# Security Tools

> One page from jmrp.io, published as markdown. Index: https://jmrp.io/llms.txt

Canonical: https://jmrp.io/tools/categories/security/
Language: en
Alternate: https://jmrp.io/es/tools/categories/security/index.md
Updated: 2026-09-03
License: https://jmrp.io/license/
Category: security

Free security tools that run in your browser — CSP policy builder and hash calculator, certificate inspector, HTTP header analyzer, and more.
Build-Date: 2026-09-06

Use these when you're hardening a site or checking someone else's work: build a Content-Security-Policy and hash its inline scripts, inspect a TLS certificate before trusting it, audit response headers, or reason about password and PIN strength with real numbers. Everything is computed in your browser; the only exception is the header analyzer's optional fetch, which goes through a proxy on this site and is not logged.

- [Certificate Inspector](https://jmrp.io/tools/cert-inspector/): Decode PEM SSL/TLS certificates or fetch from a URL client-side. Inspect subject, issuer, validity, SANs, key usage, and security assessment. ([markdown](https://jmrp.io/tools/cert-inspector/index.md))
- [CSP Hash Calculator](https://jmrp.io/tools/hash-calculator/): Generate SHA-256 hashes for inline scripts. Get ready-to-use CSP directives for your Content Security Policy. Runs client-side. ([markdown](https://jmrp.io/tools/hash-calculator/index.md))
- [CSP Policy Builder](https://jmrp.io/tools/csp-builder/): Build Content Security Policy headers interactively. Toggle directives, see the policy generated live, and get a security rating. Runs client-side. ([markdown](https://jmrp.io/tools/csp-builder/index.md))
- [Encrypt-then-MAC Envelope Visualizer](https://jmrp.io/tools/etm-envelope-visualizer/): Seal a secret into an encrypt-then-MAC envelope, flip a byte, and watch the read verify the tag before decrypting. Runs client-side. ([markdown](https://jmrp.io/tools/etm-envelope-visualizer/index.md))
- [HTTP Security Headers Analyzer](https://jmrp.io/tools/http-headers-analyzer/): Analyze HTTP response headers for security best practices. Get a security score, recommendations, and detailed analysis for each header. ([markdown](https://jmrp.io/tools/http-headers-analyzer/index.md))
- [Offline PIN Brute-Force Calculator](https://jmrp.io/tools/pin-brute-force-calculator/): Estimate how long an offline GPU takes to brute-force a PIN through PBKDF2 — then toggle device binding and watch it become infeasible. Runs client-side. ([markdown](https://jmrp.io/tools/pin-brute-force-calculator/index.md))
- [Password Generator](https://jmrp.io/tools/password-generator/): Generate strong passwords and passphrases using the Web Crypto API. Estimate entropy, crack time, and customize character sets — all client-side. ([markdown](https://jmrp.io/tools/password-generator/index.md))

## All categories

- [Developer Tools](https://jmrp.io/tools/categories/developer/) ([markdown](https://jmrp.io/tools/categories/developer/index.md))
- [Network & Server Tools](https://jmrp.io/tools/categories/network/) ([markdown](https://jmrp.io/tools/categories/network/index.md))
- [Embedded & Industrial Tools](https://jmrp.io/tools/categories/embedded/) ([markdown](https://jmrp.io/tools/categories/embedded/index.md))
- [MikroTik Tools](https://jmrp.io/tools/categories/mikrotik/) ([markdown](https://jmrp.io/tools/categories/mikrotik/index.md))