Live · Interactive
Security Toolkit
Not screenshots — real, working tools. Scan any site's security headers, check a password against 800M+ breached credentials, hash data, decode JWTs, and inspect DNS. Sensitive work happens in your browser and nothing is stored.
HTTP Security Header Scanner
Enter any public website. I fetch it server-side and grade its security headers, A+ to F.