Security Tools
Free, educational, defensive security tools. Nothing you enter here is sent to our servers unless explicitly noted.
Security Analysis
Security Headers Analyzer
Check which common hardening headers a website sends. This inspects only the response from the URL you provide -- it does not scan ports or crawl the site.
URL Security Inspector
Review the structural characteristics of a URL.
This is a heuristic structural check, not a malware or phishing detector -- it never labels a URL as "safe" or "malicious".
SSL/TLS Certificate Inspector
Inspect the public TLS certificate metadata of an HTTPS website (port 443 only). This is a certificate inspector, not a vulnerability or cipher scanner.
robots.txt Analyzer
Retrieve and parse a site's robots.txt file. Paths listed inside it are never visited by this tool.
security.txt Checker
Check for a standard security.txt file describing how to report vulnerabilities. Referenced links are shown as text only and are never fetched automatically.
Network Information
DNS Lookup
Look up public DNS records for a domain (A, AAAA, MX, TXT, CNAME, NS).
Utilities
Password Strength Analyzer
Check how strong a password is.
This runs entirely in your browser. Your password is never sent anywhere or stored.
Hash Generator
Generate SHA-256, SHA-384, and SHA-512 hashes.
Hashing is one-way -- a hash cannot be reversed back into the original text.
JWT Inspector
Decode a JSON Web Token's header and payload for inspection.
Decoding a JWT does NOT verify its signature. A decoded token should never be treated as trustworthy or authentic on its own.
Base64 Encode / Decode
Encode text to Base64 or decode Base64 back to text, with full Unicode support.
Timestamp Converter
Convert between Unix timestamps and human-readable dates.