Validation
Validate United States ZIP codes including standard 5-digit and ZIP+4 formats
us-zip-code-validatorValidation
Validate SWIFT/BIC bank identification codes
swift-code-validatorValidation
Validate password strength against common security requirements (uppercase, lowercase, numbers, special chars, length)
strong-password-validatorSecurity
Show each HMAC step of HKDF Extract+Expand for protocol key derivation, including PRK, T(n), and OKM.
sp800-56c-hkdf-extract-and-expand-walkthroughSecurity
Generate an SSH key pair (Ed25519 recommended, RSA 4096, or ECDSA P-256) with an OpenSSH-format public key ready for ~/.ssh/authorized_keys, a SHA256 fingerprint, and a PEM private key. Optional passphrase encryption. Runs locally.
ssh-key-generatorSecurity
Detect common SQL injection attack patterns in input strings
sql-injection-detectorValidation
Check if a string contains special characters like !@#$%^&*()_+ and identify which ones are present
special-character-validatorSecurity
Generate cryptographically secure random key material driven by entropy budget — request N bits of entropy, get hex/base64/base64url output. Also supports custom-alphabet strings via crypto.randomInt (rejection-sampled, no modulo bias). Use this instead of Math.random()-based tools for any secret/key/token.
secure-random-generatorSecurity
Audit HTTP response headers for security compliance — parses the raw headers you paste (no network) and grades them against the OWASP secure-header set with value-level checks: HSTS max-age, CSP unsafe-inline/eval, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, COOP/COEP/CORP and more. Outputs a letter grade (A+ to F) plus per-header findings with copy-ready fix recommendations.
security-headers-checkerSecurity
Split a secret into n shares where any k (the threshold) are required to reconstruct it — Shamir's k-of-n scheme over GF(256). Pure in-process cryptography (crypto.randomBytes for polynomial coefficients), no network. Split a password/key/passphrase into shares held by separate people, then combine any k of them to recover it. Confidentiality only — no authenticity.
shamir-secret-sharingValidation
Validate 7-character UK/Irish SEDOL securities identifiers with weighted mod-10 check-digit verification and SEDOL-7 structure breakdown.
sedol-validatorValidation
Simulate the reading order and spoken semantics a screen reader may expose from a URL or raw HTML, then flag likely accessibility gaps
screen-reader-simulation-tester