Security

Generate Apache .htaccess rules online with presets for redirects, headers, caching, access control, and exports for safer staging review and deployment prep.

Calculate online ACL wildcard masks from IPv4 CIDR, dotted subnet masks, host lines, or any entries, then audit match size before writing Cisco ACEs.

Check online DNS-01 challenge readiness for ACME issuance by testing TXT visibility, delegation shape, resolver agreement, and safer retry timing.

Check alternative DCV online across DNS, HTTP, and HTTPS with CSR-aware presets so you can catch token or transport problems before certificate issuance.

Analyze online audit logs from CSV, JSON, or CloudTrail records to score failures, privilege changes, source shifts, and timing anomalies for faster triage.

Validate online BIMI readiness by checking DNS, DMARC enforcement, SVG logo health, PEM certificate evidence, and exportable brand email review notes.

Check DNSBL status online for a host or IP across selected mail blocklists, with TXT evidence, resolver context, and shareable exports for mail triage.

Validate the effective CAA policy for a hostname with parent-chain discovery, wildcard issuance perspective, and issuance or reporting notes.

Calculate online certificate renewal windows from validity, lead time, spread, capacity, retry reserve, and buffer limits for safer TLS rollout planning.

Decode certificate signing requests online to inspect subject names, SAN entries, key details, fingerprints, and warning cues before certificate issuance.

Generate online certificate signing requests with new RSA keys, SAN and usage controls, plus downloadable PEM output for TLS certificate enrollment.

Inspect certificate transparency online from a PEM or DER certificate, compare logged issuances and DNS coverage, and flag revocation or hostname drift.

Analyze online container vulnerability scans from Trivy, Grype, SARIF, or CSV to count fixable high-risk findings and prepare release-gate triage.

Validate online DANE TLSA records for SMTP, HTTPS, IMAPS, and custom TLS services with DNSSEC AD checks, MX routing, digest comparison, and export-ready evidence.

Generate online DKIM DNS records from selector, domain, key type, and public key into publish-ready TXT fields, split strings, and review checks.

Validate a DKIM selector with tag parsing, selector-host resolution, key-type classification, and key-strength notes.

Generate online DMARC TXT records with policy rollout tags, alignment settings, report URIs, DNS labels, and authorization checks for safer publishing.

Validate online DMARC records with live DNS lookup, tag parsing, policy posture, reporting counts, and alignment notes for safer email rollout reviews.

Report online DNS denial evidence from NXDOMAIN or NODATA replies, NSEC/NSEC3 records, SOA retry timing, and resolver-view caveats for incident review.

Check DNS glue and delegation online, compare Cloudflare, Google, and Quad9 views, spot nameserver gaps, and export evidence for DNS repair tickets.

Enumerate DNS records online across public resolvers with PTR, DNSSEC, mail-policy, and posture checks to spot misconfigurations during authorized reviews.

Score dependency updates online by version bump, runtime scope, security signal, tests, compatibility, and freshness to route risky releases before merge.

Generate online Diceware passphrases with EFF long-list words, browser rolls, manual dice keys, entropy checks, and policy fit guidance for safer logins.

Analyze email headers online to trace relay hops, authentication, alignment, and delay clues before deciding whether a suspicious message needs deeper review.

Edit image EXIF metadata online by reviewing camera, timestamp, and GPS tags, then export a JPEG, PNG, or WebP copy for safer sharing or recordkeeping.

Encrypt or decrypt files online with AES-GCM, compatibility cipher modes, Argon2id or PBKDF2 key derivation, and recovery metadata for safer file sharing.

Generate online file hashes with MD5, SHA-1, SHA-2, SHA-3, or RIPEMD-160 and compare exact digests to verify downloads, backups, archives, and handoffs.

Analyze online firewall deny logs by source, destination, port, direction, and watched services to prioritize repeated blocks for rule review.

Check hash strings online to spot likely digest, password-hash, and LDAP token formats from pasted values so you can route them to the right verifier.

Check HTTP response headers online with hardening grades, redirect-path evidence, and cache, CORS, cookie, and isolation findings for reviews and triage.

Analyze online IAM policy permissions by flagging wildcard actions, broad resources, sensitive services, and review queues before approving role changes.

Validate MTA-STS settings online by checking TXT records, policy mode and max_age, plus policy-host certificate status for mail security reviews.

Calculate online NAT pool capacity from public IPs, usable ports, reserve, user sessions, and hot destinations for safer egress planning.

Check nameserver delegation online for glue, SOA consistency, resolver drift, address health, and repair priorities before registrar or DNS provider changes.

Extract PEM blocks online into labeled certificates, CSRs, and keys with SHA-256 fingerprints, trace details, and clean file splits for TLS troubleshooting.

Assess password strength online with pattern-aware scoring, crack-time scenarios, and upgrade guidance so you can reject risky secrets before account use.

Convert online IDN hostnames between Unicode and Punycode, review labels, DNS length limits, URL parser behavior, and safer copy targets for DNS handoff.

Convert RSA keys online between PKCS#1, PKCS#8, SPKI, and encrypted PEM wrappers so the same key fits servers, libraries, and deployment handoffs.

Compare online DNS resolver policy differences across open, threat, and family filters to spot likely blocking, cache drift, or DNSSEC issues fast.

Check reverse DNS online for IPv4, IPv6, or hostnames, confirm PTR and forward-confirmed rDNS, and catch naming or resolver issues during mail troubleshooting.

Analyze online SARIF security findings to rank errors, warnings, rule hotspots, file hotspots, gate status, and triage evidence before release.

Analyze online SBOM component risk from CycloneDX, SPDX, Syft, or CSV input to rank vulnerabilities, licenses, identity gaps, and release queues.

Look up online SMIMEA and OPENPGPKEY DNS records from an email identity, compare resolver evidence, and verify DNSSEC-backed mail key publication.

Generate online SPF TXT records for provider includes, IP senders, A/MX sources, redirects, lookup limits, and safer DNS rollout checks before publishing.

Validate an SPF record with directive parsing, expansion-trace tracking, DNS lookup budget checks, and terminal policy notes.

Check SSL issuer pairs online by comparing a leaf certificate with a candidate CA and flagging chain, policy, and expiry issues before deployment.

Check certificate chains online from a live host or PEM text, verify issuer links and hostname coverage, and export a deployment-ready PEM bundle.

Check SSL posture online for one hostname, then compare endpoint grades, trust paths, protocol support, and renewal risk before fixing HTTPS drift.

Check certificate expiry online for a live host, confirm SAN coverage, and export renewal facts so you can replace the right TLS certificate before outages.

Compare SSL certificate, CSR, and RSA private key data online by matching SPKI fingerprints, then confirm the right files before renewal, migration, or deployment.

Check OCSP revocation status online for a live host or pasted certificate, then review responder timestamps, transport evidence, and replay-ready output.

Generate secure passwords online with presets, character-pool controls, entropy and strength checks, history comparison, trend charts, and exports.

Convert SSH public keys online between OpenSSH, SSH2, and PEM formats while checking fingerprints, comments, and key details for safer server handoffs.

Extract SSH public keys online from OpenSSH or RSA private keys and public key lines, then review fingerprints and build an authorized_keys entry.

Convert SSL certificates online between PEM, DER, PKCS#7, and PKCS#12, inspect issuer and expiry details, and build import-ready bundles for deployment.

Decode SSL certificates online to inspect issuer, SAN entries, validity dates, fingerprints, and usage flags for faster X.509 troubleshooting or audits.

Trace TLS handshakes online for a host and port, inspect protocol, cipher, ALPN, and certificate details, and isolate endpoint misconfiguration fast.

Validate TLS-RPT records online by checking TXT tags, rua report URIs, resolver answers, and related policy signals before publishing mail reporting.

Encrypt text online with AES, Argon2id or PBKDF2 key derivation, and flexible output formats to protect notes, snippets, and shared secrets.

Generate text hashes online with MD5, SHA-1, SHA-2, SHA-3, and RIPEMD-160, add optional salt rules, and save or copy digests for checks and records.

Check online URL blacklist status across Safe Browsing, SURBL, and URL-structure signals, then triage suspicious links with scope-aware evidence before opening.

Analyze online npm audit reports into severity counts, high-plus gate status, fix pressure, package queues, and exports for CI remediation triage.