Loading…
Decode a JWT and statically review its header and claims.
Parse a CVSS 3.1 or 4.0 vector, expand every metric in plain English, and compute the 3.1 base score.
Paste raw email headers to reconstruct the delivery hop path and read SPF, DKIM, and DMARC results.
Learn what HTTP security headers do (HSTS, CSP, nosniff, framing, referrer, permissions), how to check them live, common misconfigs, and a safe fix order.
10 min read
Comprehensive 2026 hands-on security guide and pentesting masterclass on auditing OAuth 2.0 and OpenID Connect (OIDC) implementations. Learn PKCE bypasses, loose redirect URI exfiltration, CS
6 min read
Paste HTTP response headers and get a graded report on HSTS, CSP, X-Frame-Options, and more.
Break a User-Agent string into browser, version, operating system, and device — and spot bots.
12 min read