Security tools

Cookie Scanner

Scan the cookies a site sends: check for the Secure, HttpOnly, and SameSite attributes, with a plain-English explanation of what each risk means.

DNS Lookup

Instant DNS lookup: A, AAAA, MX, TXT, and NS records for any domain, with a plain-English explanation of each record type.

DNSSEC Checker

Check whether DNSSEC is enabled and correctly configured for a domain: DS and DNSKEY records, and full signature validation.

SPF/DKIM/DMARC Checker

Check whether your domain's email is protected: SPF record, DKIM (common selectors), and DMARC policy, with plain-English explanations.

Hash Generator & Identifier

Generate and identify MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes right in your browser. Nothing is sent to a server, results are instant.

JWT Decoder

Decode a JSON Web Token (header, payload, expiration) and verify its HS256 or RS256 signature right in your browser. Nothing is sent to a server.

Mixed Content Detector

Find resources loaded over HTTP on an HTTPS page (images, scripts, iframes, stylesheets) that trigger browser security warnings.

Password Strength Checker

Check how strong a password really is: entropy, detected patterns, estimated crack time, and a secure generator. Nothing is ever sent to a server.

Security Headers Analyzer

Scan a site's HTTP headers, get an A-to-F grade, and see exactly what to fix — with plain-English explanations and copy-paste values.

SSL Certificate Checker

Check any domain's SSL/TLS certificate: issuer, expiry date, days remaining, protocol, and SAN entries — with a warning if it expires within 30 days.

security.txt & robots.txt Checker

Check whether a domain publishes a valid security.txt file (RFC 9116) and robots.txt, along with their key fields and directives.

WHOIS Lookup

Check a domain's age, expiration date, registrar, and nameservers with a free, instant WHOIS lookup.