HTTP security headers, TLS certificates, cookies, JWTs, passwords, hashes, and email authentication checks.
- Free
- No signup
- Fast
About the Security Toolkit toolkit
Use the Security Toolkit when you need to harden a site or debug auth — security headers, TLS certificates, cookie flags, JWT decode, password strength and generation, message digests, and SPF/DKIM/DMARC. Open any tool in the browser with no signup. All Phase 1 tools are API-backed via REST and MCP on one API key and 500 free requests per month. Mixed HTTP assets on HTTPS pages stay in the SEO Toolkit (Mixed Content Checker).
Frequently asked questions
What jobs does the Security Toolkit cover?
Web response hardening (headers, TLS, cookies), developer crypto helpers (JWT, passwords, hashes), and email authentication DNS (SPF/DKIM/DMARC). Not antivirus, port scanning, or breach monitoring.
Do I need an account to use Security Toolkit tools?
No for browser use. Create a developer account only if you want REST or MCP access.
How does this relate to the Developer Toolkit?
Headers, TLS, cookies, JWT, password, and hash tools also appear in the Developer Toolkit for builders. Full email-auth DNS (SPF/DKIM/DMARC) lives in the Security Toolkit.
Back to Toolkits
Security Toolkit
security tools
Security Headers Analyzer
Score CSP, HSTS, X-Frame-Options, and related HTTP security headers on a live URL with pass/warn/fail advice.
Freesecurity tools
SSL/TLS Certificate Checker
Inspect expiry, issuer, SANs, and fingerprint for an HTTPS host — client-visible certificate check, not a full SSL Labs grade.
Freesecurity tools
Cookie Security Analyzer
Parse Set-Cookie flags for Secure, HttpOnly, and SameSite on a live URL response.
Freesecurity tools
JWT Decoder
Decode JWT header and payload with weak-algorithm and expiry warnings — signature is not verified.
Freesecurity tools
Password Strength Checker
Estimate password strength from length, charset mix, entropy heuristics, and a short common-password list.
Freesecurity tools
Secure Password Generator
Generate a cryptographically random password with configurable length and character sets.
Freesecurity tools
Hash Generator
Compute MD5, SHA-1, SHA-256/384/512, or SHA-3 digests of text in one place — with legacy warnings for MD5/SHA-1.
Freesecurity tools
SPF / DKIM / DMARC Checker
Look up SPF, common DKIM selectors, and DMARC TXT records for a domain or URL hostname.
Free