Security Headers Checker

100% Free

Check any URL's response headers for HSTS, CSP, X-Frame-Options and report grade.

100% Secure

No Sign Up

Client-Side

Coming Soon

We're building Security Headers Checker right now. Drop your email and we'll notify you the moment it's live.

Check any URL’s response headers for HSTS, CSP, X-Frame-Options and report grade.

This tool is on the roadmap. The interface and full documentation are being built — check back soon, or request priority to bump it up the queue.

Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes instantly. Client-side.

Sign HMAC JWTs (HS256/HS384/HS512) for API testing — secret, payload, algorithm, signed token. Pairs with the JWT Decoder for round-trip verify.

Generate MD5 hashes from any text — checksums, fingerprints, and legacy compatibility. 100% client-side.

Generate strong, secure and random passwords instantly. Keep your accounts safe with our advanced password generator.

Generate SHA-256 hashes and HMAC-SHA256 signatures — the secure standard for file integrity, JWT signing, and API request signatures.

Browse more free tools — no sign-up required