🔍 Search Tools

Find the right bowl fast — search 131 free, client-side security tools by name, tag, or what you’re trying to do.

All tools (A–Z)
.htaccess Generator
Create Apache .htaccess with security/caching/rewrite rules.
Side Dishes
🔒 AES-GCM Encrypt / Decrypt
Encrypt/decrypt with AES-256-GCM (Web Crypto API).
Crypto Gyoza
📚 AI / LLM Vocabulary
Plain-language glossary of 100+ AI / LLM terms.
Robo Ramen
🤖 AI/ML Threat Model Builder
Wizard threat model for AI/ML systems (STRIDE+ATLAS+OWASP).
Robo Ramen
🔢 ASCII Banner Generator
Generate ASCII art text banners.
Dessert Menu
🔢 ASCII Table
Complete ASCII reference: dec/hex/oct/bin.
Dessert Menu
🔥 Actionable CVEs Dashboard
What to patch today: fresh CISA KEV entries + highest-EPSS CVEs.
Spicy Specials
📉 BIA / RTO-RPO Calculator
Run a BIA, derive RTO/RPO, flag SPOFs.
Bento Box
🔢 Base Converter
Convert between bin/oct/dec/hex with arithmetic.
Crypto Gyoza
🔒 CAA & HSTS Preload Checker
Check CAA records and HSTS preload eligibility for any domain.
House Specials
🌐 CIDR Calculator
Calculate IP ranges, subnets, masks.
Noodle Network
🛡 CSP Builder
Build CSP headers visually with presets.
Side Dishes
🔒 CSR Generator & Decoder
Generate RSA/ECDSA CSRs in-browser; decode existing CSRs.
Crypto Gyoza
📊 CSV Converter
Parse CSV/TSV, convert to JSON/SQL/HTML/Markdown.
Side Dishes
🔍 CVE / CPE Search Builder
Compose CPE 2.3 names and search NVD / MITRE / OSV / KEV.
Spicy Specials
🛡 CVSS v3.1 Calculator
Score vulns with the official CVSS v3.1 recipe.
Spicy Specials
🛡 CVSS v4.0 Calculator
Official CVSS v4.0 scoring across Base/Threat/Environmental/Supplemental.
Spicy Specials
🔒 Certificate Decoder
Decode SSL/TLS certs to view subject, issuer, validity, extensions.
House Specials
🎨 Color Converter
HEX, RGB, HSL, CMYK with WCAG contrast checker.
Dessert Menu
📜 Compliance Reference Database
Searchable database of 1000+ compliance specs.
Bento Box
🤖 Context-Window Fit Checker
Will it fit in 128k or 1M? Per-model pass/warn/fail.
Robo Ramen
📖 Control Mapper
Cross-reference NIST CSF 2.0 to ISO 27001 / DORA.
Bento Box
🍪 Cookie Security Analyzer
Parse Set-Cookie, flag missing Secure/HttpOnly/SameSite.
Side Dishes
Cron Parser
Parse cron expressions, see next run times.
Dessert Menu
📧 DMARC Report Analyzer
Turn DMARC aggregate (RUA) XML into a readable pass/fail-by-source view.
House Specials
🌐 DNS Mapper
Map DNS infra with visual graphs and subdomain discovery.
Noodle Network
🔍 DNS Record Lookup
A, AAAA, MX, TXT, NS, CNAME, SOA records with TTL.
Noodle Network
📜 DORA Compliance Checker
DORA self-assessment with CSSF specifics, gap export.
Bento Box
📒 DORA Register of Information
Compile DORA ICT third-party register, completeness checks.
Bento Box
🔍 Dependency Scanner
Scan package.json / requirements.txt / composer.json for CVEs.
Bento Box
📋 Diff Tool
Compare texts with side-by-side and unified diff.
Side Dishes
🌐 Domain Availability
Check domain availability across TLDs using RDAP.
Noodle Network
🛡 Domain Security Posture Scanner
One domain → a graded report: security.txt, DMARC, SPF, MTA-STS, CAA, DNSSEC, HSTS.
House Specials
📊 EPSS Score Lookup
FIRST EPSS exploit-prediction score with CISA KEV cross-check.
Spicy Specials
🤖 EU AI Act Readiness Checker
EU AI Act self-assessment (Reg 2024/1689).
Robo Ramen
📷 EXIF Analyzer
Extract EXIF metadata from images client-side.
Side Dishes
📧 Email Auth Record Builder
Generate valid SPF, DKIM, and DMARC DNS records with guardrails.
House Specials
📧 Email Header Analyzer
Dissect headers layer by layer. SPF/DKIM/DMARC — the holy trinity.
House Specials
📧 Email Security Checker
SPF, DKIM, DMARC at a glance. Holy trinity of email security.
House Specials
🔢 Encoding Toolkit
Encode / decode / detect: Hex, URL, HTML, Unicode, Base64.
Crypto Gyoza
🎨 Favicon Generator
Favicons from text, emojis, or solid colors.
Dessert Menu
🔍 File Signature Identifier
Identify file formats by magic numbers. 60+ signatures.
Spicy Bowls
🔐 Filigrane — Document Watermark
Watermark ID cards, payslips & PDFs before sending. 100% in-browser.
Side Dishes
🔎 Google Dork Builder
Compose advanced search queries with operators.
Pentester Platter
🔑 HMAC Generator
Compute/verify HMAC signatures (SHA-1/256/384/512).
Crypto Gyoza
🚀 HTTP Request Builder
Build requests, export cURL/fetch/Python/PHP.
Side Dishes
🛡 HTTP Security Headers Grader
Grade headers A+ to F. Missing CSP? Cold noodles.
House Specials
📜 HTTP Status Codes
Complete searchable status code reference.
Side Dishes
🔒 Hash Toolkit
Generate, verify, identify hashes (MD5, SHA, bcrypt, more).
Crypto Gyoza
🔨 Hashcat Rule & Mask Builder
Compose Hashcat masks and rules with keyspace estimates.
Pentester Platter
📅 ICS Calendar Generator
Create .ics events for Calendar / Google / Outlook.
Dessert Menu
🛡 IOC Defanger
Defang malicious indicators for safe sharing.
Spicy Bowls
🔭 IOC Pivoting Tool
Pivot across IOCs, incidents, systems. CSV or STIX 2.1 export.
Spicy Bowls
📍 IP Geolocation & Privacy
Geolocate IPs, detect VPN/proxy, browser fingerprint.
Noodle Network
🌐 IP Info
Analyze IPv4/IPv6 with binary representation, range detection.
Noodle Network
📖 ISO 27001 SoA Builder
Build SoA across 93 Annex A:2022 controls.
Bento Box
📝 Incident Report Generator
NIS2 / DORA / GDPR incident report templates with deadlines.
Spicy Bowls
🕔 Incident Timeline Builder
Build incident timelines from logs with annotations.
Spicy Bowls
🗃 JSON / YAML / PHP Formatter
Validate, format, convert between JSON / YAML / PHP.
Side Dishes
🔓 JWT Decoder
Decode and analyze JSON Web Tokens.
Crypto Gyoza
🤖 LLM Pre-flight Redactor
Scan and redact text before pasting into LLMs.
Robo Ramen
🤖 LLM Red Team Checklist
60-item LLM red-team checklist across 6 phases.
Robo Ramen
🤖 LLM System-Prompt Linter
Lint system prompts for foot-guns and leaks.
Robo Ramen
🤖 LLM Token Cost Estimator
Approximate tokens and cost across LLM providers.
Robo Ramen
💻 LOLBin Browser
Offline searchable LOLBin / GTFOBins reference.
Pentester Platter
🔗 Link Extractor
Extract links from a webpage with filtering.
Side Dishes
🕵 LinkedIn Exposure Audit
Score LinkedIn exposure from an attacker perspective.
Pentester Platter
🤖 Local-Model VRAM Calculator
GPU memory estimates for local LLMs with quant tweaks.
Robo Ramen
🔎 Log Parser Builder
Build Grok / named-capture regex against log lines.
Spicy Bowls
Log Redactor
Anonymize IPs, emails, tokens in logs before sharing.
Spicy Bowls
📝 Lorem Ipsum Generator
Placeholder text for design mockups.
Dessert Menu
🖥 MAC Address Lookup
Look up MAC vendor/manufacturer from OUI database.
Noodle Network
📄 MIME Type Lookup
Look up MIME types by file extension.
Side Dishes
🤖 MITRE ATLAS Search
Offline search across MITRE ATLAS for AI/ML attacks.
Robo Ramen
🔭 MITRE ATT&CK Search
Search the ATT&CK matrix like a menu.
Spicy Bowls
📝 Markdown Preview
Write Markdown with live preview and export.
Side Dishes
🌐 Meeting Timezone Converter
Convert meeting times across timezones with .ics export.
Dessert Menu
🚫 Metadata Stripper
Remove EXIF/metadata from images before sharing.
Side Dishes
🔄 Mod_Rewrite Tester
Test Apache mod_rewrite rules and see transformations.
Side Dishes
📢 NATO Phonetic Converter
Convert text/hex/UUIDs to NATO phonetic alphabet.
Dessert Menu
📋 NIS2 Self-Assessment
Self-assess NIS2 scope and Article 21 measures.
Bento Box
🤖 NIST AI RMF Checker
Self-assess NIST AI RMF (Govern/Map/Measure/Manage).
Robo Ramen
📊 NIST CSF 2.0 Profile Builder
Build CSF 2.0 Current and Target Profile across 106 subcats.
Bento Box
📋 NIST CSF 2.0 Tier Assessment
Self-assess your CSF 2.0 Implementation Tier.
Bento Box
🔍 Nmap XML Parser
Parse Nmap -oX into a clean filterable HTML report.
Pentester Platter
🤖 OWASP LLM Top 10 Checker
Self-assess OWASP LLM Top 10 (v1.1).
Robo Ramen
🔑 PGP Key Inspector
Inspect OpenPGP public keys: algos, fingerprint, UIDs.
Crypto Gyoza
🔍 PGP Key Lookup
Find PGP keys by email/fingerprint/key ID via keyservers.
Crypto Gyoza
🔐 Password Hash Verifier
Verify passwords against bcrypt/Argon2, identify algo.
Crypto Gyoza
🔐 Password Policy Tester
Score policies against NIST 800-63B / NCSC / CIS.
Crypto Gyoza
🔐 Password Security Suite
Generate strong passwords with entropy analysis and bcrypt.
Crypto Gyoza
🛡 Phishing Checker
Sniff out suspicious URLs. Typosquatting detection included.
House Specials
🔌 Port Lookup
Port info, security status, common usage.
Noodle Network
🤖 Prompt Injection Playground
Learn prompt injection via 8 simulated scenarios.
Robo Ramen
QR Code Generator
Generate QR codes for URLs, WiFi, contacts.
Dessert Menu
📷 QR Code Scanner
Decode QR codes with URL defanging for SOC sharing.
Dessert Menu
🔍 Recon / OSINT Helper
Pivot links to 25+ OSINT services from a domain/IP.
Pentester Platter
🔎 Regex Tester
Test regex with highlighting and ReDoS protection.
Side Dishes
💙 Resource Health Checker
Parse uptime/free/df/top output for CPU/RAM/disk health.
Noodle Network
🐺 Reverse Shell Generator
Templated reverse/bind shells for authorized testing.
Pentester Platter
📊 Risk Matrix Builder
3x3 or 5x5 risk heatmaps, PNG/CSV/JSON export.
Bento Box
🤖 Robots.txt Analyzer
Parse robots.txt with URL testing and validation.
Side Dishes
📊 SOC Sizing & Cost
SIEM sizing, storage, 3-year TCO across SIEMs.
Bento Box
🗂 SQL Formatter
Format and minify SQL with syntax highlighting.
Side Dishes
🧬 SRI Hash Generator
Generate Subresource Integrity hashes for assets.
Side Dishes
🔑 SSH Key Analyzer
Generate Ed25519/RSA, analyze pub keys with fingerprint.
Crypto Gyoza
🔒 SSL Certificate Checker
Trust score, expiration alerts, legitimacy indicators.
House Specials
🌲 SSVC Decision Tree
CISA SSVC to Track / Attend / Act with rationale.
Spicy Specials
🔭 STIX 2.1 Formatter
Convert IOC lists into STIX 2.1 bundles.
Spicy Bowls
📰 Security Feeds (RSS)
Aggregated security news, CVEs, threat intel from 40+ sources.
Side Dishes
🔍 Server Config Validator
Validate Apache/Nginx config with best-practice checks.
Side Dishes
📜 Sigma Rule Builder
Visual builder with Splunk / QRadar / Sentinel export.
Spicy Bowls
🔡 String Case Converter
camelCase, snake_case, kebab-case, slug.
Side Dishes
🎭 Subdomain Takeover Checker
Find dangling CNAMEs vulnerable to takeover — matches 20+ services + fingerprints.
Noodle Network
📜 Sysmon Config Builder
Visually compose Sysmon rules and export valid XML.
Spicy Bowls
🔐 TOTP Generator
Generate / verify RFC 6238 TOTPs with provisioning URI.
Crypto Gyoza
📚 Tabletop Exercise Generator
Ready-to-run IR tabletop scenarios with injects.
Spicy Bowls
🎲 Test Data Generator
Realistic random test data: emails, IPs, domains.
Dessert Menu
🧹 Text Cleaner & Normalizer
Strip HTML, remove diacritics, normalize whitespace.
Side Dishes
📊 Text Statistics
Word count, readability, keyword density.
Side Dishes
📅 Timestamp Converter
Convert Unix timestamps with timezone support.
Dessert Menu
🔗 URL Parser
Parse URLs, encode/decode, build URLs.
Side Dishes
📸 USB Hygiene Helper
Analyze USB device lists for BadUSB / unknown vendors.
Pentester Platter
🔑 UUID Generator
Generate/validate UUIDs (v1, v4) with bulk support.
Dessert Menu
🔒 Unix Permissions Calculator
Calculate Unix file permissions visually.
Dessert Menu
🖥 User Agent Parser
Parse UA strings: browser, OS, device.
Side Dishes
📝 Vendor Risk Questionnaire
Build third-party security questionnaires.
Bento Box
🔍 WHOIS Lookup
Look up domain registration via RDAP.
Noodle Network
🔭 Windows Event ID Lookup
Offline reference for Security / System / Sysmon event IDs.
Spicy Bowls
🔭 YARA Rule Builder
Visually build YARA rules with live preview and tester.
Spicy Bowls
🛡 security.txt Generator
Generate RFC 9116 vulnerability disclosure files.
House Specials