Security Tools

Test your password strength and get recommendations for improvement

Generate secure random passwords with customizable options

Search CVEs, visualize vendor trends, analyze response times, and calculate CVSS scores

Look up Common Weakness Enumeration entries from MITRE with detailed mitigations and Top 25 list

Calculate CVSS v3.1 vulnerability scores with Base, Temporal, and Environmental metrics. Generate vector strings and severity ratings.

Desktop app for filesystem analysis and security auditing with SSH scanning (macOS, Windows, Linux)

Generate cryptographic hashes (MD5, SHA-256, SHA-512) for files and text. Check malware with VirusTotal integration.

Encode and decode Base64, Hex, Binary, and other formats with file support

Decode and analyze JSON Web Tokens with security validation

Debug OAuth 2.0 and OpenID Connect flows with JWT decoder, PKCE generator, flow tester, and error troubleshooting

Encode and decode text using ROT13 and Caesar cipher

Decode and analyze SSL/TLS certificates with security validation

Generate CSRs, convert between PEM/DER/PFX/P7B formats, and verify certificate chains - 100% client-side

Generate SSH key pairs (Ed25519, RSA, ECDSA) with fingerprints and randomart visualization - 100% client-side

Generate PGP/GPG key pairs (Curve25519, RSA, NIST curves) with fingerprints and QR codes - 100% client-side

Free XOR encryption and decryption online. Encrypt text, decode XOR ciphertext, brute force cryptanalysis

Encrypt and decrypt text or files with AES-256-GCM, AES-CBC, or AES-CTR. Runs in your browser.

Multi-technique deobfuscation tool for malware analysis with auto-detection and chaining

Defang and refang URLs, IPs, and domains for threat intelligence

Disassemble x86/ARM/RISC-V machine code with assembler, shellcode detection, call graphs, and performance analysis

Explore MITRE ATT&CK tactics and techniques for threat hunting

Visual Nmap command generator with preset templates and intelligent results parser

Visual Metasploit command generator with module presets, payload selector, and console command reference

Detect homograph attacks and typosquatting. Analyze suspicious domains or generate protective variants

Check IP reputation, geolocation, and threat intelligence with fraud detection

Search Certificate Transparency logs for SSL/TLS certificates and subdomains

Generate professional email templates for incident response, disaster recovery tests, maintenance notifications, security alerts, and stakeholder communications

Validate SPF, DKIM, and DMARC records with security grading and recommendations

Validate email syntax, MX records, disposable domains, and provider risk scoring

Analyze email headers for SPF/DKIM/DMARC validation, routing, and security threats

Test HTTP security headers and get security scores with actionable recommendations

Identify true file types by analyzing magic numbers and detect extension spoofing

Extract indicators of compromise (IPs, domains, URLs, hashes) from threat intel

Aggregate IOCs from multiple feeds, deduplicate indicators, and export collections for investigations

Look up hash values to identify known malware and file signatures

Parse and analyze robots.txt files with path testing and security checks

Analyze HTTP cookies for security issues and privacy concerns

Generate DMARC records with step-by-step wizard, preset templates, and deployment roadmap

Scan websites for GDPR compliance issues including cookie consent, privacy policy, and third-party trackers

Generate Content Security Policy headers with nonce/hash support and validation

Generate SPF records with automatic DNS lookup counter and optimization

Detect and analyze CORS misconfigurations, security vulnerabilities, and policy issues

Extract ASCII and Unicode strings from binary files for malware analysis with IOC pattern detection

Calculate Shannon entropy to detect packed, encrypted, or obfuscated malware in binary files

Binary file viewer and editor with hex/ASCII display, search, bookmarks, and byte editing

Detect exposed API keys, tokens, private keys, and database credentials in code. 100% client-side scanning.

Generate Software Bill of Materials (SBOM) in CycloneDX and SPDX formats for supply chain security and EO 14028 compliance

Map NIST Cybersecurity Framework 2.0 controls to CIS Controls v8, ISO 27001:2022, and SOC 2 Trust Services Criteria

Validate K8s manifests against CIS Kubernetes Benchmark security checks. Detect privileged containers, missing resource limits, and misconfigurations.

Build detection queries for Splunk SPL, Elastic KQL, and Microsoft Sentinel. Includes presets for authentication, network, malware, and threat hunting with MITRE ATT&CK mappings.