What are Security Tools tools on ToolYour?

ToolYour security tools check practical web and developer security signals — HTTP security headers, TLS certificates, cookie flags, JWTs, password strength, secure password generation, message digests, and SPF/DKIM/DMARC email authentication. Paste a URL, token, or text; read a structured report. These are focused checks (not antivirus, port scans, or breach databases). Browser use needs no signup. The same Phase 1 tools are available via REST and MCP on one API key and shared credit quota. For mixed HTTP/HTTPS assets on a page, use the existing Mixed Content Checker under digital tools.

What are the main security tools benefits?

• Headers, TLS, cookies, and email auth in one category
• JWT decode and crypto helpers for developers and agents
• Honest scope notes (e.g. TLS checker ≠ full SSL Labs grade)
• REST and MCP on all Phase 1 tools with weighted credits

• What do ToolYour security tools cover?

  Phase 1 covers HTTP security headers, TLS certificate inspection, cookie Secure/HttpOnly/SameSite flags, JWT decoding, password strength and generation, multi-algorithm hashing, and SPF/DKIM/DMARC DNS checks. They do not replace penetration tests, malware scanners, or breach monitoring.
• Do these tools store my URLs or passwords?

  URLs and inputs are processed to produce the report. ToolYour does not publish your scan history. Avoid pasting production secrets into public forms when possible; prefer your own environment for highly sensitive material.
• Are security tools available via API and MCP?

  Yes. All Phase 1 security tools are API-backed (/api/v1/security-apis/{slug}) and usable from REST and MCP with one ToolYour API key. URL fetches typically cost more credits than local JWT/hash/password tools.
• Where is the mixed content checker?

  Mixed HTTP assets on HTTPS pages live at /digital-tools/mixed-content-checker — cross-linked from this hub rather than duplicated here.