All Security Tools
Browse the full catalog of 53 free online security tools - offensive penetration-testing utilities and defensive audit tools, all in one place.
- 98Total Tools
- 46Offensive Security
- 52Defensive Security
- 21Workflows
Offensive SecurityIntermediateTech Stack AnalyzerIdentify technologies used by target websites.tech-stack-analyzerAPIOffensive SecurityBasicHeader AnalyzerAnalyze HTTP security headers from the target.header-analyzerAPIDefensive SecurityBasicURL Reputation CheckerCheck URL reputation via multiple threat intelligence sources.url-reputationAPIDefensive SecurityBasicSSL CheckerCheck SSL certificate information and validity with comprehensive analysis.ssl-checkerAPIDefensive SecurityBasicPassword Strength CheckerCheck password strength with breach database check.password-checkerAPIDefensive SecurityBasicHTTP Status CheckerCheck HTTP status code, headers, and response time.http-statusAPIDefensive SecurityBasicSecurity Headers CheckerAudit security headers with scoring and grading.security-headersAPIDefensive SecurityBasicEmail Security CheckerCheck SPF, DKIM, DMARC, and BIMI for a domain.email-securityAPIDefensive SecurityBasicSSH Hardening ChecklistGenerate an SSH configuration audit checklist with severities, verification commands, and a hardened sshd_config template.ssh-auditAPIDefensive SecurityBasicFTP Exposure ChecklistGenerate an FTP security audit checklist covering anonymous login, bounce attacks, and TLS enforcement.ftp-scannerAPIDefensive SecurityBasicSMB Exposure ChecklistGenerate an SMB security audit checklist covering null sessions, share enumeration, signing, and EternalBlue (MS17-010).smb-scannerAPIDefensive SecurityBasicSNMP Exposure ChecklistGenerate an SNMP security audit checklist covering default community strings and v1/v2c plaintext enumeration.snmp-scannerAPIDefensive SecurityBasicRDP / VNC Exposure ChecklistGenerate an RDP and VNC security audit checklist covering NLA enforcement, BlueKeep (CVE-2019-0708), and authentication-less VNC.rdp-vnc-checkerAPIDefensive SecurityIntermediateIOC ExtractorExtract indicators of compromise (IPs, domains, hashes, emails, URLs, CVEs) from pasted text.ioc-extractorAPIDefensive SecurityIntermediateLog AnalyzerParse and analyze Apache, Nginx, syslog, and generic logs for anomalies and attack patterns.log-analyzerAPIDefensive SecurityBasicCVE Lookup & EnrichmentLook up CVE details from the NVD: CVSS score, CWE mapping, references, and exploit-DB link.cve-lookupAPIDefensive SecurityBasicVulnerability FeedBrowse recently published CVEs from the NVD, filterable by severity, keyword, and CISA KEV status.vulnerability-feedAPI
Showing 17 of 98 tools