vulnbeacon_TOOLS
← All tools

Developer utilities

SRI generator

Hash exact text or file bytes locally, or explicitly fetch one approved HTTPS asset. Choose SHA-256, SHA-384 or SHA-512. Content changes require a new hash.

How to use SRI generatorSteps, privacy & next steps

Create an integrity value for the exact script or stylesheet bytes you intend to serve.

Run this check

  1. Paste exact content or choose a local file; alternatively select the separate authorized HTTPS URL mode.
  2. Choose SHA-256, SHA-384 or SHA-512 and generate the value.
  3. Apply it to the intended script/link element and test actual loading, including cross-origin CORS requirements.

What you need

  • Exact UTF-8 text or file bytes, or one approved HTTPS asset up to 2 MiB in URL mode.

Your input & privacy

Local content stays in your browser. URL mode retrieves only the approved public asset; raw asset contents are not returned in the result.

Read the result

Copy the generated integrity value and verify your deployed resource matches it. MD5 and SHA-1 are not offered for SRI.

Keep in mind

  • URL mode refuses redirects, encoded, incomplete or oversized responses and never executes the asset.
  • SRI identifies bytes; it does not establish that the content is trustworthy. A content change needs a new value.

Your inputs, explained.

JWTs, source snippets, passwords, CSP text, files, hashes and Base64 are processed in browser memory. This toolkit does not upload or save those inputs.

Website checks send the approved URL to this service and contact the target. DNS checks disclose the domain to Cloudflare DNS over HTTPS. Email-breach checks send the full address to Have I Been Pwned when configured and explicitly requested.

Server checks are transient and rate limited. This application does not write tool input or result logs; your hosting provider and contacted services may retain network metadata under their own policies. Exports are saved only when you choose to download them.

Use tools only for assets you own or have permission to assess. Private scans and their saved reports use the separate authenticated VulnBeacon application.