Security tools that run in your browser.
No installs, no data sent to servers. Every tool runs entirely client-side - your input never leaves your machine.
Analyze HTTP response headers for missing security protections (CSP, HSTS, X-Frame-Options, etc.)
Decode and inspect JSON Web Tokens - view header, payload, and signature without sending data anywhere.
Generate MD5, SHA-1, SHA-256, and SHA-512 hashes of any text - entirely in your browser.
Encode or decode Base64 strings instantly. Useful for reading encoded payloads, cookies, and API tokens.
Percent-encode or decode URLs and query parameters. Essential for crafting payloads and testing injection.
Evaluate password entropy, crack time estimate, and get suggestions - nothing leaves your browser.
Paste a Content-Security-Policy header and get an instant analysis of its security posture.
Look up A, AAAA, MX, TXT, NS, and CNAME records for any domain using public DNS-over-HTTPS.
Test regular expressions in real time with match highlighting, capture groups, and flag control.
Encode or decode HTML entities (< > &). Useful for XSS analysis and safe output encoding.
Convert Unix timestamps to dates and back. See current epoch live, switch between seconds and ms.
Calculate network address, broadcast, host range, masks, and total hosts from IP/CIDR notation.
Parse any User-Agent string to identify browser, version, OS, device type, and rendering engine.
Decode PEM certificates to view subject, issuer, validity, SANs, and key algorithm.
Convert between hex, RGB, and HSL color formats with a live preview swatch.
Compare two text blocks line-by-line. Useful for comparing HTTP responses, configs, or code.