Security & Auth
Free, private, runs in your browser
Hash generators, JWT debugger, SAML decoder, OIDC builder, encryption, TOTP, password analysis, and credential tools - all client-side.
TLS Certificate Checker
Check TLS/SSL certificate expiry, issuer, and security configuration. Paste openssl output for instant analysis.
Prompt Injection Tester
Scan prompts and untrusted content for injection patterns: overrides, exfiltration commands, hidden Unicode, encoded payloads. Includes attack payloads and the Lethal Trifecta checklist.
OWASP ZAP Report Analyzer
Paste an OWASP ZAP JSON or Markdown scan report and get a triaged summary: risk counts, affected URLs, CWE links and fix guidance. 100% client-side.
ComfyUI Workflow Inspector
Paste any ComfyUI workflow JSON (API or canvas format): models required, sampler and CFG settings, resolution, and which nodes need custom node packs. Free, client-side.
ComfyUI API Converter
Convert ComfyUI workflows between the API/prompt format and the canvas format, both directions. Links and widgets rebuilt automatically. Free, client-side.
ComfyUI Workflow Diff
Compare two ComfyUI workflow JSONs: added and removed nodes, changed seeds, steps, CFG, samplers and prompts. Both formats accepted. Free, client-side.
Safetensors Header Reader
Read the JSON header of any .safetensors model: LoRA metadata, base model, rank, tensor names and dtypes. Only header bytes read, nothing uploaded.
ComfyUI Sampler Guide
Which ComfyUI sampler to use: euler, dpmpp_2m, lcm and more explained, sigma schedulers, and how steps, CFG, denoise and seed interact.
CSR Decoder
Decode a Certificate Signing Request (PKCS#10) in your browser: subject, SANs, public key, extensions and self-signature verification. Free, client-side.
Security Policy Generator
Generate password, access control, and incident response policies for SOC 2 compliance.
Security Headers Analyzer
Check HSTS, CSP, X-Frame-Options and more on any URL. Graded A-F with fix recommendations.
CSP Generator
Build Content-Security-Policy headers visually. Configure directives and copy the header.
CSP Evaluator
Analyze a CSP header for weaknesses: unsafe-inline, wildcards, missing directives, bypass risks.
CORS Tester
Test cross-origin requests from your browser. See Access-Control-Allow-Origin, methods and headers.
Cookie Security Analyzer
Check Set-Cookie headers for Secure, HttpOnly, SameSite, prefixes and domain scope.
JWT & Auth Toolkit
Complete auth debugging suite: decode and verify JWTs, inspect claims, build OIDC URLs, decode SAML, generate tokens. All client-side.
SAML Metadata Generator
Generate SP and IdP SAML 2.0 metadata XML: entityID, ACS/SLO endpoints, NameID format, certificates. Client-side.
Certificate Fingerprint
Calculate SHA-1/256/384/512 fingerprints of X.509 certificates from PEM. For SAML, pinning, and TLS debugging.
Key Format Converter
Convert RSA keys between PKCS#1 and PKCS#8, public keys between SPKI and PKCS#1, PEM to DER hex. All client-side.
SAML Request & Response Decoder
Decode SAML AuthnRequest and Response messages - base64 plus raw-deflate - with pretty-printed XML. Essential for Okta, Entra ID and Shibboleth debugging. 100% client-side.
DMARC Record Parser
Parse and validate DMARC TXT records: policy strength (p/sp/np), rua/ruf reporting, pct sampling, adkim/aspf alignment and misconfig warnings. Optional DNS lookup, 100% client-side parsing.
OIDC Authorization URL & PKCE Generator
Build OAuth 2.0 / OIDC authorize URLs with state, nonce and S256 PKCE code challenges. Works with Okta, Auth0, Entra ID, Keycloak.
JWT Debugger
Decode and inspect JWT tokens instantly.
Hash Text
Generate Argon2id, bcrypt, PBKDF2, MD5, SHA-1, SHA-256, SHA-384, SHA-512, BLAKE2b, and Poseidon hashes online. 100% client-side Argon2id password hashing for maximum security.
Bcrypt
Generate and verify Bcrypt password hashes.
Encrypt/Decrypt
Encrypt and decrypt text using various algorithms.
HMAC Generator
Generate HMAC hash codes with various algorithms.
X25519 Key Exchange
Generate X25519 keypairs and perform ECDH key exchange. See how two parties derive the same shared secret without transmitting it.
CTR Mode Visualizer
Interactive counter mode encryption demo: watch keystream blocks XOR with plaintext. Block-by-block breakdown with nonce/counter visualization.
Shamir Secret Sharing
Split secrets into N shares where any threshold K reconstructs. Visual polynomial interpolation over GF(257). Client-side.
MPC Demo
Interactive demo of secure multi-party computation: split numbers into shares, compute on encrypted data, reconstruct without revealing inputs.
Pedersen Commitment
Create Pedersen commitments over secp256k1: bind to a value without revealing it. Hiding and binding properties. Client-side.
RSA Key Generator & Signer
Generate RSA key pairs, sign messages with a private key, and verify RSA signatures (PKCS1-v1_5, PSS).
Password Strength
Analyze password strength and get improvement suggestions.
TOTP Generator
Generate TOTP codes from secrets. Privacy-first tool.
PDF Signature Checker
Check and validate digital signatures in PDF files. Privacy-first tool.
Token Generator
Generate secure random tokens with customizable length and character sets.
Basic Auth Generator
Generate HTTP Basic Authentication headers.
String Obfuscator
Obfuscate strings to hide sensitive data.