About BITCOPS Security Tools
BITCOPS Security Tools is a free collection of utilities for people who work in defensive security: analysts, developers, students and system administrators. It is published by BITCOPS, a cyber security training project that also runs courses, a learner community and a discussion forum at bitcops.net.
What this site is for
Security work involves a lot of small, repetitive checks: decoding a token, reading a certificate chain, working out why an email failed authentication, scoring a vulnerability. Most of those checks are quick, but the tooling around them is often cluttered, slow, or asks you to create an account before it will do anything. This site exists to do those checks immediately, explain the output in plain language, and get out of the way.
How the tools work
Wherever it is technically possible, processing happens in your browser. Hashing, Base64 and URL encoding, JWT decoding, password generation and CVSS scoring all run locally using standard browser APIs. Your input is never transmitted to us for those tools.
A small number of tools have to reach the public internet to be useful. Looking up DNS records, inspecting a TLS certificate, or reading the response headers of a website all require a request to be made from our server. For those tools, and only those, the target you enter is sent to us so the lookup can run. This is described in detail in the Privacy Policy.
Editorial approach
Every tool is paired with an explanation of what the result means and, where relevant, what a reasonable next step would be. We try to avoid two common failures: presenting a raw dump with no interpretation, and presenting a single letter grade as though security were a score out of ten. Findings are described with their context and limitations.
Responsible use
These are defensive and diagnostic tools. They are intended for systems you own or have explicit written permission to assess. Running checks against third-party infrastructure without authorisation may be unlawful in your jurisdiction. See the Disclaimer for the full position.
Contact
Corrections, feature requests and security reports are welcome at admin@bitcops.net, or through the contact page.