToolsOTP Generator
Generate and verify Time-Based One-Time Passwords (TOTP).
Security ToolsRSA Key Generator
Generate public and private RSA key pairs.
Security ToolsSecurity Headers Checker
Analyze HTTP response headers for security.
Security ToolsSRI Hash Generator
Generate Subresource Integrity hashes for scripts and stylesheets.
Security ToolsSubdomain Finder
Discover a domain's subdomains from public Certificate Transparency logs and check which ones are still live.
Security ToolsTLS/SSL Certificate Checker
Check a domain's SSL/TLS certificate details.
Security ToolsWebhook Signature Verifier
Verify a webhook signature from GitHub, Stripe, Slack, Shopify or any HMAC-based provider, or compute the signature for a test payload.
Security Tools