PUBLIC TOOLS. PRIVATE SCANS.
VulnBeacon security tools
Run a focused check, review the evidence and find a practical next step.
Explore all 14 tools
Security headers
Inspect browser security headers and get practical hardening guidance.
TLS & certificate
Check certificate identity, expiration and the negotiated TLS connection.
CORS inspector
Compare CORS origins and optionally check preflight handling.
CSP evaluator
Review a pasted policy or fetch content policies from a URL.
JWT debugger
Decode claims, review token timing and optionally verify an HS256 signature.
Secret scanner
Find credential-shaped values and distinguish candidates from public identifiers.
Password review
Review a password or generate a cryptographically random one locally.
Email security
Inspect published SPF, DMARC and MX records for your domain.
DNS security
Review CAA records and resolver-reported DNSSEC validation.
security.txt validator
Check your vulnerability disclosure contact and security.txt expiration.
Email breach check
Coming soon. Learn how the VulnBeacon email breach check will work.
SRI generator
Generate integrity values from text, a file or an HTTPS asset.
Hash generator
Calculate SHA-256/384/512 and legacy MD5 or SHA-1 checksums locally.
Base64 encoder & decoder
Encode or decode Unicode text without sending it to a server.