Security Tools
21 tools available
Certificate Decoder
Decode and inspect PEM-encoded X.509 certificates. View subject, issuer, validity, public key, and extensions.
Certificate Info Viewer
Parse and display X.509 certificate details from PEM format including subject, issuer, validity, extensions, key info, and fingerprints
CORS Header Builder
Build Cross-Origin Resource Sharing (CORS) headers for your web APIs with output in multiple server formats
CSP Analyzer
Analyze and validate Content Security Policy headers for security issues, misconfigurations, and missing directives
CSP Header Builder
Build Content Security Policy (CSP) headers interactively with checkboxes for each directive and common values
Encryption Analyzer
Analyze encrypted or encoded text to detect encoding format, identify potential cipher types, and view character frequency analysis
File Hash Checker
Calculate and verify file hashes (MD5, SHA-1, SHA-256, SHA-512) to check file integrity
Hash File Checker
Compute SHA-256, SHA-1, and MD5 hashes of a file and verify against an expected checksum
JWT Inspector
Deep inspection of JWT tokens with claim descriptions, security analysis, expiration tracking, and header/payload breakdown
OWASP Top 10 Cheatsheet
Quick reference for OWASP Top 10 (2021) web application security risks with descriptions, examples, and prevention strategies.
Password Entropy Calculator
Calculate the entropy (bits) of a password with character set analysis, brute force time estimates, and strength rating
Password Policy Generator
Generate password validation rules and regex patterns for security requirements
Password Strength Checker
Analyze password strength with entropy calculation, crack time estimation, and pattern detection
Security Header Checker
Analyze HTTP security headers (HSTS, CSP, X-Frame-Options, etc.) with scoring and recommendations
security.txt Generator
Generate security.txt files following the RFC 9116 standard for vulnerability disclosure
SRI Hash Generator
Generate Subresource Integrity (SRI) hashes (SHA-256, SHA-384, SHA-512) for scripts and stylesheets
SSL/TLS Certificate Info
Parse and display PEM certificate details including subject, issuer, validity, SANs, key info, and extensions
Subresource Integrity (SRI) Generator
Generate SRI hashes (SHA-256, SHA-384, SHA-512) for JavaScript and CSS resources with complete integrity tags
TOTP Generator
Generate Time-based One-Time Passwords (TOTP) from a base32 secret key with configurable parameters
XSS Payload Tester
Test and analyze XSS payloads to verify HTML sanitization and escaping
XSS Tester
Test strings for XSS vulnerabilities and generate context-safe encoded output for HTML, JavaScript, URL, and CSS