🔍 Search Tools
Find the right bowl fast — search 131 free, client-side security tools by name, tag, or what you’re trying to do.
All tools (A–Z)
.htaccess Generator
Create Apache .htaccess with security/caching/rewrite rules.
Side Dishes
AES-GCM Encrypt / Decrypt
Encrypt/decrypt with AES-256-GCM (Web Crypto API).
Crypto Gyoza
AI / LLM Vocabulary
Plain-language glossary of 100+ AI / LLM terms.
Robo Ramen
AI/ML Threat Model Builder
Wizard threat model for AI/ML systems (STRIDE+ATLAS+OWASP).
Robo Ramen
ASCII Banner Generator
Generate ASCII art text banners.
Dessert Menu
ASCII Table
Complete ASCII reference: dec/hex/oct/bin.
Dessert Menu
Actionable CVEs Dashboard
What to patch today: fresh CISA KEV entries + highest-EPSS CVEs.
Spicy Specials
BIA / RTO-RPO Calculator
Run a BIA, derive RTO/RPO, flag SPOFs.
Bento Box
Base Converter
Convert between bin/oct/dec/hex with arithmetic.
Crypto Gyoza
CAA & HSTS Preload Checker
Check CAA records and HSTS preload eligibility for any domain.
House Specials
CIDR Calculator
Calculate IP ranges, subnets, masks.
Noodle Network
CSP Builder
Build CSP headers visually with presets.
Side Dishes
CSR Generator & Decoder
Generate RSA/ECDSA CSRs in-browser; decode existing CSRs.
Crypto Gyoza
CSV Converter
Parse CSV/TSV, convert to JSON/SQL/HTML/Markdown.
Side Dishes
CVE / CPE Search Builder
Compose CPE 2.3 names and search NVD / MITRE / OSV / KEV.
Spicy Specials
CVSS v3.1 Calculator
Score vulns with the official CVSS v3.1 recipe.
Spicy Specials
CVSS v4.0 Calculator
Official CVSS v4.0 scoring across Base/Threat/Environmental/Supplemental.
Spicy Specials
Certificate Decoder
Decode SSL/TLS certs to view subject, issuer, validity, extensions.
House Specials
Color Converter
HEX, RGB, HSL, CMYK with WCAG contrast checker.
Dessert Menu
Compliance Reference Database
Searchable database of 1000+ compliance specs.
Bento Box
Context-Window Fit Checker
Will it fit in 128k or 1M? Per-model pass/warn/fail.
Robo Ramen
Control Mapper
Cross-reference NIST CSF 2.0 to ISO 27001 / DORA.
Bento Box
Cookie Security Analyzer
Parse Set-Cookie, flag missing Secure/HttpOnly/SameSite.
Side Dishes
Cron Parser
Parse cron expressions, see next run times.
Dessert Menu
DMARC Report Analyzer
Turn DMARC aggregate (RUA) XML into a readable pass/fail-by-source view.
House Specials
DNS Mapper
Map DNS infra with visual graphs and subdomain discovery.
Noodle Network
DNS Record Lookup
A, AAAA, MX, TXT, NS, CNAME, SOA records with TTL.
Noodle Network
DORA Compliance Checker
DORA self-assessment with CSSF specifics, gap export.
Bento Box
DORA Register of Information
Compile DORA ICT third-party register, completeness checks.
Bento Box
Dependency Scanner
Scan package.json / requirements.txt / composer.json for CVEs.
Bento Box
Diff Tool
Compare texts with side-by-side and unified diff.
Side Dishes
Domain Availability
Check domain availability across TLDs using RDAP.
Noodle Network
Domain Security Posture Scanner
One domain → a graded report: security.txt, DMARC, SPF, MTA-STS, CAA, DNSSEC, HSTS.
House Specials
EPSS Score Lookup
FIRST EPSS exploit-prediction score with CISA KEV cross-check.
Spicy Specials
EU AI Act Readiness Checker
EU AI Act self-assessment (Reg 2024/1689).
Robo Ramen
EXIF Analyzer
Extract EXIF metadata from images client-side.
Side Dishes
Email Auth Record Builder
Generate valid SPF, DKIM, and DMARC DNS records with guardrails.
House Specials
Email Header Analyzer
Dissect headers layer by layer. SPF/DKIM/DMARC — the holy trinity.
House Specials
Email Security Checker
SPF, DKIM, DMARC at a glance. Holy trinity of email security.
House Specials
Encoding Toolkit
Encode / decode / detect: Hex, URL, HTML, Unicode, Base64.
Crypto Gyoza
Favicon Generator
Favicons from text, emojis, or solid colors.
Dessert Menu
File Signature Identifier
Identify file formats by magic numbers. 60+ signatures.
Spicy Bowls
Filigrane — Document Watermark
Watermark ID cards, payslips & PDFs before sending. 100% in-browser.
Side Dishes
Google Dork Builder
Compose advanced search queries with operators.
Pentester Platter
HMAC Generator
Compute/verify HMAC signatures (SHA-1/256/384/512).
Crypto Gyoza
HTTP Request Builder
Build requests, export cURL/fetch/Python/PHP.
Side Dishes
HTTP Security Headers Grader
Grade headers A+ to F. Missing CSP? Cold noodles.
House Specials
HTTP Status Codes
Complete searchable status code reference.
Side Dishes
Hash Toolkit
Generate, verify, identify hashes (MD5, SHA, bcrypt, more).
Crypto Gyoza
Hashcat Rule & Mask Builder
Compose Hashcat masks and rules with keyspace estimates.
Pentester Platter
ICS Calendar Generator
Create .ics events for Calendar / Google / Outlook.
Dessert Menu
IOC Defanger
Defang malicious indicators for safe sharing.
Spicy Bowls
IOC Pivoting Tool
Pivot across IOCs, incidents, systems. CSV or STIX 2.1 export.
Spicy Bowls
IP Geolocation & Privacy
Geolocate IPs, detect VPN/proxy, browser fingerprint.
Noodle Network
IP Info
Analyze IPv4/IPv6 with binary representation, range detection.
Noodle Network
ISO 27001 SoA Builder
Build SoA across 93 Annex A:2022 controls.
Bento Box
Incident Report Generator
NIS2 / DORA / GDPR incident report templates with deadlines.
Spicy Bowls
Incident Timeline Builder
Build incident timelines from logs with annotations.
Spicy Bowls
JSON / YAML / PHP Formatter
Validate, format, convert between JSON / YAML / PHP.
Side Dishes
JWT Decoder
Decode and analyze JSON Web Tokens.
Crypto Gyoza
LLM Pre-flight Redactor
Scan and redact text before pasting into LLMs.
Robo Ramen
LLM Red Team Checklist
60-item LLM red-team checklist across 6 phases.
Robo Ramen
LLM System-Prompt Linter
Lint system prompts for foot-guns and leaks.
Robo Ramen
LLM Token Cost Estimator
Approximate tokens and cost across LLM providers.
Robo Ramen
LOLBin Browser
Offline searchable LOLBin / GTFOBins reference.
Pentester Platter
Link Extractor
Extract links from a webpage with filtering.
Side Dishes
LinkedIn Exposure Audit
Score LinkedIn exposure from an attacker perspective.
Pentester Platter
Local-Model VRAM Calculator
GPU memory estimates for local LLMs with quant tweaks.
Robo Ramen
Log Parser Builder
Build Grok / named-capture regex against log lines.
Spicy Bowls
Log Redactor
Anonymize IPs, emails, tokens in logs before sharing.
Spicy Bowls
Lorem Ipsum Generator
Placeholder text for design mockups.
Dessert Menu
MAC Address Lookup
Look up MAC vendor/manufacturer from OUI database.
Noodle Network
MIME Type Lookup
Look up MIME types by file extension.
Side Dishes
MITRE ATLAS Search
Offline search across MITRE ATLAS for AI/ML attacks.
Robo Ramen
MITRE ATT&CK Search
Search the ATT&CK matrix like a menu.
Spicy Bowls
Markdown Preview
Write Markdown with live preview and export.
Side Dishes
Meeting Timezone Converter
Convert meeting times across timezones with .ics export.
Dessert Menu
Metadata Stripper
Remove EXIF/metadata from images before sharing.
Side Dishes
Mod_Rewrite Tester
Test Apache mod_rewrite rules and see transformations.
Side Dishes
NATO Phonetic Converter
Convert text/hex/UUIDs to NATO phonetic alphabet.
Dessert Menu
NIS2 Self-Assessment
Self-assess NIS2 scope and Article 21 measures.
Bento Box
NIST AI RMF Checker
Self-assess NIST AI RMF (Govern/Map/Measure/Manage).
Robo Ramen
NIST CSF 2.0 Profile Builder
Build CSF 2.0 Current and Target Profile across 106 subcats.
Bento Box
NIST CSF 2.0 Tier Assessment
Self-assess your CSF 2.0 Implementation Tier.
Bento Box
Nmap XML Parser
Parse Nmap -oX into a clean filterable HTML report.
Pentester Platter
OWASP LLM Top 10 Checker
Self-assess OWASP LLM Top 10 (v1.1).
Robo Ramen
PGP Key Inspector
Inspect OpenPGP public keys: algos, fingerprint, UIDs.
Crypto Gyoza
PGP Key Lookup
Find PGP keys by email/fingerprint/key ID via keyservers.
Crypto Gyoza
Password Hash Verifier
Verify passwords against bcrypt/Argon2, identify algo.
Crypto Gyoza
Password Policy Tester
Score policies against NIST 800-63B / NCSC / CIS.
Crypto Gyoza
Password Security Suite
Generate strong passwords with entropy analysis and bcrypt.
Crypto Gyoza
Phishing Checker
Sniff out suspicious URLs. Typosquatting detection included.
House Specials
Port Lookup
Port info, security status, common usage.
Noodle Network
Prompt Injection Playground
Learn prompt injection via 8 simulated scenarios.
Robo Ramen
QR Code Generator
Generate QR codes for URLs, WiFi, contacts.
Dessert Menu
QR Code Scanner
Decode QR codes with URL defanging for SOC sharing.
Dessert Menu
Recon / OSINT Helper
Pivot links to 25+ OSINT services from a domain/IP.
Pentester Platter
Regex Tester
Test regex with highlighting and ReDoS protection.
Side Dishes
Resource Health Checker
Parse uptime/free/df/top output for CPU/RAM/disk health.
Noodle Network
Reverse Shell Generator
Templated reverse/bind shells for authorized testing.
Pentester Platter
Risk Matrix Builder
3x3 or 5x5 risk heatmaps, PNG/CSV/JSON export.
Bento Box
Robots.txt Analyzer
Parse robots.txt with URL testing and validation.
Side Dishes
SOC Sizing & Cost
SIEM sizing, storage, 3-year TCO across SIEMs.
Bento Box
SQL Formatter
Format and minify SQL with syntax highlighting.
Side Dishes
SRI Hash Generator
Generate Subresource Integrity hashes for assets.
Side Dishes
SSH Key Analyzer
Generate Ed25519/RSA, analyze pub keys with fingerprint.
Crypto Gyoza
SSL Certificate Checker
Trust score, expiration alerts, legitimacy indicators.
House Specials
SSVC Decision Tree
CISA SSVC to Track / Attend / Act with rationale.
Spicy Specials
STIX 2.1 Formatter
Convert IOC lists into STIX 2.1 bundles.
Spicy Bowls
Security Feeds (RSS)
Aggregated security news, CVEs, threat intel from 40+ sources.
Side Dishes
Server Config Validator
Validate Apache/Nginx config with best-practice checks.
Side Dishes
Sigma Rule Builder
Visual builder with Splunk / QRadar / Sentinel export.
Spicy Bowls
String Case Converter
camelCase, snake_case, kebab-case, slug.
Side Dishes
Subdomain Takeover Checker
Find dangling CNAMEs vulnerable to takeover — matches 20+ services + fingerprints.
Noodle Network
Sysmon Config Builder
Visually compose Sysmon rules and export valid XML.
Spicy Bowls
TOTP Generator
Generate / verify RFC 6238 TOTPs with provisioning URI.
Crypto Gyoza
Tabletop Exercise Generator
Ready-to-run IR tabletop scenarios with injects.
Spicy Bowls
Test Data Generator
Realistic random test data: emails, IPs, domains.
Dessert Menu
Text Cleaner & Normalizer
Strip HTML, remove diacritics, normalize whitespace.
Side Dishes
Text Statistics
Word count, readability, keyword density.
Side Dishes
Timestamp Converter
Convert Unix timestamps with timezone support.
Dessert Menu
URL Parser
Parse URLs, encode/decode, build URLs.
Side Dishes
USB Hygiene Helper
Analyze USB device lists for BadUSB / unknown vendors.
Pentester Platter
UUID Generator
Generate/validate UUIDs (v1, v4) with bulk support.
Dessert Menu
Unix Permissions Calculator
Calculate Unix file permissions visually.
Dessert Menu
User Agent Parser
Parse UA strings: browser, OS, device.
Side Dishes
Vendor Risk Questionnaire
Build third-party security questionnaires.
Bento Box
WHOIS Lookup
Look up domain registration via RDAP.
Noodle Network
Windows Event ID Lookup
Offline reference for Security / System / Sysmon event IDs.
Spicy Bowls
YARA Rule Builder
Visually build YARA rules with live preview and tester.
Spicy Bowls
security.txt Generator
Generate RFC 9116 vulnerability disclosure files.
House Specials