BBITCOPSSECURITY TOOLS
ToolsLearnAboutContactPrivacy policyCookie policyTerms of useDisclaimer
BITCOPS library

All security tools

Focused utilities for defensive security, development, and research. No registration is required for basic use.

SHSecurity Headers CheckerInspect HTTP response headers and receive a practical defensive security score.→
TLSSSL Certificate CheckerReview a public TLS certificate chain summary, validity dates, issuer, and subject alternative names.→
JWTJWT DecoderDecode a JSON Web Token locally in your browser and inspect its header, payload, and time claims.→
#Hash GeneratorGenerate SHA-256, SHA-384, or SHA-512 digests locally using the Web Crypto API.→
PWPassword GeneratorCreate strong random passwords locally with cryptographically secure browser randomness.→
PSPassword Strength CheckerEstimate password entropy locally and learn how length and character variety affect resilience.→
DNSDNS LookupQuery common DNS record types for a public domain and view the returned records.→
SPFSPF CheckerFind and explain a domain’s SPF TXT record, including common policy signals.→
DKDKIM CheckerLook up a DKIM selector and inspect the published public-key record.→
DMDMARC CheckerAnalyze a domain’s DMARC policy and reporting configuration.→
CVCVSS v3.1 CalculatorCalculate a CVSS v3.1 base score, severity, and vector with metric explanations.→
IPSubnet CalculatorCalculate IPv4 network, broadcast, usable range, and host capacity from an address and prefix.→
IPIP InformationInspect a public IP address using a privacy-conscious external lookup service.→
64Base64 Encoder / DecoderEncode or decode Base64 text locally without uploading your content.→
URLURL Encoder / DecoderSafely encode or decode URL components in your browser.→
CORSCORS CheckerReview the CORS response headers returned by a public URL with SSRF-safe server checks.→
CSPCSP GeneratorBuild a considered Content-Security-Policy from explicit directives and review the result before deployment.→
CKCookie Security CheckerCheck public Set-Cookie attributes for Secure, HttpOnly, and SameSite protections.→
EHEmail Header AnalyzerParse pasted email headers locally and highlight authentication and delivery fields.→
3xxHTTP Status / Redirect CheckerFetch one public URL without following redirects and report status, location, and response headers.→