Tools

Security and developer utilities

Recon, DNS, headers, and encoding — browser tools stay local; network tools call our API.

Security

Security

JWT Encoder / Decoder

Encode or decode JSON Web Tokens in your browser. Inspect header, payload, and expiry — optional HS256 signing, nothing sent to a server.

Open →

Security

NPM Dependency Confusion Validator

Check if your internal package names exist on the public npm registry. Detect dependency confusion attack vectors.

Open →

Security

HTTP Security Headers Checker

Audit the HTTP security headers of any website. Score CSP, HSTS, X-Frame-Options, and more.

Open →

Security

SSL Certificate Checker

Inspect the SSL/TLS certificate for any domain. Check validity, expiry, issuer, and certificate chain.

Open →

Security

security.txt Checker

Check if a website has a valid security.txt file and verify its format per RFC 9116.

Open →

Security

TLS Analyzer

Analyze the TLS configuration of any HTTPS server. Check protocol versions, cipher suites, and known vulnerabilities.

Open →

Network & DNS

Network & DNS

CDN & WAF Detector

Detect the CDN or Web Application Firewall protecting any website. Identify Cloudflare, Akamai, AWS, and more.

Open →

Network & DNS

IP Lookup Tool

Look up geolocation, ISP, and ASN for any IPv4 or IPv6 address.

Open →

Network & DNS

DMARC & SPF Checker

Check a domain's DMARC policy, SPF record, and DKIM configuration. Protect your domain against email spoofing.

Open →

Network & DNS

CNAME Checker

Look up CNAME records for any domain and trace the full chain of aliases.

Open →

Network & DNS

CORS Policy Checker

Test the Cross-Origin Resource Sharing policy of any API or endpoint. Detect misconfigured CORS that could expose data.

Open →

Network & DNS

WHOIS Lookup

Look up domain registration details, registrar, creation/expiry dates, and nameservers.

Open →

Network & DNS

DNS Lookup Tool

Query all DNS record types (A, AAAA, MX, TXT, NS, CNAME, SOA) for any domain.

Open →

Network & DNS

Subdomain Finder

Discover publicly known subdomains for any domain using certificate transparency logs and passive DNS.

Open →

Network & DNS

Redirect Checker

Trace the full redirect chain for any URL. Detect redirect loops, mixed-content downgrades, and unnecessary hops.

Open →

SEO

SEO

Robots.txt Analyzer

Fetch and parse any website's robots.txt file. See allowed/disallowed paths, crawl delays, and sitemap references.

Open →

SEO

Sitemap Analyzer

Fetch and parse any website's XML sitemap. See URL count, priorities, and last-modified dates.

Open →

Code

Code

JavaScript / CSS / HTML Unminify

Beautify minified JavaScript, CSS, and HTML to make it human-readable. Runs entirely in your browser.

Open →

Code

Page Link Explorer

Enter a URL to list internal and external links found on that page — useful for recon and mapping site structure.

Open →

Utility

Utility

Base64 Encoder / Decoder

Encode or decode Base64 strings in your browser. Supports UTF-8 text and raw binary data.

Open →

Utility

URL Encoder / Decoder

Percent-encode or decode URL components instantly in your browser. Handles special characters and full URLs.

Open →

• PandaONE platform

Automate what these tools check manually

Continuous AI-driven testing on every commit — validated findings, proof packs, and PR fixes.

Get started