Free tools

Score a CVSS 3.1 vector

Paste a vector string or pick the metrics below. The score and the vector update together as you change either one.

In your browser nothing you paste is uploaded

Vector string

Score

9.8Critical

Temporal: 9.8
Impact subscore: 5.9
Exploitability subscore: 3.9

Base metrics

Attack vector Attack complexity Privileges required User interaction Scope Confidentiality Integrity Availability

Temporal metrics

Exploit code maturity Remediation level Report confidence

Scores follow the CVSS v3.1 specification published by FIRST. CVSS is a trademark of FIRST.Org, Inc. A score rates a vulnerability in general; it does not say how exposed your own deployment is.

This checks one thing. A scan reads your whole repository and tells you what an attacker would find first.

Free scan

More tools

JWT debugger Decode a token and catch alg:none, a missing expiry, and secrets in the payload. Secret scanner Paste a .env file or a diff and find the keys that should not be in it. CSP evaluator Grade a Content-Security-Policy and see which directive undoes it. SRI hash generator Generate the integrity attribute for a script or stylesheet you load from a CDN. Hash generator MD5, SHA-1, SHA-256, SHA-384 and SHA-512 of any text, at once. Base64 encoder Encode and decode Base64, including URL-safe, with UTF-8 handled properly.