THE OPEN TOOLKIT / 5 TOOLS
Free Application Security Tools
JavaScript, browser extensions, tokens, response headers, and URLs. Inspect the details behind everyday application security decisions.
Free to use. No account. Local reviews. Optional AI summaries.
THE TOOLKIT
Find the right check.
Search by task, technology, or file format.
Every tool explains its limits. Local reviews stay on your device; online lookups and optional AI explain what is sent.
Application security
Chrome / Firefox manifest.json
Browser extension review
Review extension permissions, injected scripts and messaging boundaries. Import a Chrome Web Store link or paste a Chrome or Firefox manifest.
JavaScript / ES modules
JavaScript review
Inspect JavaScript syntax for dynamic execution, HTML injection sinks, message handling, and sensitive storage patterns.
JWT
JWT inspector
Decode token headers and claims. Inspect expiry, declared algorithms, and key references without sending the token anywhere.
Pasted HTTP response headers
Security header review
Turn HTTP response headers into a practical review of browser protections, with notes on what needs closer attention.
Absolute URL
URL inspector
Unpack a link before you open it. Review its scheme, hostname, embedded credentials, and encoding-related signals locally.
Explore
All tools
The full toolkit. No signup.
Free security toolsSupply chain
Dependencies, lockfiles, software inventories, package registries, and artifact integrity.
Supply chainCI and build security
GitHub Actions workflows and Dockerfiles.
CI and build securityAI and agent security
Review the instructions and capabilities you give an AI agent.
AI and agent securityNetwork and domains
Discover names in public certificate records.
Network and domains