Free tools

Check the filename in a download header

Inspect a Content-Disposition header, or provide a filename to generate a replacement. The header is never sent to another server.

In your browser nothing you paste is uploaded
Up to 1 MiB

Provide a Content-Disposition header value. Optionally provide the filename you intend to serve.

Loading this tool…

This checks one thing. A scan reads your whole repository and tells you what an attacker would find first.

Free scan
More tools
Path policy tester Test POSIX or Windows paths against a base directory without accessing files. Log injection checker Find control characters and record-boundary risks in supplied logs. Rate-limit simulator Simulate token buckets and request windows without sending traffic. JWT debugger Decode a token and catch alg:none, a missing expiry, and secrets in the payload. Secret scanner Paste a .env file or a diff and find the keys that should not be in it. CSP evaluator Grade a Content-Security-Policy and see which directive undoes it.