SEC
安全桌
哈希、编码、头字段，以及你更愿意亲自运行的检查。这里不会要求账户。
1–24 / 915
Password Generator
已上线Generate strong random passwords and passphrases locally — nothing is sent or stored.
打开工具Password Strength / Entropy Checker
已上线Estimates password entropy and crack time (client-side only). The result stays on this page.
打开工具Hash Generator
已上线Generates MD5, SHA-1, SHA-256, SHA-512 hashes. The result stays on this page.
打开工具bcrypt Hash Generator & Verifier
已上线bcrypt Hash Generator & Verifier. Generate and verify bcrypt hashes. The result stays on this page.
打开工具SSL/TLS Certificate Checker
已上线Checks certificate validity, chain, expiry and protocols for a host. The result stays on this page.
打开工具CSR Generator & Decoder
已上线Generates and decodes certificate signing requests. The result stays on this page.
打开工具Certificate Conversion Command Builder
已上线Builds OpenSSL commands to convert PEM/PFX/DER/P7B. The result stays on this page.
打开工具Certificate Key Matcher
已上线Check a certificate matches its private key/CSR. The result stays on this page.
打开工具OpenSSL Command Builder
已上线OpenSSL Command Builder. Build common OpenSSL commands. The result stays on this page.
打开工具SPF Record Generator & Checker
已上线Builds and validates SPF records, counts DNS lookups. The result stays on this page.
打开工具SPF Flattening Tool
已上线Flatten includes to stay under 10 DNS lookups. The result stays on this page.
打开工具DMARC Generator & Checker
已上线Builds DMARC policies and validates existing records. The result stays on this page.
打开工具Email Header Analyzer
已上线Parses email headers to trace hops and check SPF/DKIM/DMARC results. The result stays on this page.
打开工具Email Deliverability Checker
已上线Check domain authentication, PTR and blocklists together. The result stays on this page.
打开工具Bulk Sender Requirements Checker
已上线Check compliance with Gmail/Yahoo/Microsoft sender rules. The result stays on this page.
打开工具Security Headers Checker
已上线Checks a site's HTTP security headers and grades them. The result stays on this page.
打开工具Subresource Integrity (SRI) Hash Generator
已上线Generate SRI hashes for scripts/styles. The result stays on this page.
打开工具JWT Decoder
已上线Decodes JWT header and payload and shows expiry. The result stays on this page.
打开工具SAML Response Decoder
已上线SAML Response Decoder. Decode and inspect SAML assertions. The result stays on this page.
打开工具CVE Lookup
已上线Searches CVE details, severity and references. The result stays on this page.
打开工具CVSS Score Calculator
已上线Calculates CVSS v3.1 base scores from metrics. The result stays on this page.
打开工具CISA KEV Checker
已上线Check whether CVEs are in the Known Exploited list. The result stays on this page.
打开工具Dependency Vulnerability Checker
已上线Paste package.json/requirements.txt to find known CVEs. The result stays on this page.
打开工具File Hash Reputation Lookup
已上线Check a hash against public threat intel sources. The result stays on this page.
打开工具指南
Pillar guides for this desk. Published supporting pages are linked from the pillar they belong to.
Cryptography & Encoding
PKI & Certificates
Email Security
Web & API Security
Vulnerability Management
Threat Intelligence & IOC Analysis
Identity & Access Security
Endpoint & Network Defense
Logging, SIEM & Detection
Incident Response & Forensics
Risk, Governance & Compliance
Cloud, Container & DevSecOps
Privacy & Data Protection
Security Awareness
Security Policies & Templates
Security Reference & Career
SIEM Detection Rule Guides
- Splunk Detection Engineering Guide
- Microsoft Sentinel Detection Engineering Guide
- Elastic Security Detection Engineering Guide
- IBM QRadar Detection Engineering Guide
- Google SecOps Detection Engineering Guide
- Wazuh Detection Engineering Guide
- Sigma Detection Engineering Guide
- CrowdStrike Falcon LogScale Detection Engineering Guide
- Sumo Logic Detection Engineering Guide
Compliance Framework Guides
- ISO 27001 Compliance Guide
- SOC 2 Compliance Guide
- NIST CSF 2.0 Compliance Guide
- NIST SP 800-53 Compliance Guide
- PCI DSS 4.0 Compliance Guide
- HIPAA Compliance Guide
- GDPR Compliance Guide
- India DPDP Act Compliance Guide
- CMMC 2.0 Compliance Guide
- NIS2 Compliance Guide
- DORA Compliance Guide
- CIS Controls v8 Compliance Guide
- ISO 42001 Compliance Guide
- CCPA/CPRA Compliance Guide
- Essential Eight Compliance Guide
- Cyber Essentials Compliance Guide
- SOX ITGC Compliance Guide
- FedRAMP Compliance Guide
- HITRUST Compliance Guide
- ISO 27701 Compliance Guide
- EU AI Act Compliance Guide
- RBI Cybersecurity Framework Compliance Guide
Email Provider Authentication Guides
- Google Workspace Email Authentication Guide
- Microsoft 365 Email Authentication Guide
- Amazon SES Email Authentication Guide
- SendGrid Email Authentication Guide
- Mailchimp Email Authentication Guide
- Mailgun Email Authentication Guide
- Postmark Email Authentication Guide
- Zoho Mail Email Authentication Guide
- Brevo Email Authentication Guide
- HubSpot Email Authentication Guide
- Salesforce Marketing Cloud Email Authentication Guide
- Zendesk Email Authentication Guide
- Freshdesk Email Authentication Guide
- Proton Mail Email Authentication Guide
- Klaviyo Email Authentication Guide
- Constant Contact Email Authentication Guide
- Shopify Email Email Authentication Guide
- ActiveCampaign Email Authentication Guide
- Intercom Email Authentication Guide
- Odoo Email Authentication Guide
Incident Response Guides
- Ransomware Incident Response Guide
- Phishing Incident Response Guide
- Business Email Compromise Incident Response Guide
- Malware Infection Incident Response Guide
- Data Breach Incident Response Guide
- DDoS Attack Incident Response Guide
- Insider Threat Incident Response Guide
- Compromised User Account Incident Response Guide
- Lost or Stolen Device Incident Response Guide
- Website Defacement Incident Response Guide
- Supply Chain Compromise Incident Response Guide
- Cloud Account Compromise Incident Response Guide
- Leaked Credentials Incident Response Guide
- Third-Party Vendor Breach Incident Response Guide
- Cryptojacking Incident Response Guide
- Data Exfiltration Incident Response Guide
- MFA Fatigue Attack Incident Response Guide
- Zero-Day Vulnerability Incident Response Guide
- Deepfake Voice Fraud Incident Response Guide
- Rogue Device on Network Incident Response Guide
- Vishing Attack Incident Response Guide
- Malicious Browser Extension Incident Response Guide
- API Key Leak Incident Response Guide
- OAuth Consent Phishing Incident Response Guide