🔍 Search Tools

Search 135 free security tools by name, tag, or what you’re trying to do. Most run entirely in your browser; 23 use our server for some or all features.

All tools (A–Z)
⚙ .htaccess Generator
Create Apache .htaccess with security/caching/rewrite rules.
Web & Domain Security
🔒 AES-GCM Encrypt / Decrypt
Encrypt/decrypt with AES-256-GCM (Web Crypto API).
Crypto, Keys & Passwords
📚 AI / LLM Vocabulary
Plain-language glossary of 100+ AI / LLM terms.
AI Security
⚠ AI/ML Threat Model Builder
Wizard threat model for AI/ML systems (STRIDE+ATLAS+OWASP).
AI Security
🔢 ASCII Banner Generator
Generate ASCII art text banners.
Everyday Utilities & Generators
🔥 Actionable CVEs Dashboard
What to patch today: fresh CISA KEV entries + highest-EPSS CVEs.
Vulnerability Management
📉 BIA / RTO-RPO Calculator
Run a BIA, derive RTO/RPO, flag SPOFs.
GRC & Compliance
🔢 Binary/Hex/Decimal Calculator & ASCII Table
Convert bin/oct/dec/hex with arithmetic, plus a searchable ASCII table.
Crypto, Keys & Passwords
🕵 Browser Fingerprint Inspector
See what any website can read about your browser without asking, and how to reduce it.
Web & Domain Security
🥣 Bucket Exposure Checker
Public bucket, public shame. Exists, listable, readable, or takeover bait.
Cloud Security
🔒 CAA & HSTS Preload Checker
Check CAA records and HSTS preload eligibility for any domain.
Web & Domain Security
🌐 CIDR Calculator
Calculate IP ranges, subnets, masks.
Network & DNS
🛡 CSP Builder
Build CSP headers visually with presets.
Web & Domain Security
🔒 CSR Generator & Decoder
Generate RSA/ECDSA CSRs in-browser; decode existing CSRs.
Crypto, Keys & Passwords
📊 CSV Converter
Parse CSV/TSV, convert to JSON/SQL/HTML/Markdown.
Formatters & Converters
🧩 CVE / CPE Search Builder
Compose CPE 2.3 names and search NVD / MITRE / OSV / KEV.
Vulnerability Management
🛡 CVSS Calculator (v4.0 & v3.1)
Score vulns with the official CVSS v4.0 or v3.1 method.
Vulnerability Management
🔒 Certificate Decoder
Decode SSL/TLS certs to view subject, issuer, validity, extensions.
Web & Domain Security
🕵 Cipher Decoder
Decode 80+ classical ciphers and encodings with auto-detection, then triage the plaintext for URLs, handles, coordinates, hashes and CTF flags.
Crypto, Keys & Passwords
🎨 Color Converter
HEX, RGB, HSL, CMYK with WCAG contrast checker.
Formatters & Converters
📜 Compliance Reference Database
Searchable database of 1200+ compliance specs, incl. GDPR ↔ Swiss FADP map.
GRC & Compliance
🥤 Container Manifest Linter
Lint Dockerfiles and Kubernetes manifests for security issues.
Cloud Security
📖 Control Mapper
Cross-reference NIST CSF 2.0 to ISO 27001 / DORA.
GRC & Compliance
🍪 Cookie Security Analyzer
See what each cookie a site stored is for, and check Set-Cookie flags.
Web & Domain Security
⏰ Cron Parser
Parse cron expressions, see next run times.
Everyday Utilities & Generators
📧 DMARC Report Analyzer
Turn DMARC aggregate (RUA) XML into a readable pass/fail-by-source view.
Email & Phishing
🌐 DNS Mapper
Map DNS infra with visual graphs and subdomain discovery.
Network & DNS
📡 DNS Record Lookup
A, AAAA, MX, TXT, NS, CNAME, SOA records with TTL.
Network & DNS
📜 DORA Compliance Checker
DORA self-assessment with CSSF specifics, gap export.
GRC & Compliance
📒 DORA Register of Information
Compile DORA ICT third-party register, completeness checks.
GRC & Compliance
📦 Dependency Scanner
Scan package.json / requirements.txt / composer.json for CVEs.
Vulnerability Management
📋 Diff Tool
Compare texts with side-by-side and unified diff.
Formatters & Converters
🔐 Document Watermark
Watermark ID cards, payslips & PDFs before sending. 100% in-browser.
Web, HTTP & Files
🌐 Domain Availability
Check domain availability across TLDs using RDAP.
Network & DNS
🛡 Domain Security Posture Scanner
One domain → a graded report: security.txt, DMARC, SPF, MTA-STS, CAA, DNSSEC, HSTS.
Web & Domain Security
📊 EPSS Score Lookup
FIRST EPSS exploit-prediction score with CISA KEV cross-check.
Vulnerability Management
⚖ EU AI Act Readiness Checker
EU AI Act self-assessment (Reg 2024/1689).
AI Security
📷 EXIF Analyzer
View EXIF/GPS metadata in an image, or strip metadata from images, PDFs and Office files before sharing.
Web, HTTP & Files
📧 Email Auth Record Builder
Generate valid SPF, DKIM, and DMARC DNS records with guardrails.
Email & Phishing
📧 Email Header Analyzer
Dissect headers layer by layer. SPF/DKIM/DMARC — the holy trinity.
Email & Phishing
📧 Email Security Checker
SPF, DKIM, DMARC at a glance. Holy trinity of email security.
Email & Phishing
🔢 Encoding Toolkit
Encode / decode / detect: Hex, URL, HTML, Unicode, Base64.
Crypto, Keys & Passwords
🍳 Encrypted Link Sharing
Share a password or token as a link that only decrypts in the browser.
Everyday Utilities & Generators
🎨 Favicon Generator
Favicons from text, emojis, or solid colors.
Web, HTTP & Files
🏷 File Signature Identifier & MIME Types
Identify file formats by magic numbers (95 signatures), name the exact format inside ZIP, PE and media containers, flag renamed files, and look up MIME types by extension.
Incident Response & Threat Intel
🧱 Firewall Rule Analyzer
Find shadowed and permissive iptables/UFW/nftables rules.
Network & DNS
📝 GDPR Request Generator
Write a GDPR access, erasure, rectification, portability or objection request in EN, FR or DE.
GRC & Compliance
🔑 HMAC Generator
Compute/verify HMAC signatures (SHA-1/256/384/512).
Crypto, Keys & Passwords
🚀 HTTP Request Builder
Build requests, export cURL/fetch/Python/PHP.
Web, HTTP & Files
🛡 HTTP Security Headers Grader
Grade headers A+ to F, with a fix for each missing one.
Web & Domain Security
📜 HTTP Status Codes
Complete searchable status code reference.
Web, HTTP & Files
🔒 Hash Toolkit
Generate, verify, identify hashes (MD5, SHA, bcrypt, more).
Crypto, Keys & Passwords
🍣 IAM Policy Analyzer
Grade AWS, Azure and GCP policies; flags *:* and other over-broad grants.
Cloud Security
📅 ICS Calendar Generator
Create .ics events for Calendar / Google / Outlook.
Everyday Utilities & Generators
🛡 IOC Defanger
Defang malicious indicators for safe sharing.
Incident Response & Threat Intel
🔭 IOC Pivoting Tool
Classify an indicator and jump straight to it in VirusTotal, Shodan, AbuseIPDB, URLhaus, crt.sh, NVD and more.
Incident Response & Threat Intel
📍 IP Geolocation & Privacy
Geolocate IPs, detect VPN/proxy, browser fingerprint.
Network & DNS
🌐 IP Info
Analyze IPv4/IPv6 with binary representation, range detection.
Network & DNS
📖 ISO 27001 SoA Builder
Build SoA across 93 Annex A:2022 controls.
GRC & Compliance
📝 Incident Report Generator
NIS2 / DORA / GDPR incident report templates with deadlines.
Incident Response & Threat Intel
🕔 Incident Timeline Builder
Build incident timelines from logs with annotations.
Incident Response & Threat Intel
🗃 JSON / YAML / PHP Formatter
Validate, format, convert between JSON / YAML / PHP.
Formatters & Converters
🔓 JWT Decoder
Decode and analyze JSON Web Tokens.
Crypto, Keys & Passwords
🧪 LLM Output Scanner
Check an LLM's answer for reproduced PII, credentials and unverified citations.
AI Security
🙈 LLM Pre-flight Redactor
Scan and redact text before pasting into LLMs.
AI Security
📐 LLM System-Prompt Linter
Lint system prompts for foot-guns and leaks.
AI Security
💰 LLM Token Cost, Context-Window & VRAM
Approximate tokens, cost, context-window fit and local-model GPU VRAM across LLMs.
AI Security
🕵 LinkedIn Exposure Audit
Score LinkedIn exposure from an attacker perspective.
Web & Domain Security
🔎 Log Parser Builder
Build Grok / named-capture regex against log lines.
Detection & SOC
✂ Log Redactor
Anonymize IPs, emails, tokens in logs before sharing.
Incident Response & Threat Intel
🖥 MAC Address Lookup
Look up MAC vendor/manufacturer from OUI database.
Network & DNS
🧭 MITRE ATLAS Search
Offline search across MITRE ATLAS for AI/ML attacks.
AI Security
🔭 MITRE ATT&CK Search
Search the ATT&CK matrix by tactic, technique or ID.
Detection & SOC
📝 Markdown Preview
Write Markdown with live preview and export.
Formatters & Converters
🌐 Meeting Timezone Converter
Convert meeting times across timezones with .ics export.
Everyday Utilities & Generators
🔄 Mod_Rewrite Tester
Test Apache mod_rewrite rules and see transformations.
Web & Domain Security
📢 NATO Phonetic Converter
Convert text/hex/UUIDs to NATO phonetic alphabet.
Everyday Utilities & Generators
📋 NIS2 Self-Assessment
Self-assess NIS2 scope and Article 21 measures.
GRC & Compliance
🏛 NIST AI RMF Checker
Self-assess NIST AI RMF (Govern/Map/Measure/Manage).
AI Security
📊 NIST CSF 2.0 Profile Builder
Build CSF 2.0 Current and Target Profile across 106 subcats.
GRC & Compliance
📋 NIST CSF 2.0 Tier Assessment
Self-assess your CSF 2.0 Implementation Tier.
GRC & Compliance
🔀 Network Flow Matrix
Map authorized flows between zones and check policy.
Network & DNS
🗺 Nmap XML Parser
Parse Nmap -oX into a clean filterable HTML report.
Network & DNS
🔟 OWASP LLM Top 10 Checker
Self-assess OWASP LLM Top 10 (v1.1).
AI Security
📄 PDF Scanner
Scan a suspicious PDF in a sandbox: antivirus, hidden links, scripts, embedded programs, safe preview.
Email & Phishing
🗝 PGP Key Lookup & Inspector
Find PGP keys by email/fingerprint, or decode a pasted key.
Crypto, Keys & Passwords
📑 Page Content Audit & Link Extractor
Content, links, social profiles, media, design and hidden-text detection for any page, plus a filterable, exportable list of every link.
Web, HTTP & Files
🔐 Password Hash Verifier
Verify passwords against bcrypt/Argon2, identify algo.
Crypto, Keys & Passwords
🔐 Password Policy Tester
Score policies against NIST 800-63B / NCSC / CIS.
Crypto, Keys & Passwords
🔐 Password Security Suite
Generate strong passwords with entropy analysis and bcrypt.
Crypto, Keys & Passwords
🛡 Phishing Checker
Sniff out suspicious URLs. Typosquatting detection included.
Email & Phishing
📜 Policy Document Generator
Draft eight security policies mapped to ISO 27001, NIS2, DORA, GDPR, PCI DSS.
GRC & Compliance
🔌 Port Lookup
Port info, security status, common usage.
Network & DNS
💉 Prompt Injection Playground
Learn prompt injection via 8 simulated scenarios.
AI Security
▦ QR Code Generator & Scanner
Generate QR codes, or scan one with a defanged copy of its URL.
Everyday Utilities & Generators
🧮 QRadar AQL Assistant
Build, validate and explain QRadar AQL queries.
Detection & SOC
👥 RACI Matrix Builder
RACI / RASCI matrix with one-Accountable validation, MD/CSV/JSON export.
GRC & Compliance
🔎 Regex Tester
Test regex with highlighting and ReDoS protection.
Formatters & Converters
💙 Resource Health Checker
Parse uptime/free/df/top output for CPU/RAM/disk health.
Network & DNS
📊 Risk Matrix Builder
3x3 or 5x5 risk heatmaps, PNG/CSV/JSON export.
GRC & Compliance
🕷 Robots.txt Analyzer
Parse robots.txt with URL testing and validation.
Web & Domain Security
📚 SIEM Query Template Library
Hunting queries for Splunk, Sentinel and QRadar.
Detection & SOC
🚨 SOC Alert Triage
Walk an alert to a disposition with next queries.
Detection & SOC
📊 SOC Sizing & Cost
SIEM sizing, storage, 3-year TCO across SIEMs.
Detection & SOC
🗂 SQL Formatter
Format and minify SQL with syntax highlighting.
Formatters & Converters
🧬 SRI Hash Generator
Generate Subresource Integrity hashes for assets.
Web & Domain Security
🔑 SSH Key Analyzer
Generate Ed25519/RSA, analyze pub keys with fingerprint.
Crypto, Keys & Passwords
🔒 SSL Certificate Checker
Trust score, expiration alerts, legitimacy indicators.
Web & Domain Security
🌲 SSVC Decision Tree
CISA SSVC to Track / Attend / Act with rationale.
Vulnerability Management
🔭 STIX 2.1 Formatter
Convert IOC lists into STIX 2.1 bundles.
Incident Response & Threat Intel
✉ SecOps Response Templates
100+ security email and ticket templates.
Incident Response & Threat Intel
🔑 Secrets & Credential Leak Scanner
Find and redact leaked API keys, tokens and private keys in pasted text.
Cloud Security
📰 Security Feeds (RSS)
Aggregated security news, CVEs, threat intel from 40+ sources.
Incident Response & Threat Intel
✅ Server Config Validator
Validate Apache/Nginx config with best-practice checks.
Web & Domain Security
📜 Sigma Rule Builder
Visual builder with Splunk / QRadar / Sentinel export.
Detection & SOC
🎭 Subdomain Takeover Checker
Find dangling CNAMEs vulnerable to takeover — matches 20+ services + fingerprints.
Web & Domain Security
🇨🇭 Swiss FADP (nLPD) Self-Assessment
Self-assess the Swiss data protection act, with GDPR overlap flagged.
GRC & Compliance
📜 Sysmon Config Builder
Visually compose Sysmon rules and export valid XML.
Detection & SOC
🔐 TOTP Generator
Generate / verify RFC 6238 TOTPs with provisioning URI.
Crypto, Keys & Passwords
📚 Tabletop Exercise Generator
Ready-to-run IR tabletop scenarios with injects.
Incident Response & Threat Intel
🎲 Test Data & Lorem Ipsum Generator
Realistic random test data (emails, IPs, domains) and lorem ipsum text.
Everyday Utilities & Generators
🔤 Text Toolkit
Case convert, clean & normalize, and analyze text in one.
Formatters & Converters
🍽 Third-Party Risk Register
Track ICT vendors: tier, status, review dates, findings.
GRC & Compliance
📅 Timestamp Converter
Convert Unix timestamps with timezone support.
Everyday Utilities & Generators
🧹 Tracking Link Cleaner
Remove utm tags, fbclid, gclid and other tracking from links, and unwrap Google, Facebook and Outlook redirects.
Web & Domain Security
🔗 URL Parser
Parse URLs, encode/decode, build URLs.
Web, HTTP & Files
🔌 USB Hygiene Helper
Check lsusb or Windows device lists for input + storage devices and unlisted vendors.
Incident Response & Threat Intel
🔑 UUID Generator
Generate/validate UUIDs (v1, v4) with bulk support.
Everyday Utilities & Generators
🔒 Unix Permissions Calculator
Calculate Unix file permissions visually.
Everyday Utilities & Generators
🖥 User Agent Parser
Parse UA strings: browser, OS, device.
Web, HTTP & Files
📝 Vendor Risk Questionnaire
Build third-party security questionnaires.
GRC & Compliance
📇 WHOIS Lookup
Look up domain registration via RDAP.
Network & DNS
🔭 Windows Event ID Lookup
Offline reference for Security / System / Sysmon event IDs.
Detection & SOC
🔭 YARA Rule Builder
Visually build YARA rules with live preview and tester.
Detection & SOC
🛡 security.txt Generator
Generate RFC 9116 vulnerability disclosure files.
Web & Domain Security