Security desk

Recommend algorithms/key sizes by use case. The result stays on this page.

Explain PQC algorithms and migration priority. The result stays on this page.

Detect Base64/hex/URL/rot13 encodings in a string. The result stays on this page.

Decodes PEM certificates to show subject, SANs and validity. The result stays on this page.

Verifies intermediate and root chain order. The result stays on this page.

Turn a list of certs into an expiry calendar. The result stays on this page.

Plan renewal automation for 200/100/47-day lifetimes. The result stays on this page.

Certificate Transparency Search. Find certificates issued for a domain. The result stays on this page.

Self-Signed Certificate Generator. Generate self-signed certs for labs. The result stays on this page.

Validates DKIM public key records for a selector. The result stays on this page.

Generate DKIM key pairs and DNS records. The result stays on this page.

Plan none→quarantine→reject with timelines. The result stays on this page.

Generate BIMI records and check SVG requirements. The result stays on this page.

Generate MTA-STS policy and DNS records. The result stays on this page.

Generate typo/lookalike variants of your domain to monitor. The result stays on this page.

Paste an email to highlight phishing indicators. The result stays on this page.

Builds Content-Security-Policy headers. The result stays on this page.

CSP Evaluator. Find weaknesses in an existing CSP. The result stays on this page.

Check CORS responses for risky configurations. The result stays on this page.

Check Secure, HttpOnly, SameSite flags. The result stays on this page.

Check HSTS header and preload eligibility. The result stays on this page.

Mixed Content Checker. Find HTTP resources on HTTPS pages. The result stays on this page.

WAF Rule Generator (ModSecurity/Cloudflare). Generate defensive WAF rules. The result stays on this page.

OWASP Top 10 Checklist Generator. Generate a checklist for your app. The result stays on this page.