Best Security Tools
A hand-checked list of the best free security tools for developers. Every tool runs in your browser — no upload, no login, no API key.
17 tools
Password Strength Checker
Security
Estimate password entropy, crack time, and get actionable advice.
CSP Builder
Security
Build a Content-Security-Policy header from per-directive sources.
Security Headers Auditor
Security
Grade HTTP response headers against security best practices.
JWT Inspector
Security
Decode a JWT and audit its claims for common issues.
Htpasswd Generator
Security
Generate .htpasswd lines using SHA-1 or plain text.
Secret Scanner
Security
Scan pasted code or text for likely leaked secrets.
CORS Config Generator
Security
Generate CORS headers/config for Nginx, Apache, Express, or Workers.
TOTP Generator
Security
Generate time-based one-time passcodes from a Base32 secret.
Robots.txt Security Checker
Security
Scan robots.txt for accidental disclosure of sensitive paths.
SSL CSR/Certificate Decoder
Security
Decode a PEM CSR or certificate into its ASN.1 structure.
Security.txt Generator
Security
Generate a valid RFC 9116 /.well-known/security.txt file.
Password Policy Generator
Security
Generate password policy rules, regex and copy for NIST or PCI presets.
Permissions-Policy Header Generator
Security
Build a Permissions-Policy header controlling camera, geolocation and more.
Referrer Policy Generator
Security
Pick a Referrer-Policy value and get header/meta/server snippets.
X-Frame-Options / Clickjacking Checker
Security
Check if X-Frame-Options and CSP frame-ancestors block framing.
SSH Key Fingerprint Formatter
Security
Parse an OpenSSH public key and show its SHA256/MD5 fingerprints.
SSL Certificate Checker
Security
Inspect the live certificate a domain serves, with expiry and chain details.