Skip to main content

Security Tools

Audit website security, generate cryptographically secure passwords, test HTTP security headers, and analyze SSL/TLS cipher suites.

Security Tools

Create strong, customizable cryptographically secure passwords.

Security Tools

Audit credential health, entropy calculations, and crack time estimates.

Security Tools

Audit if account email identifiers have been exposed in known data leaks.

Security Tools

Audit domains and external URLs against malware, phishing, virus payloads, and threat databases.

Security Tools

Analyze threat level, spam scores, and abuse logs associated with an IP.

Security Tools

Calculate MD5, SHA-1, SHA-256, and SHA-512 values client-side.

Security Tools

Compute file cryptographic signatures to check integrity against expected hashes.

Security Tools

Verify SSL/TLS installation details, expiry dates, and trust chains of a host.

Security Tools

Run a deep audit of SSL, headers, open ports, reputation, cookies, and information disclosure.

Security Tools

Search database records for vulnerabilities matching tech stacks or CVE IDs.

Security Tools

Validate security header directives and generate server implementation code.

Security Tools

Examine protocol versions, cipher suite strengths, and HSTS setups.

Security Tools

Test Access-Control headers, credentials allowances, and reflection safety.

Security Tools

Inspect Content Security Policy directives and highlight unsafe options.

Security Tools

Validate DNSSEC, DMARC/SPF defenses, and check zone transfer availability.

Security Tools

Generate iptables, nftables, ufw, and Windows Firewall rules from a simple form. Export ready-to-paste commands.

About Security Tools Utilities

Ensure your web infrastructure complies with modern cybersecurity standards including OWASP Top 10, NIST guidelines, and TLS 1.3 protocol specifications. Run client-side password entropy checks, inspect cryptographic hashes, and evaluate threat scores.

Frequently Asked Questions

Are passwords generated in this tool safe?

Yes. All password and cryptographic key generation is performed client-side using Web Crypto API (`crypto.getRandomValues`). Nothing is sent to our servers.

What HTTP security headers are audited?

We audit Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy.

Does the vulnerability checker search NVD database?

Yes — the CVE Vulnerability Checker queries public NIST National Vulnerability Database records for software security advisories.