SHA Hash Generator
Calculate SHA-256, SHA-384, or SHA-512 for text and local files.
SecurityBrowser toolbox
Security tools
Inspect tokens, certificates, headers, authentication flows, hashes, and sensitive data with explicit verification limits and local processing where possible.
Browse by category
12 categoriesSecurity
17 tools available
JWT Decoder
Inspect a JWT header, payload, and time claims without sending the token anywhere.
SecurityPassword Generator & Strength Checker
Create passwords, passphrases, PINs, and random tokens with Web Crypto, then inspect strength locally.
SecurityEmail Header & Phishing Analyzer
Inspect message routes, authentication assertions, risky links, attachments, and privacy-safe reports.
SecurityWeb Security Headers & CSP Checker
Audit response headers, CSP, cookies, and CORS, then generate practical deployment fixes.
SecurityCertificate, CSR & Key Inspector
Inspect X.509 certificates, CSRs, keys, chains, and PKCS#12 containers entirely in-browser.
SecurityOAuth 2.0, OIDC & PKCE Debugger
Build a safe PKCE flow, parse callbacks, inspect claims, and verify JWT signatures with JWKS.
SecurityWebhook Signature & Payload Tester
Generate and verify byte-exact webhook HMAC signatures with provider presets and test cases.
SecurityPasskey & WebAuthn Tester
Run real passkey ceremonies, decode credential evidence, verify assertions, and inspect browser support.
SecuritySAML SSO Debugger
Decode SAML messages and HAR evidence, evaluate assertions, inspect metadata, verify signatures, and compare configurations.
SecuritySBOM Supply Chain Explorer
Validate CycloneDX, SPDX and Syft SBOMs, explore dependencies, compare releases, and optionally query OSV.
SecurityContent Credentials & Media Provenance Checker
Verify C2PA manifests locally, inspect recorded actions and ingredients, compare media, and flag sensitive metadata.
SecurityPCAP Network Analyzer
Inspect PCAP and PCAPNG traffic locally with packet decoding, conversations, DNS, HTTP, TLS and privacy findings.
SecurityEML & MIME Email Analyzer
Inspect raw EML messages, MIME trees, safe bodies, delivery claims, links and attachments without uploading mail.
SecuritySensitive Data, PII & Secret Redactor
Find, review and consistently redact secrets and personal data without uploading source text.
SecurityEmail Authentication & Domain Health Checker
Audit SPF, DKIM, DMARC, BIMI and transport policies with optional DNS lookup.
SecurityOpen Source License Compliance Checker
Review dependency licenses, SPDX expressions, policy decisions and attribution gaps locally.
Security