Developer Security
CORS verification, CSP generator, SRI hashes, security.txt, and ReDoS testing.
JWT Security Inspector
Security-focused JWT analyzer testing for unsigned token bypass, algorithm confusion, key length, and token replay.
Regex Security & ReDoS Tester
Analyze regular expressions for exponential complexity, nested quantifiers, and denial-of-service vulnerabilities.
CORS Checker & Builder
Analyze CORS configuration issues (wildcard with credentials, insecure origins) and generate correct backend headers.
CSP (Content Security Policy) Generator
Interactive CSP builder generating secure directives for scripts, styles, frames, images, and connect endpoints.
SRI (Subresource Integrity) Hash Generator
Calculate cryptographic SRI hashes and ready-to-use HTML script/link tags to protect against CDN tampering.
Security.txt Generator (RFC 9116)
Create compliant security.txt files with Contact, Expires, Encryption, Canonical, and Policy directives.