Security Tools
43 tools available · 4 coming soon
Upload a file to Palo Alto WildFire. Get a full verdict PDF report by email.
Malware AnalysisCheck a URL against VirusTotal, URLhaus and Google Safe Browsing.
Malware AnalysisCheck a SHA-256, SHA-1 or MD5 hash against VirusTotal 70+ engines.
Malware AnalysisAbuseIPDB score, categories, report count, Tor / VPN / proxy detection.
Malware AnalysisQuery any record type (A, AAAA, MX, TXT, NS, CNAME, SOA, PTR, SRV, CAA…) across 1.1.1.1, 8.8.8.8 and 9.9.9.9 side-by-side.
DNS ToolsBatch RDAP lookup for up to 20 domains or IPs. Resolves via IANA bootstrap, no rdap.org dependency.
DNS ToolsFull chain-of-trust validation — detect broken signatures, missing DS records, algorithm mismatches.
DNS ToolsFind all certificates ever issued for a domain via crt.sh CT logs.
DNS ToolsFull SPF parse, recursive flatten, void-lookup counter, include-tree visualisation.
Email SecurityFull DMARC policy parse — p=, sp=, pct=, rua=, alignment mode, spoofing risk score.
Email SecurityPaste raw email headers — full hop-by-hop analysis, delay map, SPF/DKIM/DMARC result extraction.
Email SecurityConnect to mail server, verify STARTTLS is advertised and enforced.
Email SecurityCheck if the mail server accepts unauthenticated relay (SMTP misconfiguration).
Email SecurityCheck domain or IP against 50+ major DNS blacklists and reputation lists.
Email SecurityCheck certificate chain, expiry, SAN list, issuer, OCSP stapling, CT log presence.
SSL / TLSProtocol support, cipher suite rating, HSTS, headers — overall A–F security grade.
SSL / TLSVerify the OCSP endpoint is reachable and returns a valid, non-revoked response.
SSL / TLSCheck certificate revocation via OCSP and CRL Distribution Point.
SSL / TLSPaste PEM/DER — decode all X.509 fields in-browser. Nothing is sent to the server.
SSL / TLSGenerate RSA 2048/4096 or ECDSA P-256/P-384 keypair + CSR. 100% in-browser — key never leaves your device.
SSL / TLSConvert between PEM, DER, PFX/PKCS12 — fully in-browser. Private keys never leave your device, even if encrypted.
SSL / TLSPaste a PEM bundle to inspect + verify the chain. Or paste a leaf cert and we fetch the intermediates via AIA.
SSL / TLSCheck URL reachability, status code, response time, redirect chain, TLS version.
Network ToolsPostman-lite API tester. Send any method with custom headers, body, and auth from our edge.
Web SecurityReal TCP probe from our edge. Detects open ports regardless of protocol. Custom ranges + banner grab.
Network ToolsIPv4/IPv6 subnet scoping — drag prefix slider, jump prev/next, split subnets, IP range → CIDRs.
Network ToolsGeolocation, ASN, BGP prefix, abuse contact, Tor/VPN/proxy/cloud detection.
Network ToolsWhat IP does the world see? Shows your public IP, ASN, location, and cloud/VPN detection.
Network ToolsHTTP-based path analysis — trace the route to a destination with hop-by-hop timing.
Network ToolsGrade CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy — A to F.
Web SecurityFollow all HTTP redirects, show each hop's status code, location, and timing.
Web SecurityWhat origins does this endpoint allow? Inspect ACAO/ACAM headers.
Web SecurityMD5, SHA-1/256/384/512, BLAKE2, HMAC — 100% in-browser, data never leaves your device.
Crypto / DevDecode header, payload, signature. Flags alg:none, shows expiry countdown. In-browser.
Crypto / DevStandard and URL-safe Base64. Supports text and file input. In-browser.
Crypto / DevDecode & encode Unix (s/ms/µs/ns), Windows FILETIME, WebKit, Mac Absolute, LDAP/AD time.
Crypto / DevConfigurable character set, entropy display, zxcvbn strength score. In-browser.
Crypto / DevSymbolic ↔ octal ↔ binary Linux permissions. Includes setuid, setgid, sticky bit.
Crypto / DevHuman-readable cron schedule, next 10 run times, timezone-aware.
Crypto / DevDoes this endpoint meet PCI DSS v4 TLS requirements? Flags deprecated protocols.
CompliancePassive check of public-facing indicators against NIS2 technical requirements.
ComplianceMerge multiple PDFs, split into ranges, rotate / reorder pages. Runs entirely in your browser.
File ToolsCombine one or more images into a single PDF. JPEG, PNG, WebP supported. In-browser.
File ToolsExtract text, images, and metadata from a PDF. Strip metadata for privacy. In-browser.
File ToolsAdd or remove password protection from a PDF. Your passwords never leave the browser.
File ToolsConvert .docx documents to PDF in your browser. No upload to any server.
File ToolsConvert PNG ↔ JPEG ↔ WebP, resize, strip EXIF metadata for privacy. In-browser.
File Tools