SEC
Security desk
Hashes, encodings, headers, and checks you would rather run yourself. Nothing here asks for an account.
1–24 / 915
Password Generator
LiveGenerate strong random passwords and passphrases locally — nothing is sent or stored.
Open toolPassword Strength / Entropy Checker
LiveEstimates password entropy and crack time (client-side only). The result stays on this page.
Open toolHash Generator
LiveGenerates MD5, SHA-1, SHA-256, SHA-512 hashes. The result stays on this page.
Open toolbcrypt Hash Generator & Verifier
Livebcrypt Hash Generator & Verifier. Generate and verify bcrypt hashes. The result stays on this page.
Open toolSSL/TLS Certificate Checker
LiveChecks certificate validity, chain, expiry and protocols for a host. The result stays on this page.
Open toolCSR Generator & Decoder
LiveGenerates and decodes certificate signing requests. The result stays on this page.
Open toolCertificate Conversion Command Builder
LiveBuilds OpenSSL commands to convert PEM/PFX/DER/P7B. The result stays on this page.
Open toolCertificate Key Matcher
LiveCheck a certificate matches its private key/CSR. The result stays on this page.
Open toolOpenSSL Command Builder
LiveOpenSSL Command Builder. Build common OpenSSL commands. The result stays on this page.
Open toolSPF Record Generator & Checker
LiveBuilds and validates SPF records, counts DNS lookups. The result stays on this page.
Open toolSPF Flattening Tool
LiveFlatten includes to stay under 10 DNS lookups. The result stays on this page.
Open toolDMARC Generator & Checker
LiveBuilds DMARC policies and validates existing records. The result stays on this page.
Open toolEmail Header Analyzer
LiveParses email headers to trace hops and check SPF/DKIM/DMARC results. The result stays on this page.
Open toolEmail Deliverability Checker
LiveCheck domain authentication, PTR and blocklists together. The result stays on this page.
Open toolBulk Sender Requirements Checker
LiveCheck compliance with Gmail/Yahoo/Microsoft sender rules. The result stays on this page.
Open toolSecurity Headers Checker
LiveChecks a site's HTTP security headers and grades them. The result stays on this page.
Open toolSubresource Integrity (SRI) Hash Generator
LiveGenerate SRI hashes for scripts/styles. The result stays on this page.
Open toolJWT Decoder
LiveDecodes JWT header and payload and shows expiry. The result stays on this page.
Open toolSAML Response Decoder
LiveSAML Response Decoder. Decode and inspect SAML assertions. The result stays on this page.
Open toolCVE Lookup
LiveSearches CVE details, severity and references. The result stays on this page.
Open toolCVSS Score Calculator
LiveCalculates CVSS v3.1 base scores from metrics. The result stays on this page.
Open toolCISA KEV Checker
LiveCheck whether CVEs are in the Known Exploited list. The result stays on this page.
Open toolDependency Vulnerability Checker
LivePaste package.json/requirements.txt to find known CVEs. The result stays on this page.
Open toolFile Hash Reputation Lookup
LiveCheck a hash against public threat intel sources. The result stays on this page.
Open toolGuides
Pillar guides for this desk. Published supporting pages are linked from the pillar they belong to.
Cryptography & Encoding
PKI & Certificates
Email Security
Web & API Security
Vulnerability Management
Threat Intelligence & IOC Analysis
Identity & Access Security
Endpoint & Network Defense
Logging, SIEM & Detection
Incident Response & Forensics
Risk, Governance & Compliance
Cloud, Container & DevSecOps
Privacy & Data Protection
Security Awareness
Security Policies & Templates
Security Reference & Career
SIEM Detection Rule Guides
- Splunk Detection Engineering Guide
- Microsoft Sentinel Detection Engineering Guide
- Elastic Security Detection Engineering Guide
- IBM QRadar Detection Engineering Guide
- Google SecOps Detection Engineering Guide
- Wazuh Detection Engineering Guide
- Sigma Detection Engineering Guide
- CrowdStrike Falcon LogScale Detection Engineering Guide
- Sumo Logic Detection Engineering Guide
Compliance Framework Guides
- ISO 27001 Compliance Guide
- SOC 2 Compliance Guide
- NIST CSF 2.0 Compliance Guide
- NIST SP 800-53 Compliance Guide
- PCI DSS 4.0 Compliance Guide
- HIPAA Compliance Guide
- GDPR Compliance Guide
- India DPDP Act Compliance Guide
- CMMC 2.0 Compliance Guide
- NIS2 Compliance Guide
- DORA Compliance Guide
- CIS Controls v8 Compliance Guide
- ISO 42001 Compliance Guide
- CCPA/CPRA Compliance Guide
- Essential Eight Compliance Guide
- Cyber Essentials Compliance Guide
- SOX ITGC Compliance Guide
- FedRAMP Compliance Guide
- HITRUST Compliance Guide
- ISO 27701 Compliance Guide
- EU AI Act Compliance Guide
- RBI Cybersecurity Framework Compliance Guide
Email Provider Authentication Guides
- Google Workspace Email Authentication Guide
- Microsoft 365 Email Authentication Guide
- Amazon SES Email Authentication Guide
- SendGrid Email Authentication Guide
- Mailchimp Email Authentication Guide
- Mailgun Email Authentication Guide
- Postmark Email Authentication Guide
- Zoho Mail Email Authentication Guide
- Brevo Email Authentication Guide
- HubSpot Email Authentication Guide
- Salesforce Marketing Cloud Email Authentication Guide
- Zendesk Email Authentication Guide
- Freshdesk Email Authentication Guide
- Proton Mail Email Authentication Guide
- Klaviyo Email Authentication Guide
- Constant Contact Email Authentication Guide
- Shopify Email Email Authentication Guide
- ActiveCampaign Email Authentication Guide
- Intercom Email Authentication Guide
- Odoo Email Authentication Guide
Incident Response Guides
- Ransomware Incident Response Guide
- Phishing Incident Response Guide
- Business Email Compromise Incident Response Guide
- Malware Infection Incident Response Guide
- Data Breach Incident Response Guide
- DDoS Attack Incident Response Guide
- Insider Threat Incident Response Guide
- Compromised User Account Incident Response Guide
- Lost or Stolen Device Incident Response Guide
- Website Defacement Incident Response Guide
- Supply Chain Compromise Incident Response Guide
- Cloud Account Compromise Incident Response Guide
- Leaked Credentials Incident Response Guide
- Third-Party Vendor Breach Incident Response Guide
- Cryptojacking Incident Response Guide
- Data Exfiltration Incident Response Guide
- MFA Fatigue Attack Incident Response Guide
- Zero-Day Vulnerability Incident Response Guide
- Deepfake Voice Fraud Incident Response Guide
- Rogue Device on Network Incident Response Guide
- Vishing Attack Incident Response Guide
- Malicious Browser Extension Incident Response Guide
- API Key Leak Incident Response Guide
- OAuth Consent Phishing Incident Response Guide