PUBLIC TOOLS. PRIVATE SCANS.
VulnBeacon security tools
Run a focused check, review the evidence and find a practical next step.
Explore all 14 tools
Security headers
Inspect browser security headers and get practical hardening guidance.
TLS & certificate
Check certificate identity, expiration and the negotiated TLS connection.
CORS inspector
Compare CORS origins and optionally check preflight handling.
CSP evaluator
Review a pasted policy or fetch content policies from a URL.
JWT debugger
Decode claims, review token timing and optionally verify an HS256 signature.
Secret scanner
Find credential-shaped values and distinguish candidates from public identifiers.
Password review
Review a password or generate a cryptographically random one locally.
Email security
Inspect published SPF, DMARC and MX records for your domain.
DNS security
Review CAA records and resolver-reported DNSSEC validation.
security.txt validator
Check your vulnerability disclosure contact and security.txt expiration.
Email breach check
Learn how the email breach check works. Lookups are unavailable until the operator configures a Have I Been Pwned subscription.
SRI generator
Generate integrity values from text, a file or an HTTPS asset.
Hash generator
Calculate SHA-256/384/512 and legacy MD5 or SHA-1 checksums locally.
Base64 encoder & decoder
Encode or decode Unicode text without sending it to a server.