Artifacts

Generates secure hex, Base64 and passphrase secrets and estimates their entropy.

Generates and checks HMAC-SHA256/384/512 signatures using Web Crypto.

Paste response headers to check Content-Security-Policy, Strict-Transport-Security, CORS and cookie attributes; no live request is made.

Produces strong passwords or word-based passphrases, several at once, using the browser's secure random source.

Looks through snippets, log output or environment files for leaked credentials and masks what it finds, all in the page.

Reads a certificate in PEM or DER form in the browser and lists who it was issued to and by, its dates, alternate names and hashes.