Password strength
Estimate password entropy locally. Nothing is sent to a server.
Enter a password to assess it locally.
Security tools for practitioners
Small, useful utilities that run in your browser. No account, no upload and no pretending a toy tool is a full assessment platform.
IOC defanger
Convert URLs, domains and email indicators into safer text for tickets and reports.
Output appears here.
JWT payload viewer
Decode the visible JWT payload locally. This does not verify the signature.
Paste a JWT to inspect its payload locally.
CDF Assessment Lab
The next layer is purpose-built assessment tooling: security headers, TLS posture, cloud baseline checks, attack-surface review and evidence-ready reports.
Build philosophy- Run safely and transparently.
- Show the evidence behind every result.
- Export findings for remediation.
- Publish open-source versions where practical.