Security Tools | CyberRamen.com

CVSS Calculator (v4.0 and v3.1)

Official CVSS v4.0 and v3.1 vulnerability scoring (v3.1 tab: Base, Temporal, Environmental) with Base, Threat, Environmental and Supplemental metrics. Real-time scoring, vector string parsing and URL sharing. 100% client-side

🌐

DNS Mapper

Map DNS infrastructure with visual network graphs, subdomain discovery, and ASN lookup

🛡

Phishing Checker

Analyze URLs, domains, and content for phishing indicators and typosquatting

📄

PDF Scanner

Scan a suspicious PDF: antivirus, sandbox analysis of hidden links, JavaScript and embedded programs, safe page preview

📧

Email Header Analyzer

Analyze email headers for phishing indicators, spoofing, and security threats

🔒

Hash Toolkit

Generate, verify, and identify cryptographic hashes (MD5, SHA-256, SHA-512, bcrypt, and more)

🌐

CIDR Calculator

Calculate IP ranges, subnets, and network addressing for infrastructure planning

🕵

Cipher Decoder

Decode 80+ classical ciphers and encodings with auto-detection, then triage the plaintext for URLs, social handles, coordinates, wallets, hashes and CTF flags

🛡

IOC Defanger

Safely defang and refang malicious indicators for secure SOC sharing

🔭

IOC Pivoting Tool

Paste an indicator (IP, domain, URL, email, hash or CVE) and get deep-link pivot queries to VirusTotal, Shodan, AbuseIPDB, URLhaus, crt.sh, NVD and more. 100% client-side.

🔓

JWT Decoder

Decode and analyze JSON Web Tokens for security issues and debugging

🔐

Password Security Suite

Generate strong passwords, analyze strength with entropy and cracking time, and hash with bcrypt

🗃

JSON / YAML / PHP Formatter

Validate, format, and convert between JSON, YAML, and PHP array syntax with syntax highlighting and tree view

🌐

IP Info

Analyze IPv4/IPv6 addresses with binary representation and range detection

📅

Timestamp & Epoch Converter

Convert Unix timestamps to human-readable dates and vice versa, with batch conversion and timezone support

🔎

Regex Tester

Test regular expressions with highlighting, pattern library, and ReDoS protection

🚀

HTTP Request Builder

Build HTTP requests and export as cURL, fetch, Python, PHP, and more

📋

Diff Tool

Compare two texts with side-by-side diff and unified format output

📊

CSV Converter

Parse CSV/TSV data and convert to JSON, SQL, HTML, or Markdown tables

🔢

Encoding Toolkit

Encode, decode, and detect text encodings: Hex, Binary, URL, HTML, Unicode, Base64, and more

▦

QR Code Generator & Scanner

Generate QR codes for URLs, WiFi, contacts, and more with custom colors, or scan a QR code image with a defanged copy of its URL

🎨

Color Converter

Convert colors between HEX, RGB, HSL, CMYK with WCAG contrast checker

📝

Markdown Preview

Write Markdown with live preview and export as HTML or Markdown file

🔤

Text Toolkit

Convert case, clean & normalize, and analyze text (word count, readability) in one tool

⏰

Cron Parser

Parse cron expressions, see next run times, and build schedules visually

🔒

Certificate Decoder

Decode SSL/TLS certificates to view subject, issuer, validity, and extensions

🗂

SQL Formatter

Format, beautify, and minify SQL queries with syntax highlighting

🔒

Unix Permissions Calculator

Calculate Unix/Linux file permissions (chmod) with visual editor

🖥

User Agent Parser

Parse browser user agent strings to extract browser, OS, and device information

🔑

UUID Generator

Generate and validate UUIDs (v1, v4) with bulk generation support

🔗

URL Parser

Parse URLs into components, encode/decode, and build URLs from parts

🖥

MAC Address Lookup

Look up MAC address vendor/manufacturer from OUI database

🕷

Robots.txt Analyzer

Parse and analyze robots.txt files with URL testing and validation

🛡

CSP Builder

Build Content-Security-Policy headers with visual interface and presets

🎨

Favicon Generator

Generate favicons from text, emojis, or solid colors in multiple sizes

⚙

.htaccess Generator

Create Apache .htaccess files with security, caching, and rewrite rules

✅

Server Config Validator

Validate Apache and Nginx configuration syntax with best-practice checks

🔄

Mod_Rewrite Tester

Test Apache mod_rewrite rules and see URL transformations

🔌

Port Lookup

Look up network port information, security status, and common usage

🔢

Binary/Hex/Decimal Calculator & ASCII Table

Convert between number bases with step-by-step explanations and arithmetic, plus a searchable ASCII table

📰

Security Feeds

Aggregated security news, CVEs, and threat intel from 40+ sources (CISA, NVD, CERTs, vendors)

📑

Page Content Audit & Link Extractor

Audit a web page in your browser: content stats, heading hierarchy, internal / external / social links, images without alt, scripts, palette, fonts — and hidden-text detection through the real CSS cascade; or extract every link with filters and export

🔒

SSL Certificate Checker

Analyze SSL/TLS certificates with trust score, expiration alerts, and legitimacy indicators

📢

NATO Phonetic Converter

Convert text, hex, UUIDs, and hashes to NATO phonetic alphabet for clear verbal communication

🌐

Meeting Time Zone Converter

Convert meeting times across timezones with business hours visualization and calendar export

📅

ICS Calendar Generator

Create .ics calendar event files compatible with Apple Calendar, Google Calendar, Outlook, and Thunderbird

📜

HTTP Status Code Reference

Complete searchable reference of HTTP response status codes with descriptions and use cases

📧

Email Security Checker

Check SPF, DKIM, and DMARC records to validate email authentication

📇

WHOIS Lookup

Look up domain registration information using RDAP (registrar, dates, nameservers)

🔢

ASCII Banner Generator

Generate ASCII art text banners for MOTD, scripts, and terminal displays

📍

IP Geolocation & Privacy Checker

Geolocate any IP address, view your browser fingerprint, and detect VPN/proxy usage with privacy analysis

📝

Incident Report Generator

Generate NIS2, DORA, and GDPR incident report templates with regulatory deadlines, severity classification, and markdown export

📜

Compliance Reference Database

Searchable database of 1000+ compliance specifications from NIST 800-53, DORA, GDPR, NIS2, and CRA frameworks

✂

Log Snippet Anonymizer & Redactor

Safely anonymize IPs, emails, JWT tokens, session IDs, and API keys in log snippets before sharing. 100% client-side.

🔑

Secrets & Credential Leak Scanner

Find leaked API keys, tokens, private keys and passwords in pasted code, .env files, CI pipelines, logs or chat exports: AWS, Azure / Entra, GCP, GitHub, GitLab, Atlassian, Slack, Stripe, Terraform Cloud, Hugging Face, JWTs, PEM keys and more. Confidence tiers, example-value filtering, masked findings, one-click redaction. 100% client-side, nothing stored

🕔

Incident Timeline Builder

Build interactive incident timelines from log snippets with automatic timestamp normalization, annotations, and JSON export

📸

USB Hygiene Helper

Analyze USB device lists from lsusb, PowerShell, or CSV exports to identify risky devices like potential BadUSB or unknown vendors

💙

System Resource Health Checker

Paste output from uptime, free, df, top, or PowerShell to get CPU, RAM, disk, and IO health analysis with severity ratings

🌐

Domain Availability Checker

Check if domain names are available across multiple TLDs using RDAP lookups

🔐

TOTP Generator & Verifier

Generate and verify Time-based One-Time Passwords (RFC 6238) with provisioning URI builder

🔑

SSH Key Generator & Analyzer

Generate Ed25519 and RSA SSH key pairs, analyze public keys with fingerprint and security assessment

📡

DNS Record Lookup

Look up A, AAAA, MX, TXT, NS, CNAME, and SOA records for any domain with TTL and export

🎲

Random Test Data & Lorem Ipsum Generator

Generate realistic random test data: emails, usernames, IPs, domains, paths, MACs, UUIDs, and more, plus lorem ipsum placeholder text

🔒

AES-GCM Encrypt & Decrypt

Encrypt and decrypt text with AES-256-GCM using Web Crypto API and PBKDF2 key derivation

🍣

IAM Policy Analyzer

Grade an AWS, Azure or GCP IAM policy A–F: wildcards, privilege-escalation paths, NotAction, missing conditions, public principals, with plain-English fixes and a least-privilege rewrite. 100% client-side.

🥣

Bucket Exposure Checker

Passive, credential-free check of an S3, Cloud Storage or Azure Blob name: exists, listable, readable, or a takeover candidate — with what the provider error codes reveal and the fix per cloud

🥤

Container Manifest Linter

Security-only lint of a Dockerfile or Kubernetes manifest, graded A–F: root, :latest, secrets in layers, privileged pods, host namespaces, hostPath, missing limits — each with a copy-paste fix. 100% client-side.

🛡

HTTP Security Headers Grader

Grade HTTP security headers A+ to F with per-header analysis, scoring, and fix recommendations

📜

DORA Compliance Checker

Interactive DORA self-assessment covering all five pillars with Luxembourg CSSF specifics and exportable gap report

🔭

MITRE ATT&CK Search

Fast offline search across ATT&CK Enterprise techniques with detection guidance and SIEM cross-links

📜

Sigma Rule Builder

Build Sigma detection rules visually with live YAML preview and export to Splunk SPL, QRadar AQL, and Sentinel KQL

📦

Dependency Vulnerability Scanner

Scan package.json, requirements.txt, or composer.json for known CVEs via OSV.dev API

🕵

LinkedIn Exposure Audit

Assess LinkedIn profile exposure risk from an attacker perspective. Score identity leaks, job details, network openness, and posting behavior.

📷

EXIF & Metadata Analyzer

Extract EXIF metadata from images client-side (GPS coordinates, camera info, timestamps, software) for OSINT and forensics, or strip all metadata before sharing. Batch stripping supported. Also removes author, company and other document properties from PDF, Word, Excel and PowerPoint files

🔐

Document Watermark

Stamp a repeated diagonal watermark onto ID cards, payslips, and PDFs before sending them to a landlord, recruiter, or insurer. 100% in-browser — nothing is uploaded. Images + PDF, batch, templates

📊

SOC Sizing & Cost Calculator

Calculate SIEM sizing, storage, and 3-year TCO across Wazuh, Graylog, Splunk, QRadar, Sentinel, and LogRhythm with compliance retention overlay

🛡

security.txt Generator

Generate a compliant /.well-known/security.txt file (RFC 9116) for vulnerability disclosure. Client-side, with validation and PGP key prompts

🔭

YARA Rule Builder & Tester

Visually build YARA detection rules with live preview, validation, and a client-side rule tester for malware hunting

👥

RACI Matrix Builder

Build a RACI / RASCI responsibility-assignment matrix: map tasks to roles, auto-validate the one-Accountable rule, missing Responsible, accountability overload and orphan rows/columns, then export Markdown / CSV / JSON (with JSON re-import). Client-side

📊

Risk Matrix Builder

Plot risks on likelihood-vs-impact heatmaps for ISO 27001, DORA, and NIS2 risk registers. 3x3 or 5x5, export PNG/CSV/JSON

🏷

File Signature Identifier & MIME Types

Identify file formats by their magic numbers (drop a file, browser reads first 64 bytes only, or paste hex; 60+ signatures for DFIR and malware triage) and look up MIME types by extension

📚

Tabletop Exercise Generator

Generate ready-to-run incident response tabletop scenarios (ransomware, BEC, insider, supply chain, DDoS, OT) with injects, discussion questions, and Markdown export

🔐

Password Policy Tester

Score your password policy against NIST SP 800-63B, NCSC, and CIS guidance. Get a graded gap report and ready-to-publish policy text

🔭

STIX 2.1 Indicator Formatter

Convert IOC lists into STIX 2.1 bundles for TAXII, MISP, or OpenCTI sharing. Auto-detects type, refangs, supports TLP markings and kill-chain phases

📖

Control Mapper (CSF / ISO / DORA)

Cross-reference NIST CSF 2.0 outcomes to ISO 27001:2022 Annex A and DORA articles. Search, filter, browse all 106 subcategories, and export the mapping as CSV / JSON / Markdown

📊

NIST CSF 2.0 Profile Builder

Build a NIST CSF 2.0 Current and Target Profile across all 106 subcategories. Score on a 0-4 scale, see gap analysis by Function and Category, export JSON / CSV / Markdown. Source: NIST CSWP 29

📋

NIST CSF 2.0 Tier Self-Assessment

Self-assess your NIST CSF 2.0 Implementation Tier (Partial / Risk Informed / Repeatable / Adaptive) across the Cybersecurity Risk Governance and Risk Management dimensions defined in CSWP 29

📝

Vendor Risk Questionnaire Generator

Build a tailored third-party / supplier security questionnaire from curated banks (governance, cloud, IAM, AppSec, IR, privacy, AI, exit) with regulatory overlays for GDPR, DORA, NIS2, PCI, HIPAA, SOC 2

🍽

Third-Party Risk Register

Browser-local register of your ICT third parties: DORA-style criticality tiering, status, frameworks, review dates with overdue flags, open findings. CSV import/export, encrypted backup, hand-off to the questionnaire generator

📜

Policy Document Generator

Generate eight security policy documents (Information Security, Acceptable Use, Access Control, Incident Response, Third-Party, Data Classification, Business Continuity, Password & Authentication) from one tagged clause library, aligned to ISO 27001, NIS2, DORA, GDPR, PCI DSS. Markdown, wiki text, print. Client-side

📝

GDPR Request Generator

Write a GDPR data subject request (access Art. 15, rectification Art. 16, erasure Art. 17, portability Art. 20, objection Art. 21) in English, French or German, with the Art. 12(3) one-month deadline and the Art. 77 complaint route. Copy, .txt, .pdf or e-mail. Client-side, nothing stored

🔒

CAA & HSTS Preload Checker

Check DNS CAA records (which CAs may issue certs) and HSTS preload eligibility (max-age, includeSubDomains, preload directive) for any domain

🗝

PGP / GPG Key Lookup & Inspector

Find a public OpenPGP key by email, fingerprint, or 16-hex key ID (keys.openpgp.org, WKD, Mailvelope, keyserver.ubuntu.com), or paste an armored key to decode it in your browser: every user ID, alias, subkey, capability, expiry and the key timeline. Refuses private key blocks

🔐

Password Hash Verifier

Verify a password against bcrypt or Argon2 hashes, identify the algorithm, and benchmark cost factors on the server. No logging

🗺

Nmap XML Report Parser

Drop or paste Nmap -oX XML output and get a clean, filterable HTML report with severity hints. Markdown / CSV export. 100% client-side

🧩

CVE / CPE Search Builder

Compose CPE 2.3 names from form fields, validate, and get one-click search links to NVD, MITRE, GitHub Advisories, OSV.dev, Vulners, and CISA KEV

🙈

LLM Pre-flight Redactor

Scan and redact text before pasting into ChatGPT, Claude, Gemini, or Copilot. Detects PII, API keys, secrets, internal hostnames, IBAN, credit cards. 100% client-side

🧪

LLM Output Scanner

Review what a model produced before it goes further: personal data and credentials it reproduced (masked, with a redacted copy) plus every URL, DOI, CVE, RFC, regulatory article, author-year citation and quoted figure as a verification checklist. 100% client-side, nothing stored

💰

LLM Token Counter, Cost, Context & VRAM

Approximate token count for GPT, Claude, Gemini, Llama, DeepSeek, Mistral. Live cost matrix in $/1M tokens, editable pricing, input/output split, volume calculator, a context-window fit check for pasted text or files, and a local-model VRAM sizer (weights + KV cache + activations, fits-on-this-GPU table)

📐

LLM System-Prompt Linter

Lint your system prompt for foot-guns: weak refusals, prompt-injection vulnerabilities, missing role / output anchors, leaked credentials, contradictions

🧭

MITRE ATLAS Technique Search

Offline search across MITRE ATLAS tactics & techniques targeting AI/ML systems (prompt injection, model evasion, data poisoning, model extraction). Detection guidance and mitigations

⚖

EU AI Act Readiness Checker

Walk a self-assessment for the EU AI Act (Regulation 2024/1689): scope, prohibited practices, high-risk Annex III, GPAI thresholds, transparency. Markdown export

📚

AI / LLM Vocabulary

Plain-language glossary of 100+ AI / LLM terms: token, context window, VRAM, RAG, MoE, quantization, RLHF, prompt injection, jailbreak, agent, EU AI Act. Searchable, cross-linked

⚠

AI/ML Threat Model Builder

Wizard-driven threat model generator for AI/ML systems. 5 steps, 27+ threats mapped to STRIDE + MITRE ATLAS + OWASP LLM Top 10. Risk-scored, with control gap analysis. Markdown / JSON export

💉

Prompt Injection Playground

Learn prompt injection by breaking a simulated LLM. 8 scenarios (direct, indirect, persona override, smuggling, jailbreak, multi-turn). 100% client-side pattern-matching engine, no API. Educational use only

🔟

OWASP LLM Top 10 Checker

Self-assessment for the OWASP Top 10 for LLM Applications (v1.1 2024/2025). Score your posture across all 10 risks, identify gaps, and export CSV / JSON / Markdown. 100% client-side

🔭

Windows Event ID Lookup

Offline searchable reference for Security, System, and Sysmon event IDs with logon-type decoding and MITRE ATT&CK cross-links

📜

Sysmon Config Builder

Visually compose Sysmon rules and export valid XML. Include/exclude logic, per-event-type filters, and minimal/balanced/verbose presets

🔎

Log Parser Pattern Builder

Build and test Grok / named-capture regex against a sample log line; export to Logstash, regex, or QRadar extraction syntax

📊

EPSS Score Lookup

Get the FIRST EPSS exploit-prediction score and percentile for a CVE, with CISA KEV cross-check and triage guidance

🔥

Actionable CVEs Dashboard

Today's must-patch CVEs — vulnerabilities newly added to the CISA KEV catalog (actively exploited) enriched with EPSS, plus the highest exploit-probability CVEs right now

🌲

SSVC Decision Tree

Walk CISA's Stakeholder-Specific Vulnerability Categorization to a Track / Attend / Act outcome with exportable rationale

📧

Email Auth Record Builder

Generate valid SPF, DKIM, and DMARC DNS records with guided policy choices and common-mistake warnings

📧

DMARC Report Analyzer

Parse DMARC aggregate (RUA) XML reports into a readable pass/fail-by-source view to spot spoofing and misconfigured senders. 100% client-side

🛡

Domain Security Posture Scanner

Scan one domain and get a graded report across security.txt, DMARC, SPF, MTA-STS, CAA, DNSSEC, and HSTS. Server-side checks, your IP is not forwarded

🎭

Subdomain Takeover Checker

Check hostnames for dangling CNAMEs vulnerable to subdomain takeover, matching 20+ takeover-prone services with fingerprint confirmation. Server-side, IP not forwarded

🔒

CSR Generator & Decoder

Generate a key pair and PKCS#10 CSR in your browser (RSA/ECDSA, SANs), or decode an existing CSR. Private key never leaves your machine

🔑

HMAC Generator

Compute and verify HMAC signatures (SHA-1/256/384/512) for webhook and API signing. Hex or Base64 output, 100% client-side

🧬

SRI Hash Generator

Generate Subresource Integrity hashes (sha256/384/512) and ready-to-paste script/link tags to lock down third-party assets

🍪

Cookie Security Analyzer

See what each cookie a site stored is for (analytics, advertising, login, consent), from the vendor's own documentation, and check Set-Cookie headers for missing Secure/HttpOnly/SameSite, weak prefixes and broad scopes with remediation guidance

🧹

Tracking Link Cleaner

Remove tracking from links before you open or share them: utm campaign tags, fbclid, gclid and other ad click IDs, e-mail campaign IDs and share IDs, and unwrap Google, Facebook, Instagram, YouTube and Outlook Safe Links redirects. Works on a single link or a whole message; never visits the link.

🕵

Browser Fingerprint Inspector

See what any website can read about your browser without asking: user agent, client hints, languages, screen, time zone, hardware, a canvas drawing hash, WebGL strings, device APIs and storage, each explained with how to reduce it. No uniqueness score (no population data). Copy or .json. Client-side, no network requests

📒

DORA Register of Information Builder

Compile the mandatory DORA ICT third-party register across all template tables, with completeness checks and CSV/JSON/Markdown export

📋

NIS2 Self-Assessment

Self-assess NIS2 scope, Article 21 risk-management measures, and reporting obligations with scored gap report and Markdown/CSV/JSON export

🇨🇭

Swiss FADP (nLPD) Self-Assessment

Self-assess the revised Swiss Federal Act on Data Protection (nLPD / revDSG): duty to inform, DPIA, FDPIC breach notification, processing register, disclosure abroad, data protection advisor, data-subject rights — with a scored gap report that says where your GDPR control already covers you. Markdown/CSV/JSON export

📉

Tools Hub