Best Security Tools
A hand-checked list of the best free security tools for developers. Every tool runs in your browser — no upload, no login, no API key.
11 tools
Password Strength Checker
Security
Estimate password entropy, crack time, and get actionable advice.
CSP Builder
Security
Build a Content-Security-Policy header from per-directive sources.
Security Headers Auditor
Security
Grade HTTP response headers against security best practices.
JWT Inspector
Security
Decode a JWT and audit its claims for common issues.
Htpasswd Generator
Security
Generate .htpasswd lines using SHA-1 or plain text.
Secret Scanner
Security
Scan pasted code or text for likely leaked secrets.
CORS Config Generator
Security
Generate CORS headers/config for Nginx, Apache, Express, or Workers.
TOTP Generator
Security
Generate time-based one-time passcodes from a Base32 secret.
Robots.txt Security Checker
Security
Scan robots.txt for accidental disclosure of sensitive paths.
SSL CSR/Certificate Decoder
Security
Decode a PEM CSR or certificate into its ASN.1 structure.
Security.txt Generator
Security
Generate a valid RFC 9116 /.well-known/security.txt file.