What are Security Tools tools on ToolYour?

ToolYour security tools check practical web and developer security signals — HTTP security headers, TLS certificates, cookie flags, JWTs, password strength, secure password generation, message digests, and SPF/DKIM/DMARC email authentication. Paste a URL, token, or text; read a structured report. These are focused checks (not antivirus, port scans, or breach databases). Browser use needs no signup. The same API-backed tools run via REST and MCP on one API key and shared credit quota. Agents can run security and ship-gate playbooks, then verify until gates pass. For mixed HTTP/HTTPS assets on a page, use the Mixed Content Checker under digital tools.

What are the main security tools benefits?

• Headers, TLS, cookies, and email auth in one category
• JWT decode and crypto helpers for developers and agents
• Honest scope notes (e.g. TLS checker ≠ full SSL Labs grade)
• REST and MCP on all Phase 1 tools with weighted credits

• What do ToolYour security tools cover?

  HTTP security headers, TLS certificate inspection, cookie Secure/HttpOnly/SameSite flags, JWT decoding, password strength and generation, multi-algorithm hashing, and SPF/DKIM/DMARC DNS checks. They do not replace penetration tests, malware scanners, or breach monitoring.
• Do these tools store my URLs or passwords?

  URLs and inputs are processed to produce the report. ToolYour does not publish your scan history. Avoid pasting production secrets into public forms when possible.
• Are security tools available via API and MCP?

  Yes. API-backed security tools are usable from REST and MCP with one ToolYour API key. URL fetches typically cost more credits than local JWT/hash/password tools. See security audit and ship gate.
• Where is the mixed content checker?

  Mixed HTTP assets on HTTPS pages live at /digital-tools/mixed-content-checker — cross-linked from this hub rather than duplicated here.