Security

119 tools

⌘K

Enigma Machine Simulator

Historical cryptography comes to life through this interactive Enigma machine simulator. Users can explore the inner workings of the famous World War II cipher device by configuring authentic rotor sets I through V, selecting reflectors, and setting up the complex plugboard. As text is entered, the simulator provides a real-time visualization of the electrical signal path, demonstrating how mechanical components transformed plain language into sophisticated code. This simulator serves as a practical educational resource for students, history enthusiasts, and cryptography professionals interested in the mechanics of 20th-century security. By allowing manual adjustment of every setting, it provides a tactile understanding of how polyalphabetic substitution works in a mechanical context. Whether used for learning about Alan Turing's codebreaking efforts or simply experimenting with historical encryption methods, the simulator offers a precise and accessible way to engage with a pivotal piece of security history.

1 option🛡️ Security

RSA Playground

Exploring the mechanics of public-key cryptography becomes intuitive with RSA Playground. It provides a transparent environment where users can experiment with prime numbers to generate keys and observe the mathematical transformations during encryption and decryption. By using smaller primes than those found in production systems, the tool clarifies the step-by-step process of calculating the modulus, totient, and public and private exponents. Security students and developers can utilize this interactive sandbox to visualize how messages turn into ciphertexts and back again. The platform also demonstrates the inherent vulnerabilities of short keys, allowing users to attempt breaking the encryption through simple factorization. This hands-on approach reinforces why modern security standards require significantly larger bit lengths to remain effective against brute-force attacks.

1 option🛡️ Security

Certificate Chain Builder

Managing SSL/TLS certificates often requires more than just installing a primary certificate file. Most web servers and applications need a complete certificate chain to establish a verified path of trust with client browsers. Establishing this chain manually can be a complex task, especially when intermediate certificates are missing or incorrectly ordered. Users can simplify their security workflow by uploading a certificate and allowing the system to automatically identify and retrieve the necessary intermediate CA certificates. By analyzing the certificate metadata, the utility locates the required components to build a single, correctly ordered bundle. This process ensures that server configurations are technically accurate, helping administrators and developers prevent security warnings and maintain seamless, encrypted connections for their users.

1 option🛡️ Security

Redirect Chain Checker

Checking the flow of URL redirects is essential for web developers, SEO specialists, and security researchers aiming to audit site behavior. Redirect Chain Checker maps the complete path an HTTP request takes from its initial URL to the final destination, identifying every hop along the way. By uncovering 301 and 302 status codes, it helps users spot inefficient loops or overly long chains that can degrade page load speeds and negatively impact search engine rankings. Beyond simple path tracing, the utility provides deep visibility into HTTP response headers for each step of the process. This level of detail is critical for debugging server configurations, verifying SSL implementation, and ensuring that security headers are correctly applied throughout the redirection process. Professionals rely on these insights to maintain technical integrity and ensure a seamless, secure experience for their visitors.

1 option🛡️ Security

Secrets Scanner Simulator

Scanning source code for sensitive information prevents accidental leaks of critical credentials before they reach production. Developers and security engineers use the Secrets Scanner Simulator to identify exposed API keys, authentication tokens, private keys, and database connection strings within their files. By catching these vulnerabilities early in the development lifecycle, teams significantly reduce the risk of unauthorized access and potential data breaches. Operating entirely within the web browser, the scanner ensures that sensitive code never leaves the local machine. This client-side approach provides a secure environment for testing scripts and configuration files without the privacy concerns associated with uploading data to a remote server. It supports a wide range of common credential formats, making it an essential utility for verifying the cleanliness of repositories and deployment manifests.

1 option🛡️ Security

URL Defanger

Defang and refang URLs, IPs, and domains for threat intelligence

1 option🛡️ Security

IP Risk Checker

Check IP reputation, geolocation, and threat intelligence with fraud detection

1 option🛡️ Security

Threat Intelligence Feed Aggregator

Security professionals often struggle with managing disparate streams of threat data from various providers. The Threat Intelligence Feed Aggregator simplifies this process by centralizing Indicators of Compromise (IOCs) from multiple sources into a single, unified interface. It automatically handles the heavy lifting of gathering data, allowing users to maintain a clearer view of the current threat landscape without manually visiting individual feeds. Designed for incident responders and security analysts, the aggregator improves workflow efficiency through automated deduplication. By removing redundant entries across different datasets, it ensures that investigations remain focused on unique, actionable intelligence. Users can then export these refined collections, making it easy to integrate findings into internal security systems or documentation for deeper forensic analysis.

1 option🛡️ Security

SIEM Query Builder

Build detection queries for Splunk SPL, Elastic KQL, and Microsoft Sentinel. Includes presets for authentication, network, malware, and threat hunting with MITRE ATT&CK mappings.

1 option🛡️ Security

Threat Modeling Wizard (STRIDE & DREAD)

Build complete threat models with STRIDE decomposition, DREAD scoring, auto-generated threat libraries, and prioritized mitigations. CISSP Domain 1.

1 option🛡️ Security

Kubernetes Manifest Validator

Validate K8s manifests against CIS Kubernetes Benchmark security checks. Detect privileged containers, missing resource limits, and misconfigurations.

1 option🛡️ Security