Security Tools
Hashing, ciphers, certificates, and other free utilities for security professionals.
77 tools
AES Encryption Tool
Encrypt and decrypt text using AES-256 encryption. Client-side processing keeps your data secure and private.
Affine Cipher Tool
Free online Affine cipher tool. Encrypt and decrypt text using E(x) = (ax + b) mod 26 with configurable a and b keys. Supports automatic key validation.
Atbash Cipher Tool
Free online Atbash cipher tool. Encrypt and decrypt text using the ancient Hebrew reverse alphabet cipher. Self-reciprocal — same operation to encode and decode.
Base64 Encoder/Decoder
Free Base64 encoder and decoder tool. Convert binary data to ASCII text and back for email attachments, APIs, and data serialization.
Beaufort Cipher Tool
Free Beaufort cipher tool for encryption and decryption. Self-reciprocal polyalphabetic cipher related to Vigenere. Includes key analysis and frequency visualization.
Biometric Performance Simulator
Interactive biometric performance simulator. Visualize FAR/FRR curves, compare modalities, and calculate CER for identity and access management.
Caesar Cipher Decoder & Encoder
Decode any Caesar cipher (shift cipher) instantly. Brute-force all 25 shifts, auto-detect the key, encode or translate text. Free, no signup, in-browser.
Certificate Chain Builder
Build complete SSL/TLS certificate chains automatically. Upload your certificate and fetch missing intermediate CA certs.
Certificate CSR Generator & Format Converter
Generate Certificate Signing Requests (CSR) for SSL/TLS certificates. Convert between PEM, DER, and PKCS formats online.
Certificate Transparency Lookup
Search Certificate Transparency logs to find all SSL/TLS certificates issued for a domain. Monitor for unauthorized certificates.
Cipher Identifier Tool
Paste unknown ciphertext and find which cipher decodes it. Auto-detect Caesar, ROT13, Vigenère, substitution, Atbash, Base64, hex, and binary using frequency analysis and Index of Coincidence.
Cookie Analyzer
Free cookie analyzer tool. Inspect HTTP cookies for security flags (HttpOnly, Secure, SameSite) and compliance with privacy regulations.
CORS Policy Analyzer
Analyze CORS policies for security misconfigurations. Test origin validation, credentials handling, and get remediation guidance.
Cryptographic Mode Visualizer
Interactive cryptographic mode visualizer. See why ECB mode is insecure with pixel-level encryption demos. Compare CBC, CFB, OFB, CTR, and GCM modes.
CSP Generator
Free CSP generator tool. Create custom Content Security Policy headers to prevent XSS attacks, clickjacking, and code injection.
CVE Vulnerability Search
Free CVE vulnerability search tool. Look up CVE IDs, search vulnerabilities by product/vendor, calculate CVSS scores, and find security patches. Updated from National Vulnerability Database.
CVSS v3.1 Calculator
Calculate CVSS v3.1 vulnerability scores with Base, Temporal, and Environmental metrics. Generate vector strings and severity ratings. Free online calculator.
CWE Lookup Tool
Search the CWE database for software security weaknesses. Find vulnerability types, descriptions, and remediation guidance.
Database Inference & Aggregation Simulator
Interactive database inference attack simulator. Practice aggregation queries, discover inference vulnerabilities, and learn defensive countermeasures.
DMARC Generator
Free DMARC generator tool. Create custom DMARC DNS records with monitoring and enforcement policies to prevent email spoofing.
Domain Spoofing Detection Tool
Free domain spoofing detection tool. Identify typosquatting, homograph attacks, IDN spoofing, and lookalike domains. Protect your brand from phishing and domain impersonation.
Email Authentication Validator
Free email authentication validator. Check SPF, DKIM, and DMARC records to prevent email spoofing and improve deliverability.
Email Header Analyzer
Free email header analysis tool. Detect email spoofing, verify SPF/DKIM/DMARC authentication, trace email delivery path, and identify phishing attempts from email headers.
Email Setup Wizard
Set up email authentication with our guided wizard. Configure SPF, DKIM, and DMARC records step-by-step to protect your domain from spoofing.
Email Template Generator
Free email template generator for IT teams. Create incident response, maintenance notices, DR announcements, and security alert templates.
Email Validator & MX Checker
Validate email addresses by checking syntax, MX records, and domain configuration. Verify deliverability before sending.
Encoding Chain Analyzer
Free tool to detect and decode nested encodings. Analyze Base64, URL encoding, hex, and multi-layer encoding chains with step-by-step decoding visualization.
Enigma Machine Simulator
Interactive Enigma machine simulator with authentic WWII rotor configurations. Encrypt and decrypt messages, configure plugboard and reflector settings.
Entropy Analyzer
Analyze the entropy and randomness of data. Detect encrypted content, compressed files, and potential malware indicators.
Federated Identity Architect
Free federated identity protocol comparison tool. Get recommendations for SAML, OIDC, OAuth, and Kerberos with flow diagrams and troubleshooting.
File Hash Checker & Malware Hash Lookup
Free file hash checker & malicious hash lookup. Drag-drop a file to hash it in your browser, or bulk-check MD5/SHA-1/SHA-256 hashes against malware databases — VirusTotal & MalwareBazaar links included.
File Magic Number Checker
Detect a file's real type by its magic bytes (header signature). Lookup PDF, JPEG, PNG, ZIP signatures, identify spoofed extensions, and verify file format.
GDPR Checker
Free GDPR compliance checker. Assess privacy policy, cookie consent, data subject rights, and EU data protection requirements.
Hash Generator - MD5, SHA-256, SHA-512
Free online hash generator. Compute MD5, SHA-1, SHA-256, SHA-384, SHA-512 and HMAC hashes from text or files in your browser — nothing uploaded.
Hex Editor
Free online hex editor to view & edit binary files in your browser. Inspect bytes, search hex/ASCII, edit in place & export. No upload — 100% private.
Hill Cipher Tool
Free Hill cipher tool. Encrypt and decrypt text using matrix-based polygraphic substitution with automatic inverse matrix calculation and key validation.
Incident Response Playbook & Runbook Generator
Generate customized incident response playbooks and runbooks. Create step-by-step procedures for security incidents.
IOC Extractor
Free IOC extractor tool. Extract IP addresses, domains, URLs, file hashes, and email addresses from security logs and threat reports.
IP Risk Checker
Check any IP's risk score, reputation, and threat level. Detect VPNs, proxies, Tor exits, and check geolocation. Free fraud and abuse screening tool.
JWT Decoder & Validator
Decode and inspect JWT tokens instantly. View header, payload, and verify signatures. Security validation included. Free, works in your browser.
Kubernetes Manifest Validator
Free Kubernetes YAML validator. Scan manifests for security issues against CIS Kubernetes Benchmark. Detect privileged containers, missing limits, and get remediation guidance.
Machine Code to Assembly Disassembler
Free online disassembler. Convert hex bytes (or Base64) to assembly for x86, x86-64, ARM, ARM64, RISC-V, MIPS, PowerPC, SPARC and 68K — Intel/AT&T syntax, runs entirely in your browser.
Malware Deobfuscator
Deobfuscate malware with auto-detection, XOR brute force, Base64, Hex, ROT13, URL decoding, and multi-layer chaining.
Media Sanitization & Destruction Advisor
Get NIST SP 800-88 sanitization recommendations for any media type. Free tool provides destruction methods, verification steps, and compliance documentation.
Metasploit Command Builder
Build Metasploit commands and payloads with an interactive interface. Generate msfvenom commands for penetration testing.
MITRE ATT&CK Navigator
Interactive MITRE ATT&CK framework navigator. Search tactics, techniques, and procedures for threat intelligence and security analysis.
NIST CSF Mapper
Map controls between NIST CSF, CIS Controls, ISO 27001, and SOC 2. Find equivalent security controls across frameworks.
Nmap Command Builder
Build Nmap commands visually without memorizing syntax. Generate network scanning commands for security assessments, penetration testing, and vulnerability discovery with our interactive command builder.
OAuth/OIDC Debugger
Debug OAuth 2.0 and OpenID Connect flows. Decode JWTs, generate PKCE challenges, validate redirect URIs, and troubleshoot OAuth errors.
OCSP/CRL Revocation Checker
Free OCSP and CRL checker to verify SSL/TLS certificate revocation status. Test certificates against OCSP responders and CRL distribution points in real time.
One-Time Pad Generator
Free One-Time Pad encryption tool. Generate truly random keys for unbreakable encryption with perfect secrecy. Includes key generation, XOR operations, and security analysis.
Password Strength Checker
Free password strength checker. Scores your password in real time, estimates crack time and flags weaknesses. 100% in-browser — your password never leaves.
PGP Key Generator
Generate PGP/GPG key pairs for email encryption and file signing. Create RSA or ECC keys securely in your browser.
Playfair Cipher Tool
Free online Playfair cipher tool with interactive 5x5 matrix visualization. Encrypt and decrypt digraph-based messages with automatic key square generation.
Public Key Concepts
Understand public and private key cryptography through interactive visual analogies. Learn the padlock, color mixing, and mailbox concepts - no math required.
Rail Fence Cipher Tool
Free online Rail Fence cipher tool with visual zigzag diagram. Encrypt and decrypt text using transposition with configurable rail count and offset.
Robots.txt Analyzer
Free robots.txt analyzer and validator. Check robots.txt syntax, test crawler rules, identify security issues, and optimize for SEO. Validate directives for Google, Bing, and other crawlers.
ROT13 Decoder & Caesar Cipher Solver
Decode ROT13 instantly or crack Caesar ciphers with brute force solver. Encode with custom shifts (1-25). Free online decoder, no signup required.
RSA Playground
Interactive RSA encryption tool using small primes. See key generation, encryption, decryption calculations step-by-step. Break RSA by factoring n to understand why key size matters.
SBOM Generator
Generate Software Bill of Materials in SPDX and CycloneDX formats. Document dependencies for supply chain security.
Secrets Scanner Simulator
Scan code for exposed secrets, API keys, and credentials. Detect hardcoded passwords and sensitive data leaks.
Secure Password Generator
Free secure password generator. Create cryptographically strong random passwords with custom length and character options.
Security Headers Analyzer
Free security headers analyzer. Check HTTP security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options) and get security score. Identify vulnerabilities and hardening recommendations.
Security Model Decision Matrix
Free security model comparison tool. Evaluate Bell-LaPadula, Biba, Clark-Wilson, and more with scored recommendations and implementation guides.
SIEM Query Builder
Free SIEM query generator for Splunk SPL, Elastic KQL, and Microsoft Sentinel. Build detection rules with presets for authentication, network, malware hunting. Includes MITRE ATT&CK mappings.
SPF Generator
Free SPF generator tool. Create custom SPF DNS records to authorize mail servers and prevent email spoofing.
SSH Key Generator - Ed25519, RSA, ECDSA
Free Ed25519, ECDSA and RSA SSH key generator. Passphrase encryption, OpenSSH / PEM / PuTTY .ppk export, SHA-256 fingerprint and randomart. 100% client-side — keys never leave your browser.
SSL/TLS Checker
Analyze SSL/TLS certificates, test protocols, scan for vulnerabilities, and get security grades. Detailed recommendations for HTTPS security.
String Extractor
Extract readable strings from binary files for malware analysis and forensics. Find embedded text, URLs, and paths.
Substitution Cipher Solver
Free substitution cipher solver. Decode monoalphabetic ciphers with frequency analysis, bigram patterns, and auto-suggestions. Interactive alphabet map.
SystemLens
Create system architecture diagrams from natural language descriptions. Visualize infrastructure and application designs.
Threat Intelligence Aggregator
Aggregate threat intelligence from multiple sources. Look up IPs, domains, and hashes across threat intel feeds.
Threat Modeling Wizard
Free threat modeling wizard using STRIDE and DREAD methodologies. Identify threats, score risks, and generate mitigation plans with PDF export.
URL Defanger Tool
Free URL defanging tool for cybersecurity professionals. Safely share malicious URLs, IPs, and domains by defanging them (hxxp, [.]). Includes batch processing and refanging capabilities.
Vigenère Cipher with Cryptanalysis
Encode and decode Vigenère cipher text. Includes Kasiski examination, Index of Coincidence analysis, key length detection, and key recovery cryptanalysis tools.
X.509 Certificate Decoder
Parse SSL/TLS certificates in PEM, DER, and CRT formats. View details, validate chains, check expiration, and analyze security properties.
XOR Encryption Tool
Free online XOR decoder, decrypter & brute forcer. Try all single-byte keys, break repeating-key XOR automatically, crib-drag known plaintext, and recover the key. Text, hex & Base64 — everything runs in your browser.