security
Security Tools
Free security tools: a CSP policy builder and hash calculator, a certificate inspector, an HTTP header analyzer, and more.
Use these when you're hardening a site or checking someone else's work: build a Content-Security-Policy and hash its inline scripts, inspect a TLS certificate before trusting it, audit response headers, or reason about password and PIN strength with real numbers. Everything is computed in your browser; the two exceptions are lookups you trigger yourself: the certificate inspector queries public Certificate Transparency logs, and the header analyzer's optional fetch goes through a proxy on this site and is not logged.
7 tools in this category
Certificate Inspector
Decode PEM SSL/TLS certificates or fetch from a URL client-side. Inspect subject, issuer, validity, SANs, key usage, and security assessment.
Category: securityCSP Policy Builder
Build Content Security Policy headers interactively. Toggle directives, see the policy generated live, and get a security rating. Runs client-side.
Category: securityEncrypt-then-MAC Envelope Visualizer
Seal a secret into an encrypt-then-MAC envelope, flip a byte, and watch the read verify the tag before decrypting. Runs client-side.
Category: securityCSP Hash Calculator
Generate SHA-256 hashes for inline scripts. Get ready-to-use CSP directives for your Content Security Policy. Runs client-side.
Category: securityHTTP Security Headers Analyzer
Analyze HTTP response headers for security best practices. Get a security score, recommendations, and detailed analysis for each header.
Category: securityPassword Generator
Generate strong passwords and passphrases using the Web Crypto API. Estimate entropy, crack time, and customize character sets — all client-side.
Category: securityOffline PIN Brute-Force Calculator
Estimate how long an offline GPU takes to brute-force a PIN through PBKDF2 — then toggle device binding and watch it become infeasible. Runs client-side.