Security Toolkit
Direct-use defensive security checks for headers, APIs, tokens, secrets, input, policies and configurations.
- Security Headers Audit
- Security Header Generator
- CORS Audit
- CORS Config Builder
- CSP Audit
- CSP Builder
- CSP Nonce Example Generator
- Cookie Security Audit
- Cookie Config Builder
- JWT Security Inspector
- JWT Signature Verifier
- JWT Claims Policy Checker
- Password Strength Checker
- Password Generator
- Secret Scanner
- ENV Secret Scanner
- Source Code Secret Scanner
- Private Key Detector
- Connection String Security Inspector
- API Key Format Inspector
- Hash Inspector
- Hash Generator
- HTML Sanitizer
- HTML Security Inspector
- CSV Injection Checker
- CSV Injection Sanitizer
- XML Security Checker
- Safe XML Parser Test
- YAML Security Checker
- JSON Security Checker
- URL Security Validator
- SSRF Target Validator
- Redirect Target Validator
- Open Redirect Rule Tester
- Path Traversal Input Checker
- Safe Filename Validator
- File Extension Allowlist Builder
- Input Length / DoS Risk Checker
- Regex DoS Risk Checker
- Security Header Comparator
- TLS Config Review
- TLS Version Checker
- Dependency File Inspector
- Package Version Risk Checker
- Lockfile Consistency Checker
- Dockerfile Security Audit
- Dockerfile Base Image Inspector
- Dockerfile User Checker
- Container ENV Secret Checker
- Docker Compose Security Audit
- Kubernetes Manifest Security Audit
- IAM Policy Inspector
- IAM Policy Diff
- Permission Matrix Analyzer
- OpenAPI Security Audit
- API Auth Coverage Checker
- API Sensitive Field Detector
- API Mass Assignment Risk Reviewer
- API Rate Limit Config Checker
- API Request Size Policy Checker
- API Error Exposure Checker
- GraphQL Security Inspector
- GraphQL Query Complexity Checker
- GraphQL Depth Checker
- SQL Injection Risk Reviewer
- SQL Parameterization Checker
- Command Injection Risk Reviewer
- Path Traversal Code Reviewer
- SSRF Code Reviewer
- XSS Risk Reviewer
- HTML Sink Inspector
- CSRF Config Checker
- Session Cookie Policy Checker
- Session Timeout Calculator
- Security Config Comparator
- Security Findings Deduplicator
- Security Checklist Generator
- Release Security Checklist
- File Upload Security Checklist
- Auth Config Review
- MFA Policy Review
- Authorization Matrix Review
- RBAC Matrix Builder
- Least Privilege Reviewer
- API Key Policy Checker
- Secret Rotation Planner
- Security Log Privacy Check
- Log Redaction Tester
- Security Event Normalizer
- SARIF Viewer
- SARIF Normalizer
- Security Report Comparator
- Security Posture Summary
- Security Evidence Exporter
- Secret-free Config Exporter
- Redaction Verifier
- Security Policy Linter
- Content Security Policy Diff
- CORS Policy Diff
- IAM Policy Diff Review
- Config Secret Redactor
- JSON Security Sanitizer
- URL Credential Detector
- Mixed Content Checker
- External Resource Inspector
- Third-party Script Inventory
- Subresource Integrity Checker
- SRI Hash Generator
- Permissions Policy Inspector
- Referrer Policy Inspector
- HSTS Inspector
- HSTS Builder
- Cache Control Security Checker
- Auth Header Leak Checker
- Referrer Leak Checker
- Sensitive URL Parameter Checker
- Redact Sensitive URLs
- Security Baseline Checker
- Production Readiness Security Check
- API Release Security Check
- Web Release Security Check