Security noodle bar

Free security tools, served fresh in your browser.

142 tools for SOC analysts, pentesters, GRC teams and developers — headers, phishing, CVSS, Sigma, DORA, DNS, hashing and more.

Browse the menu → Try a workflow 定食

Today’s set

Spice of the day 激辛

CVE-2026-71362

Adobe · Commerce and Magento

EPSS 0.875 · top 0.2% · CVSS 9.1

Chef’s pick Timestamp Converter

¥0Full ticket →Past sets

Most used this month

PGP Key LookupFind PGP keys by email/fingerprint/key ID via keyservers. Security Feeds (RSS)Aggregated security news, CVEs, threat intel from 40+ sources. IOC DefangerDefang malicious indicators for safe sharing. DNS MapperMap DNS infra with visual graphs and subdomain discovery. Email Security CheckerSPF, DKIM, DMARC at a glance. Holy trinity of email security. HTTP Security Headers GraderGrade headers A+ to F. Missing CSP? Cold noodles. MITRE ATT&CK SearchSearch the ATT&CK matrix like a menu. Phishing CheckerSniff out suspicious URLs. Typosquatting detection included.

House Specials

Our signature analysis tools. Start here.

View all 13 →
HTTP Security Headers Grader FREE Runs in your browser; some lookups go through our server (your IP is never forwarded):

Grade a site's HTTP security headers from A+ to F.
Phishing Checker FREE Runs in your browser; some lookups go through our server (your IP is never forwarded):

Score suspicious URLs for typosquatting, lookalike domains and phishing patterns.
CVSS v3.1 Calculator FREE Runs entirely in your browser:

Score vulnerabilities with official CVSS v3.1 base, temporal and environmental metrics.
Email Header Analyzer FREE Runs entirely in your browser:

Trace an email's path and verify SPF, DKIM and DMARC results.

Spicy Bowls

SOC operations, threat hunting and incident response.

View all 14 →
MITRE ATT&CK Search FREE Runs entirely in your browser:

Search MITRE ATT&CK tactics, techniques and procedures offline in your browser.
Sigma Rule Builder FREE Runs entirely in your browser:

Build Sigma detection rules visually and convert to Splunk, Sentinel, QRadar.
IOC Defanger FREE Runs entirely in your browser:

Defang or refang IPs, domains and URLs before sharing indicators.
Incident Timeline Builder FREE Runs entirely in your browser:

Build incident timelines with evidence, export CSV for your postmortem.

Compliance Combo

Governance, risk and regulatory readiness.

View all 16 →
DORA Compliance Checker FREE Runs entirely in your browser:

Assess DORA readiness across ICT risk, incident reporting and resilience testing.
Compliance Reference Database FREE Runs entirely in your browser:

Search GDPR, NIS2, DORA, PCI DSS and ISO 27001 controls together.
NIS2 Self-Assessment FREE Runs entirely in your browser:

Self-assess NIS2 obligations and get a gap list with priorities.
Dependency Vulnerability Scanner FREE Runs entirely in your browser:

Scan npm, pip and composer lockfiles for known CVEs.

Side Dishes

Web, text and developer utilities.

View all 27 →
JSON / YAML / PHP Formatter FREE Runs entirely in your browser:

Beautify, minify and validate JSON with syntax highlighting and error hints.
Regex Tester FREE Runs entirely in your browser:

Test regular expressions live with capture groups, flags and match highlighting.
CSP Builder FREE Runs entirely in your browser:

Compose a Content-Security-Policy header with directive guidance and validation.
Cookie Security Analyzer FREE Runs entirely in your browser:

Inspect cookie flags like Secure, HttpOnly and SameSite for risky settings.

Workflows

Chained tools around one shared case.

View all 3 →
IR Flow: Phishing Investigation NEW

URL and headers in; DMARC verdict, defanged indicators, STIX out.
IR Flow: Ransomware Response NEW

Guided ransomware playbook with embedded tools and after-action export.
Domain Security Review NEW

DNS, email auth, TLS and headers scored in one pass.

 Suggest a workflow →

Which tools do you chain by hand? Tell us.

Also on the menu

Noodle Network 11DNS, IP, network & infrastructure tools Crypto Gyoza 15Hashing, encoding & cryptography Pentester Platter 9Offensive security & red team tools Dessert Menu 13Time, color, generators & misc goodies Cloud Ramen 3Cloud & infrastructure security: IAM, storage exposure, containers Robo Ramen 14AI / LLM cost, prompt, safety & governance

Browse the full menu — 142 tools →

Tools are provided for educational and authorized use only. You are responsible for compliance with applicable laws.