Free tools

Look up a weakness by its CWE

Type a CWE number or a few words. You get MITRE's description and the attack patterns MITRE links to that weakness.

In your browser nothing you paste is uploaded

Searches MITRE's CWE list, loaded with this page. What you type stays in this tab.

Data from MITRE CWE and CAPEC, © The MITRE Corporation, used under MITRE's terms of use.

This checks one thing. A scan reads your whole repository and tells you what an attacker would find first.

Free scan
More tools
JWT debugger Decode a token and catch alg:none, a missing expiry, and secrets in the payload. Secret scanner Paste a .env file or a diff and find the keys that should not be in it. CSP evaluator Grade a Content-Security-Policy and see which directive undoes it. SRI hash generator Generate the integrity attribute for a script or stylesheet you load from a CDN. Hash generator MD5, SHA-1, SHA-256, SHA-384 and SHA-512 of any text, at once. Base64 encoder Encode and decode Base64, including URL-safe, with UTF-8 handled properly.