/tools Tools Free tools we built and maintain. Site audits check a domain you enter and hand back a graded report with fixes; browser utilities run entirely on your device.
Free site audits Enter a domain, get a graded report in seconds. These run on our servers (public DNS / a single request / PageSpeed) and store nothing.
Can someone spoof email from your domain? We audit SPF, DMARC, DKIM, and MX and grade your protection with exact fixes. Passive security scan: TLS/certificate health, security headers (CSP, HSTS, clickjacking), deprecated protocols, and cookie flags — graded, with the exact fixes. Accessibility (WCAG) checker Check your site against WCAG — alt text, labels, contrast, structure — graded, with what to fix and the legal-risk context. Browser utilities Everything here runs in your browser — nothing you paste leaves your device.
Identify a hash by length + character class. Lists candidate algorithms with confidence. Encode/decode across Base64 (standard + URL-safe), URL percent, hex, HTML entities, and unicode escapes — plus multi-step cross-encoding chains. Binary-safe, 100% in-browser. Decode, edit-in-place, and re-sign JWTs across 13 algorithms; verify HS/RS/ES/PS/EdDSA signatures; generate attack variants (alg:none, RS→HS confusion, kid/jku/x5u, weak-secret crack). 100% in-browser. IPv4 CIDR maths: network, broadcast, first/last host, netmask, wildcard, host count. Parse email headers or a .eml: delivery hop chain, SPF/DKIM/DMARC, spoofing indicators, and a risk verdict. built and maintained by SpidyOps