Security Toolkit

Profile a JSONL training set: token stats, roles, duplicates and cost.

Lint an OpenAPI or Swagger spec for contract quality issues.

Escape special characters for use inside a JSON string.

Reverse JSON string escaping back to readable text.

Validate JSON data against a JSON Schema (Draft-07) in your browser.

Analyze readability with Flesch score and syllable stats.

Inspect code points, categories, and byte lengths of every character.

Shrink JPEG, PNG, and WebP images without a server.

Strip comments, metadata, and whitespace from SVG markup.

Convert images to Base64 data URLs and back again.

Analyze HTML for missing or problematic meta tags.

Convert between base64/data URI text and image previews.

Encode or decode text to/from Base64, UTF-8 safe.

Encode or decode HTML entities in text.

Build or decode an HTTP Basic Authorization header.

Convert any file to a Base64 data URI, or decode Base64 back to a file.

Validate and normalise lists of IPv4, IPv6 and CIDR entries offline.

Parse Set-Cookie headers and flag security issues.

Analyse a HAR export: slow requests, errors, sizes and host breakdowns.

Measure TTFB, page size, compression, caching and resource counts for any URL.

Trace every redirect hop with status codes, timing and the final URL.

Escape and unescape strings for JSON, JS, HTML, XML, SQL, RegExp, and shell.

Open an APK, decode its manifest and browse or download every file inside.

Find expensive SQL patterns, missing filters and index opportunities.

Validate Kubernetes manifests and catch risky container settings.

Analyse nginx.conf for syntax, security and performance issues.

Shrink a PDF's file size with screen, ebook or print presets.