Security toolbox

Browser-based
security tools

Practical tools for cloud security and vulnerability analysis — all running client-side, no data leaves your browser.

100% client-side No account needed
Cloud & Config · 3 tools
AWS IAM Policy Analyzer Live
Detect dangerous wildcards, privilege escalation paths, missing conditions, and security misconfigurations in IAM policies.
AWS IAM Least privilege Escalation paths
Open tool
S3 Bucket Permission Checker Live
Analyze S3 bucket policies and ACLs for public exposure, dangerous permissions, missing TLS enforcement, and encryption gaps.
AWS S3 Public exposure ACL analysis
Open tool
Firewall Rule Conflict Detector Live
Identify shadowed rules, conflicting allow/deny statements, redundant entries, and dangerously broad permit rules in your ruleset.
AWS SG Palo Alto Fortinet Conflicts
Open tool
Network & Analysis · 3 tools
PCAP Analyzer Live
Upload a .pcap or .pcapng file to analyze packet captures in your browser. Detects suspicious traffic, protocol distribution, top talkers, DGA-like domains, and cleartext credentials.
PCAP / PCAPNG Traffic analysis DGA detection
Open tool
CIDR / IP Range Calculator Live
Calculate network address, broadcast, host range, subnet mask, and usable IPs from any CIDR notation. Check IP containment and visualize bit layout.
CIDR Subnetting IPv4
Open tool
CVSS v3.1 Calculator Live
Calculate CVSS v3.1 base scores interactively. Select values for all 8 base metrics to compute the score, severity rating, and vector string.
CVSS v3.1 Vulnerability scoring NVD
Open tool
Threat Intel · 1 tool
Email Header Analyzer Live
Paste raw email headers to trace the delivery path, validate SPF/DKIM/DMARC, detect spoofing, and identify phishing indicators.
Phishing SPF / DKIM DMARC
Open tool
Dev & Crypto · 2 tools
JWT Decoder Live
Decode and inspect JSON Web Tokens. Visualize header, payload and claims, check expiry, and detect common misconfigurations — fully client-side.
JWT OAuth Token inspection
Open tool
Encode / Decode / Hash Live
Base64, URL encoding, Hex, HTML entities, and cryptographic hashing (MD5, SHA-1, SHA-256, SHA-512) — all client-side, nothing leaves your browser.
Base64 SHA-256 URL encode
Open tool
Coming Soon · 1 tool
MITRE ATT&CK TTP Mapper Soon
Map threat actor TTPs to the MITRE ATT&CK framework, visualize attack chains, and identify detection coverage gaps.
MITRE ATT&CK TTPs
In progress