Security noodle bar

Free security tools, served fresh in your browser.

148 tools for SOC analysts, pentesters, GRC teams and developers — headers, phishing, CVSS, Sigma, DORA, DNS, hashing and more.

Browse the menu → Try a workflow 定食

Today’s set

Spice of the day 激辛

CVE-2026-71362

Adobe · Commerce and Magento

EPSS 0.875 · top 0.2% · CVSS 9.1

Chef’s pick CSV Converter

¥0Full ticket →Past sets

Most used this month

PGP Key LookupFind PGP keys by email/fingerprint/key ID via keyservers. DNS MapperMap DNS infra with visual graphs and subdomain discovery. IOC DefangerDefang malicious indicators for safe sharing. Security Feeds (RSS)Aggregated security news, CVEs, threat intel from 40+ sources. Email Security CheckerSPF, DKIM, DMARC at a glance. Holy trinity of email security. HTTP Security Headers GraderGrade headers A+ to F. Missing CSP? Cold noodles. Phishing CheckerSniff out suspicious URLs. Typosquatting detection included. MITRE ATT&CK SearchSearch the ATT&CK matrix like a menu.

Web & Domain Security

TLS, headers, cookies and domain hardening.

View all 15 →
HTTP Security Headers Grader FREE Runs in your browser; some lookups go through our server (your IP is never forwarded):

Grade a site's HTTP security headers from A+ to F.
SSL Certificate Checker FREE Runs on our server (nothing stored or logged):

Check a TLS certificate's chain, expiry, protocols and cipher strength.
CSP Builder FREE Runs entirely in your browser:

Compose a Content-Security-Policy header with directive guidance and validation.
Domain Security Posture Scanner FREE Runs on our server (nothing stored or logged):

Scan a domain's DNS, email, TLS and headers for a posture grade.

Detection & SOC

SIEM, detection engineering and SOC operations.

View all 10 →
MITRE ATT&CK Search FREE Runs entirely in your browser:

Search MITRE ATT&CK tactics, techniques and procedures offline in your browser.
Sigma Rule Builder FREE Runs entirely in your browser:

Build Sigma detection rules visually and convert to Splunk, Sentinel, QRadar.
YARA Rule Builder & Tester FREE Runs entirely in your browser:

Build and test YARA rules against sample files in your browser.
SIEM Query Template Library NEW Runs entirely in your browser:

Browse ready-made SIEM queries for Splunk, Sentinel, QRadar and Elastic.

GRC & Compliance

Governance, risk and regulatory readiness.

View all 14 →
DORA Compliance Checker FREE Runs entirely in your browser:

Assess DORA readiness across ICT risk, incident reporting and resilience testing.
Compliance Reference Database FREE Runs entirely in your browser:

Search GDPR, NIS2, DORA, PCI DSS and ISO 27001 controls together.
NIS2 Self-Assessment FREE Runs entirely in your browser:

Self-assess NIS2 obligations and get a gap list with priorities.
ISO 27001 SoA Builder FREE Runs entirely in your browser:

Build an ISO 27001 Statement of Applicability across all Annex A controls.

Dev & Everyday Utilities

Formatters, converters, encoders and generators.

View all 34 →
JSON / YAML / PHP Formatter FREE Runs entirely in your browser:

Beautify, minify and validate JSON with syntax highlighting and error hints.
Regex Tester FREE Runs entirely in your browser:

Test regular expressions live with capture groups, flags and match highlighting.
Diff Tool FREE Runs entirely in your browser:

Compare two blocks of text and highlight every added or removed line.
UUID Generator FREE Runs entirely in your browser:

Generate and validate UUID versions 1, 4 and 7 in bulk.

Workflows

Chained tools around one shared case.

View all 3 →
IR Flow: Phishing Investigation NEW

URL and headers in; DMARC verdict, defanged indicators, STIX out.
IR Flow: Ransomware Response NEW

Guided ransomware playbook with embedded tools and after-action export.
Domain Security Review NEW

DNS, email auth, TLS and headers scored in one pass.

 Suggest a workflow →

Which tools do you chain by hand? Tell us.

Also on the menu

Email & Phishing 6Investigate suspicious emails, headers, auth and QR codes Network & DNS 13DNS, IP, WHOIS, ports and network infrastructure Incident Response & Threat Intel 11IOCs, timelines, STIX and incident tooling Vulnerability Management 7CVSS, EPSS, SSVC, KEV and dependency scanning Crypto, Keys & Passwords 15Hashing, encryption, keys, tokens and passwords Cloud Security 4IAM, storage exposure, containers and secrets AI Security 14LLM cost, prompts, safety and AI governance Offensive / Red Team 5Recon, payloads and password-cracking helpers

Browse the full menu — 148 tools →

Tools are provided for educational and authorized use only. You are responsible for compliance with applicable laws.