Free Online Cybersecurity Suite
Cryptographic hashes, strong passwords, AES & RSA encryption, JWT verification, CVSS vulnerability scoring, and OWASP audits. Fast, secure, and executed client-side.
Password Strength Checker
Test password entropy, crack time estimation, dictionary vulnerability, and NIST 800-63B compliance.
Strong Password Generator
Generate cryptographically secure, high-entropy passwords with custom character sets and symbols.
Passphrase Generator
Create memorable yet uncrackable multi-word Diceware passphrases with custom separators.
Password Hash Generator
Calculate salted cryptographic hashes (SHA-256, SHA-512, MD5) for backend password storage.
Bcrypt Hash Generator & Verifier
Generate and test blowfish-based Bcrypt hashes ($2a$, $2b$, $2y$) with adjustable work factor rounds.
OTP Generator
Generate secure numeric and alphanumeric One-Time Passwords with customizable expiration windows.
TOTP Authenticator Generator
Calculate live 30-second 2FA codes from RFC 6238 Base32 secrets compatible with Google Authenticator.
QR Code Generator for OTP
Generate standard otpauth:// QR codes to quickly pair accounts with mobile authenticator apps.
Cookie Security Checker
Audit Set-Cookie headers for Secure, HttpOnly, SameSite, and domain scope security attributes.
Secret & Token Generator
Generate cryptographic secrets, session salts, and high-entropy hex/base64 tokens for environment variables.
SHA-256 / SHA-512 Hash Generator
Calculate NIST FIPS 180-4 SHA-256 and SHA-512 cryptographic digests for strings and files.
MD5 Hash Generator
Compute 128-bit MD5 checksums for legacy verification, database keys, and file integrity.
HMAC Generator
Compute Hash-based Message Authentication Codes using secret keys and SHA-256, SHA-512, or SHA-1.
Hash Identifier
Analyze unknown hash strings to identify candidate algorithms (MD5, SHA-1, SHA-256, Bcrypt, NTLM, etc.).
File Hash & Checksum Verifier
Calculate and verify MD5, SHA-1, and SHA-256 file checksums locally to detect corrupted or tampered downloads.
AES Encrypt / Decrypt Tool
Encrypt and decrypt confidential data using military-grade AES-GCM (256-bit) with custom passphrases.
RSA Key Pair Generator
Generate 2048-bit and 4096-bit asymmetric RSA public and private key pairs in standard PEM format.
RSA Encrypt / Decrypt
Encrypt secrets with an RSA public key and decrypt messages using the matching RSA private key (OAEP).
PGP Key Generator
Generate OpenPGP-compatible public and private armor keys with user identity and passphrase protection.
PGP Encrypt / Decrypt
Encrypt and decrypt PGP armored messages (-----BEGIN PGP MESSAGE-----) using public or private keys.
Secure Text Encryptor
Encrypt notes, passwords, and sensitive text into encrypted cipher text with client-side zero knowledge.
Secure File Encryptor
Encrypt documents, PDFs, and images into password-protected .enc files directly in your browser.
JWT Decoder & Inspector
Inspect, decode, and pretty-print JSON Web Token headers, claims, expiration dates, and payloads.
JWT Generator
Construct and sign mock or test JSON Web Tokens with custom payloads, claims, and HMAC secrets.
JWT Validator & Signature Checker
Validate token signatures, expiration timestamps, issued-at timing, and algorithm compliance.
Base64 Encoder / Decoder
Encode plaintext to Base64/Base64URL and decode Base64 data back to readable UTF-8 strings.
URL Encoder / Decoder
Percent-encode special URI query parameters and decode %20, %2F sequences into clean URLs.
HTML Entity Encoder / Decoder
Escape dangerous HTML characters (<, >, &, ", ') into safe HTML entities to prevent XSS injection.
UUID Generator (v4 & v7)
Generate RFC 4122 v4 random UUIDs and time-ordered v7 UUIDs individually or in bulk.
API Key Generator
Generate formatted API credentials, bearer tokens, and client secrets with custom prefixes (sk_live_, pk_test_).
SSL Certificate & Expiry Checker
Inspect SSL/TLS certificate validity, expiration date, issuer CA, SAN domains, and days remaining.
TLS Configuration Checker
Evaluate supported TLS versions (TLS 1.2, TLS 1.3), cipher suites, and obsolete protocol risks.
HTTPS & Redirect Chain Checker
Trace HTTP to HTTPS redirects, detect insecure mixed-content hops, and verify 301 permanent rules.
Security Headers Inspector
Scan web servers for critical headers: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.
HTTP Header Analyzer
Inspect raw response headers, caching directives, server signatures, and potential information leaks.
CSP (Content Security Policy) Generator
Visual rule builder to create robust Content-Security-Policy headers restricting script, style, and media sources.
CSP Policy Validator
Audit existing Content Security Policy strings for unsafe-inline, wildcard (*), and bypass vulnerabilities.
CORS Configuration Tester
Test Cross-Origin Resource Sharing (CORS) headers and verify Access-Control-Allow-Origin configurations.
HSTS Header Generator
Generate strict HTTP Strict Transport Security (HSTS) headers with max-age, includeSubDomains, and preload flags.
X-Frame-Options & Clickjacking Generator
Generate X-Frame-Options (DENY / SAMEORIGIN) and frame-ancestors rules to prevent clickjacking attacks.
Referrer & Permissions Policy Generator
Configure Referrer-Policy and modern Permissions-Policy headers to protect user privacy and disable camera/mic APIs.
Domain WHOIS Lookup
Look up domain registrar, creation date, expiration timestamp, nameservers, and registration status.
DNS Records Lookup
Query authoritative DNS records: A, AAAA, CNAME, MX, TXT, NS, SOA, and PTR records instantly.
DNS Propagation Checker
Check global DNS record resolution across global nodes (North America, Europe, Asia, Australia).
DNSSEC Validation Checker
Verify Domain Name System Security Extensions (DNSSEC) chain of trust, DS keys, and DNSKEY records.
SPF Record Checker
Inspect Sender Policy Framework (SPF) records to prevent email spoofing and verify authorized IP mechanisms.
DKIM Record Checker
Query domain DKIM selector records and verify public key length and signature parameters.
DMARC Policy Checker
Analyze _dmarc TXT records, policy enforcement (none, quarantine, reject), and reporting mailboxes.
Email Header Analyzer
Parse raw RFC 822 email headers to trace message routing hops, spam scores, and SPF/DKIM/DMARC verdicts.
Disposable & Temporary Email Checker
Check if an email address or domain belongs to a disposable, 10-minute mail, or throwaway inbox provider.
IP Address Geolocation & ASN Lookup
Lookup public IPv4/IPv6 country, city, ISP organization, Autonomous System Number (ASN), and coordinates.
IP Address & Subnet Validator
Validate IPv4 / IPv6 addresses, calculate CIDR subnet ranges, broadcast addresses, and usable host counts.
IP Reputation & Blacklist Checker
Check IP address reputation against major spam, malware, and DNSBL blacklist databases.
VPN, Proxy & TOR Exit Node Detector
Detect whether an IP belongs to a commercial VPN provider, public proxy server, or TOR exit node.
Port Scanner & Service Checker
Inspect common web and server ports (80, 443, 21, 22, 25, 8080) for reachability and exposed services.
Ping & Latency Test
Test server response time, round-trip packet latency, and network availability from multiple locations.
Website & URL Malware Scanner
Scan website URLs against malware feeds, defacement databases, cryptominers, and malicious scripts.
Phishing & Safe Browsing URL Checker
Detect deceptive homograph spoofing, lookalike domains, and reported phishing landing pages.
Short Link Expander & Destination Checker
Unshorten bit.ly, t.co, and tinyurl links to reveal final destination URLs and tracking parameters safely.
Website Uptime & Health Monitor
Verify server status, HTTP status codes (200 OK, 500 Error), SSL handshake, and uptime response times.
Reverse DNS & Hostname Lookup
Resolve IP addresses to associated PTR hostnames and verify Forward-Confirmed Reverse DNS (FCrDNS).
MAC Address & OUI Vendor Lookup
Identify hardware device manufacturers and Organizationally Unique Identifiers (OUI) from MAC addresses.
User Agent & Client Parser
Parse client browser, operating system version, rendering engine, device model, and bot crawler identity.
Browser Fingerprint & Entropy Checker
Inspect browser uniqueness: Canvas hash, WebGL vendor, AudioContext, screen color depth, and tracking resistance.
SQL Query Escaper & Injection Preventer
Escape raw SQL input values and convert dynamic queries to secure parameterized prepared statements.
XSS Sanitization Tester & Payload Encoder
Test how HTML sanitizers and filters handle dangerous event handlers (onerror, onload) and script injection.
HTML Sanitizer & DOM Purifier
Purify untrusted user-submitted HTML to strip malicious tags (<script>, <iframe>, <object>) and dangerous attributes.
JavaScript Code Obfuscator
Protect client-side JS logic with variable renaming, hex string encoding, dead code injection, and control flow flattening.
JavaScript Deobfuscator & Formatter
Unpack eval packers, decode hex strings, beautify minified scripts, and deobfuscate suspicious scripts for analysis.
Client-Side Code Security Scanner
Scan source code snippets for hardcoded API keys, dangerous eval(), SQL injection concats, and insecure regexes.
Dependency & Package Vulnerability Checker
Audit package.json, composer.json, or requirements.txt for known CVE vulnerabilities and outdated libraries.
Dockerfile Security Linter
Lint Dockerfiles against CIS benchmarks: root user execution, sensitive file mounts, and unpinned base images.
Secret & API Key Scanner
Scan text, configs, Git commits, and codebases to detect leaked AWS keys, Stripe tokens, private keys, and passwords.
.env Security & Exposure Checker
Audit .env files for insecure default secrets, production debug flags, unencrypted passwords, and exposure risks.
File Permission (Chmod) Calculator & Checker
Calculate and audit Unix/Linux file permissions (755, 644, 400, 777) and identify dangerous write privileges.
Security & Access Log Analyzer
Parse Apache, Nginx, and cloud access logs to detect brute-force attacks, 404 scanning spikes, and top offending IPs.
Security Incident Report Generator
Draft professional cybersecurity incident response reports with timeline, impact, root cause, and remediation.
CVE Vulnerability Lookup
Search and inspect Common Vulnerabilities and Exposures (CVE) records, descriptions, and severity scores.
CVSS v3.1 Score Calculator
Calculate official Common Vulnerability Scoring System (CVSS v3.1) Base, Temporal, and Environmental scores.
OWASP Top 10 Security Checklist
Interactive security audit checklist covering Broken Access Control, Injection, Cryptographic Failures, and SSRF.
Information Security Policy Generator
Generate standard Information Security Policy (InfoSec) documents for startups, SOC 2, and ISO 27001 prep.
Privacy Policy Generator
Generate compliant Privacy Policy documents covering GDPR, CCPA, cookies, and data retention policies.
Terms and Conditions Generator
Draft comprehensive Terms of Service (ToS) agreements protecting intellectual property and limiting liability.