SEC
Scrivania di sicurezza
Hash, codifiche, header e controlli che preferisci eseguire tu. Qui non serve un account.
1–24 / 915
Password Generator
AttivoGenerate strong random passwords and passphrases locally — nothing is sent or stored.
Apri strumentoPassword Strength / Entropy Checker
AttivoEstimates password entropy and crack time (client-side only). The result stays on this page.
Apri strumentoHash Generator
AttivoGenerates MD5, SHA-1, SHA-256, SHA-512 hashes. The result stays on this page.
Apri strumentobcrypt Hash Generator & Verifier
Attivobcrypt Hash Generator & Verifier. Generate and verify bcrypt hashes. The result stays on this page.
Apri strumentoSSL/TLS Certificate Checker
AttivoChecks certificate validity, chain, expiry and protocols for a host. The result stays on this page.
Apri strumentoCSR Generator & Decoder
AttivoGenerates and decodes certificate signing requests. The result stays on this page.
Apri strumentoCertificate Conversion Command Builder
AttivoBuilds OpenSSL commands to convert PEM/PFX/DER/P7B. The result stays on this page.
Apri strumentoCertificate Key Matcher
AttivoCheck a certificate matches its private key/CSR. The result stays on this page.
Apri strumentoOpenSSL Command Builder
AttivoOpenSSL Command Builder. Build common OpenSSL commands. The result stays on this page.
Apri strumentoSPF Record Generator & Checker
AttivoBuilds and validates SPF records, counts DNS lookups. The result stays on this page.
Apri strumentoSPF Flattening Tool
AttivoFlatten includes to stay under 10 DNS lookups. The result stays on this page.
Apri strumentoDMARC Generator & Checker
AttivoBuilds DMARC policies and validates existing records. The result stays on this page.
Apri strumentoEmail Header Analyzer
AttivoParses email headers to trace hops and check SPF/DKIM/DMARC results. The result stays on this page.
Apri strumentoEmail Deliverability Checker
AttivoCheck domain authentication, PTR and blocklists together. The result stays on this page.
Apri strumentoBulk Sender Requirements Checker
AttivoCheck compliance with Gmail/Yahoo/Microsoft sender rules. The result stays on this page.
Apri strumentoSecurity Headers Checker
AttivoChecks a site's HTTP security headers and grades them. The result stays on this page.
Apri strumentoSubresource Integrity (SRI) Hash Generator
AttivoGenerate SRI hashes for scripts/styles. The result stays on this page.
Apri strumentoJWT Decoder
AttivoDecodes JWT header and payload and shows expiry. The result stays on this page.
Apri strumentoSAML Response Decoder
AttivoSAML Response Decoder. Decode and inspect SAML assertions. The result stays on this page.
Apri strumentoCVE Lookup
AttivoSearches CVE details, severity and references. The result stays on this page.
Apri strumentoCVSS Score Calculator
AttivoCalculates CVSS v3.1 base scores from metrics. The result stays on this page.
Apri strumentoCISA KEV Checker
AttivoCheck whether CVEs are in the Known Exploited list. The result stays on this page.
Apri strumentoDependency Vulnerability Checker
AttivoPaste package.json/requirements.txt to find known CVEs. The result stays on this page.
Apri strumentoFile Hash Reputation Lookup
AttivoCheck a hash against public threat intel sources. The result stays on this page.
Apri strumentoGuide
Pillar guides for this desk. Published supporting pages are linked from the pillar they belong to.
Cryptography & Encoding
PKI & Certificates
Email Security
Web & API Security
Vulnerability Management
Threat Intelligence & IOC Analysis
Identity & Access Security
Endpoint & Network Defense
Logging, SIEM & Detection
Incident Response & Forensics
Risk, Governance & Compliance
Cloud, Container & DevSecOps
Privacy & Data Protection
Security Awareness
Security Policies & Templates
Security Reference & Career
SIEM Detection Rule Guides
- Splunk Detection Engineering Guide
- Microsoft Sentinel Detection Engineering Guide
- Elastic Security Detection Engineering Guide
- IBM QRadar Detection Engineering Guide
- Google SecOps Detection Engineering Guide
- Wazuh Detection Engineering Guide
- Sigma Detection Engineering Guide
- CrowdStrike Falcon LogScale Detection Engineering Guide
- Sumo Logic Detection Engineering Guide
Compliance Framework Guides
- ISO 27001 Compliance Guide
- SOC 2 Compliance Guide
- NIST CSF 2.0 Compliance Guide
- NIST SP 800-53 Compliance Guide
- PCI DSS 4.0 Compliance Guide
- HIPAA Compliance Guide
- GDPR Compliance Guide
- India DPDP Act Compliance Guide
- CMMC 2.0 Compliance Guide
- NIS2 Compliance Guide
- DORA Compliance Guide
- CIS Controls v8 Compliance Guide
- ISO 42001 Compliance Guide
- CCPA/CPRA Compliance Guide
- Essential Eight Compliance Guide
- Cyber Essentials Compliance Guide
- SOX ITGC Compliance Guide
- FedRAMP Compliance Guide
- HITRUST Compliance Guide
- ISO 27701 Compliance Guide
- EU AI Act Compliance Guide
- RBI Cybersecurity Framework Compliance Guide
Email Provider Authentication Guides
- Google Workspace Email Authentication Guide
- Microsoft 365 Email Authentication Guide
- Amazon SES Email Authentication Guide
- SendGrid Email Authentication Guide
- Mailchimp Email Authentication Guide
- Mailgun Email Authentication Guide
- Postmark Email Authentication Guide
- Zoho Mail Email Authentication Guide
- Brevo Email Authentication Guide
- HubSpot Email Authentication Guide
- Salesforce Marketing Cloud Email Authentication Guide
- Zendesk Email Authentication Guide
- Freshdesk Email Authentication Guide
- Proton Mail Email Authentication Guide
- Klaviyo Email Authentication Guide
- Constant Contact Email Authentication Guide
- Shopify Email Email Authentication Guide
- ActiveCampaign Email Authentication Guide
- Intercom Email Authentication Guide
- Odoo Email Authentication Guide
Incident Response Guides
- Ransomware Incident Response Guide
- Phishing Incident Response Guide
- Business Email Compromise Incident Response Guide
- Malware Infection Incident Response Guide
- Data Breach Incident Response Guide
- DDoS Attack Incident Response Guide
- Insider Threat Incident Response Guide
- Compromised User Account Incident Response Guide
- Lost or Stolen Device Incident Response Guide
- Website Defacement Incident Response Guide
- Supply Chain Compromise Incident Response Guide
- Cloud Account Compromise Incident Response Guide
- Leaked Credentials Incident Response Guide
- Third-Party Vendor Breach Incident Response Guide
- Cryptojacking Incident Response Guide
- Data Exfiltration Incident Response Guide
- MFA Fatigue Attack Incident Response Guide
- Zero-Day Vulnerability Incident Response Guide
- Deepfake Voice Fraud Incident Response Guide
- Rogue Device on Network Incident Response Guide
- Vishing Attack Incident Response Guide
- Malicious Browser Extension Incident Response Guide
- API Key Leak Incident Response Guide
- OAuth Consent Phishing Incident Response Guide