Skip to main content

Authorized use only. Use this tool solely on systems, tokens, and assets you own or are explicitly permitted to test — credential extraction, signature forging, and unauthorized access are prohibited by our Acceptable Use Policy.

OWASP ZAP Report Analyzer

Paste a ZAP JSON or Markdown report, get a triaged summary with fixes. 100% client-side.

Paste ZAP Report

Traditional JSON export (-J) or Markdown (-md) from OWASP ZAP.

About

OWASP Zed Attack Proxy (ZAP) is a free, open-source web application security scanner. Reports it exports are dense JSON that is hard to triage. This tool parses them in your browser: nothing is uploaded, no network calls.

Export from ZAP via Report > Export JSON (or -J flag on the CLI), then paste above.

Continue with

TLS Certificate Checker

Check TLS/SSL certificate expiry, issuer, and security configuration. Paste openssl output for instant analysis.

Prompt Injection Tester

Scan prompts and untrusted content for injection patterns: overrides, exfiltration commands, hidden Unicode, encoded payloads. Includes attack payloads and the Lethal Trifecta checklist.

ComfyUI Workflow Inspector

Paste any ComfyUI workflow JSON (API or canvas format): models required, sampler and CFG settings, resolution, and which nodes need custom node packs. Free, client-side.