Security noodle bar

Free security tools, served fresh in your browser.

142 tools for SOC analysts, pentesters, GRC teams and developers — headers, phishing, CVSS, Sigma, DORA, DNS, hashing and more.

Browse the menu → Try a workflow 定食

Today’s set

01 · Spice of the day 激辛

Linux · Kernel

CVE-2025-39682

Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability

In CISA KEV since
Ransomware use
Unknown
EPSS
0.029 · top 14%scored 24 Sep 2026
CVSS
9.8v3.1 · CNA

CISA remediation due

Picked: highest EPSS among KEV additions of the last 7 days, ransomware use as tie-break.

02 · Chef’s pick おすすめ

NIS2 Self-Assessment IN-BROWSER

Self-assess NIS2 scope and Article 21 measures.

KEV this week: 8 additions · dashboard →

TOTAL ¥0

No account · no tracking · 84% cooked in your browser

KEV + EPSS fetched 18:41 UTC · Swiss-hosted

House Specials

Our signature analysis tools. Start here.

View all 13 →
HTTP Security Headers Grader FREE Runs in your browser; some lookups go through our server (your IP is never forwarded):

Grade a site's HTTP security headers from A+ to F.
Phishing Checker FREE Runs in your browser; some lookups go through our server (your IP is never forwarded):

Score suspicious URLs for typosquatting, lookalike domains and phishing patterns.
CVSS v3.1 Calculator FREE Runs entirely in your browser:

Score vulnerabilities with official CVSS v3.1 base, temporal and environmental metrics.
Email Header Analyzer FREE Runs entirely in your browser:

Trace an email's path and verify SPF, DKIM and DMARC results.

Spicy Bowls

SOC operations, threat hunting and incident response.

View all 14 →
MITRE ATT&CK Search FREE Runs entirely in your browser:

Search MITRE ATT&CK tactics, techniques and procedures offline in your browser.
Sigma Rule Builder FREE Runs entirely in your browser:

Build Sigma detection rules visually and convert to Splunk, Sentinel, QRadar.
IOC Defanger FREE Runs entirely in your browser:

Defang or refang IPs, domains and URLs before sharing indicators.
Incident Timeline Builder FREE Runs entirely in your browser:

Build incident timelines with evidence, export CSV for your postmortem.

Compliance Combo

Governance, risk and regulatory readiness.

View all 16 →
DORA Compliance Checker FREE Runs entirely in your browser:

Assess DORA readiness across ICT risk, incident reporting and resilience testing.
Compliance Reference Database FREE Runs entirely in your browser:

Search GDPR, NIS2, DORA, PCI DSS and ISO 27001 controls together.
NIS2 Self-Assessment FREE Runs entirely in your browser:

Self-assess NIS2 obligations and get a gap list with priorities.
Dependency Vulnerability Scanner FREE Runs entirely in your browser:

Scan npm, pip and composer lockfiles for known CVEs.

Side Dishes

Web, text and developer utilities.

View all 27 →
JSON / YAML / PHP Formatter FREE Runs entirely in your browser:

Beautify, minify and validate JSON with syntax highlighting and error hints.
Regex Tester FREE Runs entirely in your browser:

Test regular expressions live with capture groups, flags and match highlighting.
CSP Builder FREE Runs entirely in your browser:

Compose a Content-Security-Policy header with directive guidance and validation.
Cookie Security Analyzer FREE Runs entirely in your browser:

Inspect cookie flags like Secure, HttpOnly and SameSite for risky settings.

Workflows

Chained tools around one shared case.

View all 3 →
IR Flow: Phishing Investigation NEW

URL and headers in; DMARC verdict, defanged indicators, STIX out.
IR Flow: Ransomware Response NEW

Guided ransomware playbook with embedded tools and after-action export.
Domain Security Review NEW

DNS, email auth, TLS and headers scored in one pass.

 Suggest a workflow →

Which tools do you chain by hand? Tell us.

Also on the menu

Noodle Network 11DNS, IP, network & infrastructure tools Crypto Gyoza 15Hashing, encoding & cryptography Pentester Platter 9Offensive security & red team tools Dessert Menu 13Time, color, generators & misc goodies Cloud Ramen 3Cloud & infrastructure security: IAM, storage exposure, containers Robo Ramen 14AI / LLM cost, prompt, safety & governance

Browse the full menu — 142 tools →

Tools are provided for educational and authorized use only. You are responsible for compliance with applicable laws.