Security Tools
Harden headers, generate credentials, and find exposures.
.htpasswd Generator
Create Apache basic-auth credentials in bcrypt, APR1 or SHA-1.
Bcrypt Generator & Verifier
Hash a password with bcrypt or Argon2, or check one against a hash.
Clickjacking Tester
Test if your website is vulnerable to clickjacking by attempting to iframe it.
Content Security Policy (CSP) Generator
Generate strict CSP headers to protect your website from XSS attacks.
Directory Listing Checker
Scan your web server to see if index/directory listing is exposed.
Exposed Files Checker
Scan a server for publicly accessible .env, .git, and backup files.
Fail2Ban Filter Generator
Generate custom Fail2Ban jail and filter configurations with Regex patterns.
HSTS Checker
Verify HTTP Strict Transport Security (HSTS) headers and preload status.
ModSecurity Rule Generator
Write custom ModSecurity WAF rules to block malicious traffic patterns.
Password Generator
Generate strong random passwords or memorable passphrases.
Password Strength Checker
Test the entropy and brute-force resistance of your passwords.
Pwned Password Checker
Check if a password has been exposed in a data breach (using secure k-anonymity).
SSH Key Pair Generator
Generate secure RSA or Ed25519 SSH keys for server authentication.
Security Headers Checker
Grade any site's HTTP security headers and see exactly what to add.
TOTP Generator
Generate Time-based One-Time Passwords (2FA codes) from a secret key.
WordPress Salt Generator
Generate the eight security keys and salts for wp-config.php.
WordPress Vulnerability Checker
Scan your WordPress site for known vulnerabilities in core, plugins, and themes.