SEC
Sicherheits-Schreibtisch
Hashes, Kodierungen, Header und Prüfungen, die Sie lieber selbst ausführen. Nichts hier verlangt ein Konto.
1–24 / 915
Password Generator
AktivGenerate strong random passwords and passphrases locally — nothing is sent or stored.
Werkzeug öffnenPassword Strength / Entropy Checker
AktivEstimates password entropy and crack time (client-side only). The result stays on this page.
Werkzeug öffnenHash Generator
AktivGenerates MD5, SHA-1, SHA-256, SHA-512 hashes. The result stays on this page.
Werkzeug öffnenbcrypt Hash Generator & Verifier
Aktivbcrypt Hash Generator & Verifier. Generate and verify bcrypt hashes. The result stays on this page.
Werkzeug öffnenSSL/TLS Certificate Checker
AktivChecks certificate validity, chain, expiry and protocols for a host. The result stays on this page.
Werkzeug öffnenCSR Generator & Decoder
AktivGenerates and decodes certificate signing requests. The result stays on this page.
Werkzeug öffnenCertificate Conversion Command Builder
AktivBuilds OpenSSL commands to convert PEM/PFX/DER/P7B. The result stays on this page.
Werkzeug öffnenCertificate Key Matcher
AktivCheck a certificate matches its private key/CSR. The result stays on this page.
Werkzeug öffnenOpenSSL Command Builder
AktivOpenSSL Command Builder. Build common OpenSSL commands. The result stays on this page.
Werkzeug öffnenSPF Record Generator & Checker
AktivBuilds and validates SPF records, counts DNS lookups. The result stays on this page.
Werkzeug öffnenSPF Flattening Tool
AktivFlatten includes to stay under 10 DNS lookups. The result stays on this page.
Werkzeug öffnenDMARC Generator & Checker
AktivBuilds DMARC policies and validates existing records. The result stays on this page.
Werkzeug öffnenEmail Header Analyzer
AktivParses email headers to trace hops and check SPF/DKIM/DMARC results. The result stays on this page.
Werkzeug öffnenEmail Deliverability Checker
AktivCheck domain authentication, PTR and blocklists together. The result stays on this page.
Werkzeug öffnenBulk Sender Requirements Checker
AktivCheck compliance with Gmail/Yahoo/Microsoft sender rules. The result stays on this page.
Werkzeug öffnenSecurity Headers Checker
AktivChecks a site's HTTP security headers and grades them. The result stays on this page.
Werkzeug öffnenSubresource Integrity (SRI) Hash Generator
AktivGenerate SRI hashes for scripts/styles. The result stays on this page.
Werkzeug öffnenJWT Decoder
AktivDecodes JWT header and payload and shows expiry. The result stays on this page.
Werkzeug öffnenSAML Response Decoder
AktivSAML Response Decoder. Decode and inspect SAML assertions. The result stays on this page.
Werkzeug öffnenCVE Lookup
AktivSearches CVE details, severity and references. The result stays on this page.
Werkzeug öffnenCVSS Score Calculator
AktivCalculates CVSS v3.1 base scores from metrics. The result stays on this page.
Werkzeug öffnenCISA KEV Checker
AktivCheck whether CVEs are in the Known Exploited list. The result stays on this page.
Werkzeug öffnenDependency Vulnerability Checker
AktivPaste package.json/requirements.txt to find known CVEs. The result stays on this page.
Werkzeug öffnenFile Hash Reputation Lookup
AktivCheck a hash against public threat intel sources. The result stays on this page.
Werkzeug öffnenLeitfäden
Pillar guides for this desk. Published supporting pages are linked from the pillar they belong to.
Cryptography & Encoding
PKI & Certificates
Email Security
Web & API Security
Vulnerability Management
Threat Intelligence & IOC Analysis
Identity & Access Security
Endpoint & Network Defense
Logging, SIEM & Detection
Incident Response & Forensics
Risk, Governance & Compliance
Cloud, Container & DevSecOps
Privacy & Data Protection
Security Awareness
Security Policies & Templates
Security Reference & Career
SIEM Detection Rule Guides
- Splunk Detection Engineering Guide
- Microsoft Sentinel Detection Engineering Guide
- Elastic Security Detection Engineering Guide
- IBM QRadar Detection Engineering Guide
- Google SecOps Detection Engineering Guide
- Wazuh Detection Engineering Guide
- Sigma Detection Engineering Guide
- CrowdStrike Falcon LogScale Detection Engineering Guide
- Sumo Logic Detection Engineering Guide
Compliance Framework Guides
- ISO 27001 Compliance Guide
- SOC 2 Compliance Guide
- NIST CSF 2.0 Compliance Guide
- NIST SP 800-53 Compliance Guide
- PCI DSS 4.0 Compliance Guide
- HIPAA Compliance Guide
- GDPR Compliance Guide
- India DPDP Act Compliance Guide
- CMMC 2.0 Compliance Guide
- NIS2 Compliance Guide
- DORA Compliance Guide
- CIS Controls v8 Compliance Guide
- ISO 42001 Compliance Guide
- CCPA/CPRA Compliance Guide
- Essential Eight Compliance Guide
- Cyber Essentials Compliance Guide
- SOX ITGC Compliance Guide
- FedRAMP Compliance Guide
- HITRUST Compliance Guide
- ISO 27701 Compliance Guide
- EU AI Act Compliance Guide
- RBI Cybersecurity Framework Compliance Guide
Email Provider Authentication Guides
- Google Workspace Email Authentication Guide
- Microsoft 365 Email Authentication Guide
- Amazon SES Email Authentication Guide
- SendGrid Email Authentication Guide
- Mailchimp Email Authentication Guide
- Mailgun Email Authentication Guide
- Postmark Email Authentication Guide
- Zoho Mail Email Authentication Guide
- Brevo Email Authentication Guide
- HubSpot Email Authentication Guide
- Salesforce Marketing Cloud Email Authentication Guide
- Zendesk Email Authentication Guide
- Freshdesk Email Authentication Guide
- Proton Mail Email Authentication Guide
- Klaviyo Email Authentication Guide
- Constant Contact Email Authentication Guide
- Shopify Email Email Authentication Guide
- ActiveCampaign Email Authentication Guide
- Intercom Email Authentication Guide
- Odoo Email Authentication Guide
Incident Response Guides
- Ransomware Incident Response Guide
- Phishing Incident Response Guide
- Business Email Compromise Incident Response Guide
- Malware Infection Incident Response Guide
- Data Breach Incident Response Guide
- DDoS Attack Incident Response Guide
- Insider Threat Incident Response Guide
- Compromised User Account Incident Response Guide
- Lost or Stolen Device Incident Response Guide
- Website Defacement Incident Response Guide
- Supply Chain Compromise Incident Response Guide
- Cloud Account Compromise Incident Response Guide
- Leaked Credentials Incident Response Guide
- Third-Party Vendor Breach Incident Response Guide
- Cryptojacking Incident Response Guide
- Data Exfiltration Incident Response Guide
- MFA Fatigue Attack Incident Response Guide
- Zero-Day Vulnerability Incident Response Guide
- Deepfake Voice Fraud Incident Response Guide
- Rogue Device on Network Incident Response Guide
- Vishing Attack Incident Response Guide
- Malicious Browser Extension Incident Response Guide
- API Key Leak Incident Response Guide
- OAuth Consent Phishing Incident Response Guide