{"schemaVersion":1,"name":"SecurityTools.hub","locale":"en","audience":["developers","security engineers","site owners"],"description":"Free online security and developer tools: SSL checker, HTTP header analyzer, JWT decoder, DNS lookup, password tools, hash generator, and more. No signup required.","url":"https://securitytoolshub.com","discovery":{"llmsTxt":"https://securitytoolshub.com/llms.txt","forAiPage":"https://securitytoolshub.com/for-ai","sitemap":"https://securitytoolshub.com/sitemap.xml"},"tools":[{"id":"ssl-checker","name":"SSL Checker","description":"Verify SSL/TLS certificate details, issuer, expiry date, and certificate chain for any domain.","url":"https://securitytoolshub.com/ssl-checker","category":"SSL/TLS","tags":["ssl","tls","certificate"]},{"id":"header-analyzer","name":"HTTP Header Analyzer","description":"Analyze HTTP response headers and check security headers like CSP, HSTS, X-Frame-Options.","url":"https://securitytoolshub.com/header-analyzer","category":"HTTP","tags":["headers","csp","hsts"]},{"id":"jwt-decoder","name":"JWT Decoder","description":"Decode JSON Web Tokens to inspect header, payload, and expiration without a secret key.","url":"https://securitytoolshub.com/jwt-decoder","category":"Crypto","tags":["jwt","auth","tokens"]},{"id":"password-strength-checker","name":"Password Strength Checker","description":"Analyze password strength with entropy calculation, crack time estimate, and improvement suggestions.","url":"https://securitytoolshub.com/password-strength-checker","category":"Password","tags":["password","entropy"]},{"id":"base64-encoder","name":"Base64 Encoder / Decoder","description":"Encode and decode text to and from Base64 format. Fully client-side — your data never leaves the browser.","url":"https://securitytoolshub.com/base64-encoder","category":"Crypto","tags":["base64","encode"]},{"id":"hash-generator","name":"Hash Generator","description":"Generate MD5, SHA-256, and SHA-512 cryptographic hashes from any text input. 100% client-side.","url":"https://securitytoolshub.com/hash-generator","category":"Crypto","tags":["hash","sha256","md5"]},{"id":"dns-lookup","name":"DNS Lookup","description":"Query DNS records (A, AAAA, MX, TXT, NS, CNAME) for any domain using public DNS API.","url":"https://securitytoolshub.com/dns-lookup","category":"DNS","tags":["dns","records","mx"]},{"id":"spf-checker","name":"SPF Record Checker","description":"Fetch and parse SPF (Sender Policy Framework) records for a domain to validate email security.","url":"https://securitytoolshub.com/spf-checker","category":"Email","tags":["spf","email","dns"]},{"id":"whois-lookup","name":"WHOIS Lookup","description":"Retrieve domain registration details including registrar, registrant, creation date, and expiry.","url":"https://securitytoolshub.com/whois-lookup","category":"Domain","tags":["whois","domain","registrar"]},{"id":"robots-txt-analyzer","name":"robots.txt Analyzer","description":"Fetch, parse, and validate robots.txt. Check which bots are allowed, view sitemaps, test URL paths.","url":"https://securitytoolshub.com/robots-txt-analyzer","category":"HTTP","tags":["robots","crawlers","seo"]},{"id":"url-encoder","name":"URL Encoder / Decoder","description":"Encode and decode URLs with percent-encoding. Component mode for query params. 100% client-side.","url":"https://securitytoolshub.com/url-encoder","category":"Crypto","tags":["url","encode","decode"]},{"id":"hmac-generator","name":"HMAC Generator","description":"Compute HMAC-SHA256, HMAC-SHA384, HMAC-SHA512. Hex or Base64 output. 100% client-side.","url":"https://securitytoolshub.com/hmac-generator","category":"Crypto","tags":["hmac","sha256","signature"]},{"id":"hsts-checker","name":"HSTS Checker","description":"Check Strict-Transport-Security header. Verify max-age, includeSubDomains, preload.","url":"https://securitytoolshub.com/hsts-checker","category":"HTTP","tags":["hsts","https","security"]},{"id":"password-generator","name":"Password Generator","description":"Generate secure random passwords with crypto.getRandomValues. Length 8–64, customizable chars.","url":"https://securitytoolshub.com/password-generator","category":"Password","tags":["password","random","secure"]},{"id":"aes-encrypt","name":"AES Encrypt / Decrypt","description":"AES-256-CBC encryption and decryption. 100% client-side. PBKDF2 key derivation.","url":"https://securitytoolshub.com/aes-encrypt","category":"Crypto","tags":["aes","encryption","decrypt"]},{"id":"cors-checker","name":"CORS Checker","description":"Check Access-Control-* headers. Verify Allow-Origin, credentials, methods.","url":"https://securitytoolshub.com/cors-checker","category":"HTTP","tags":["cors","cross-origin","headers"]},{"id":"clickjacking-checker","name":"Clickjacking Checker","description":"Check X-Frame-Options and CSP frame-ancestors. Detect clickjacking vulnerability.","url":"https://securitytoolshub.com/clickjacking-checker","category":"HTTP","tags":["clickjacking","x-frame-options","security"]},{"id":"dkim-checker","name":"DKIM Record Checker","description":"Verify DKIM DNS records. Domain + selector → TXT lookup and parse.","url":"https://securitytoolshub.com/dkim-checker","category":"Email","tags":["dkim","email","dns"]},{"id":"dmarc-checker","name":"DMARC Record Checker","description":"Verify DMARC DNS records. Policy, RUA, RUF, alignment.","url":"https://securitytoolshub.com/dmarc-checker","category":"Email","tags":["dmarc","email","dns"]},{"id":"hex-encoder","name":"Hex Encoder / Decoder","description":"Convert text to hex and hex to text. UTF-8. 100% client-side.","url":"https://securitytoolshub.com/hex-encoder","category":"Crypto","tags":["hex","encode","decode"]},{"id":"json-validator","name":"JSON Validator","description":"Validate, format, minify JSON. Error location. 100% client-side.","url":"https://securitytoolshub.com/json-validator","category":"Crypto","tags":["json","validate","format"]},{"id":"timestamp-converter","name":"Timestamp Converter","description":"Convert Unix epoch to date and date to timestamp. Seconds or milliseconds.","url":"https://securitytoolshub.com/timestamp-converter","category":"Crypto","tags":["timestamp","epoch","unix"]},{"id":"csp-checker","name":"CSP Checker","description":"Check Content-Security-Policy. Parse directives, detect unsafe-inline, unsafe-eval.","url":"https://securitytoolshub.com/csp-checker","category":"HTTP","tags":["csp","content-security-policy","xss"]},{"id":"port-checker","name":"Port Checker","description":"Check if TCP ports are open. Host + ports → connect test.","url":"https://securitytoolshub.com/port-checker","category":"DNS","tags":["port","tcp","scan"]},{"id":"uuid-generator","name":"UUID Generator","description":"Generate UUID v4 (random). RFC 4122. 100% client-side.","url":"https://securitytoolshub.com/uuid-generator","category":"Crypto","tags":["uuid","guid","random"]},{"id":"regex-tester","name":"Regex Tester","description":"Test regular expressions. Matches, capture groups, replace. JavaScript.","url":"https://securitytoolshub.com/regex-tester","category":"Crypto","tags":["regex","regexp","pattern"]},{"id":"lorem-ipsum","name":"Lorem Ipsum Generator","description":"Generate placeholder text. Paragraphs or words. Plain or HTML.","url":"https://securitytoolshub.com/lorem-ipsum","category":"Crypto","tags":["lorem","placeholder","dummy"]},{"id":"html-encoder","name":"HTML Entity Encoder / Decoder","description":"Encode &, <, > to HTML entities. Decode back. Prevent XSS.","url":"https://securitytoolshub.com/html-encoder","category":"Crypto","tags":["html","entity","xss"]},{"id":"cron-validator","name":"Cron Validator","description":"Validate cron expressions. Format: min hour day month weekday.","url":"https://securitytoolshub.com/cron-validator","category":"Crypto","tags":["cron","crontab","schedule"]},{"id":"mixed-content-checker","name":"Mixed Content Checker","description":"Find HTTP resources on HTTPS pages. Paste HTML, scan scripts, images, styles.","url":"https://securitytoolshub.com/mixed-content-checker","category":"HTTP","tags":["mixed content","https","http"]},{"id":"rsa-generator","name":"RSA Key Generator","description":"Generate RSA 1024/2048/4096 bit keys. PEM format. 100% client-side.","url":"https://securitytoolshub.com/rsa-generator","category":"Crypto","tags":["rsa","key","pem"]},{"id":"open-redirect-checker","name":"Open Redirect Checker","description":"Analyze URL for open redirect risks. Check redirect params.","url":"https://securitytoolshub.com/open-redirect-checker","category":"HTTP","tags":["open redirect","redirect","phishing"]},{"id":"cookie-analyzer","name":"Cookie Analyzer","description":"Parse Set-Cookie headers. Check HttpOnly, Secure, SameSite.","url":"https://securitytoolshub.com/cookie-analyzer","category":"HTTP","tags":["cookie","set-cookie","httponly","secure","samesite"]},{"id":"directory-listing-checker","name":"Directory Listing Checker","description":"Check if URL exposes directory listing. Index of, file list.","url":"https://securitytoolshub.com/directory-listing-checker","category":"HTTP","tags":["directory listing","index of","information disclosure"]},{"id":"url-parser","name":"URL Parser","description":"Parse URL into protocol, host, path, query params. 100% client-side.","url":"https://securitytoolshub.com/url-parser","category":"HTTP","tags":["url","parse","decode"]},{"id":"user-agent-parser","name":"User-Agent Parser","description":"Parse User-Agent string. Browser, OS, device, bot. 100% client-side.","url":"https://securitytoolshub.com/user-agent-parser","category":"HTTP","tags":["user-agent","browser","device"]},{"id":"uptime-checker","name":"Uptime Checker","description":"Quick one-off URL check. HTTP status + response time.","url":"https://securitytoolshub.com/uptime-checker","category":"DNS","tags":["uptime","ping","availability"]},{"id":"mx-lookup","name":"MX Record Lookup","description":"Check mail server (MX) records. Priority order.","url":"https://securitytoolshub.com/mx-lookup","category":"Email","tags":["mx","mail","dns","email"]},{"id":"ip-info","name":"IP Address Info","description":"Validate IPv4/IPv6. Private, loopback. 100% client-side.","url":"https://securitytoolshub.com/ip-info","category":"DNS","tags":["ip","ipv4","ipv6","private"]},{"id":"binary-encoder","name":"Binary Encoder / Decoder","description":"Text to binary and binary to text. 100% client-side.","url":"https://securitytoolshub.com/binary-encoder","category":"Crypto","tags":["binary","ascii","encode"]},{"id":"qr-generator","name":"QR Code Generator","description":"Generate QR code from text or URL. Download PNG. 100% client-side.","url":"https://securitytoolshub.com/qr-generator","category":"Crypto","tags":["qr","qrcode","barcode"]},{"id":"javascript-escape","name":"JavaScript Escape / Unescape","description":"Escape or unescape JS string literals. 100% client-side.","url":"https://securitytoolshub.com/javascript-escape","category":"Crypto","tags":["javascript","escape","string"]},{"id":"cidr-calculator","name":"CIDR Calculator","description":"IPv4 subnet calculator. Network, broadcast, host range.","url":"https://securitytoolshub.com/cidr-calculator","category":"DNS","tags":["cidr","subnet","ipv4"]},{"id":"hash-identifier","name":"Hash Identifier","description":"Detect hash type by length/format. MD5, SHA1, SHA256, bcrypt.","url":"https://securitytoolshub.com/hash-identifier","category":"Crypto","tags":["hash","identify","md5","sha256"]},{"id":"case-converter","name":"Case Converter","description":"UPPERCASE, lowercase, Title Case, Sentence case.","url":"https://securitytoolshub.com/case-converter","category":"Crypto","tags":["case","uppercase","lowercase","text"]},{"id":"text-cleaner","name":"Text Cleaner","description":"Trim, collapse spaces, remove whitespace.","url":"https://securitytoolshub.com/text-cleaner","category":"Crypto","tags":["whitespace","trim","text"]},{"id":"subdomain-finder","name":"Subdomain Finder","description":"Discover subdomains via Certificate Transparency logs. Passive enumeration — no brute force.","url":"https://securitytoolshub.com/subdomain-finder","category":"DNS","tags":["subdomain","enumeration","crt","osint"]},{"id":"technology-detector","name":"Technology Detector","description":"Detect what technologies power a website — CMS, frameworks, CDN, analytics from headers and HTML.","url":"https://securitytoolshub.com/technology-detector","category":"HTTP","tags":["tech stack","cms","framework","builtwith"]},{"id":"domain-age-checker","name":"Domain Age Checker","description":"Check when a domain was registered. Domain age, creation date, expiry, registrar — from WHOIS.","url":"https://securitytoolshub.com/domain-age-checker","category":"Domain","tags":["domain age","whois","registration","seo"]},{"id":"webhook-signature-validator","name":"Webhook Signature Validator","description":"Verify Stripe and GitHub webhook signatures. HMAC-SHA256. 100% client-side — secret never leaves browser.","url":"https://securitytoolshub.com/webhook-signature-validator","category":"Crypto","tags":["webhook","stripe","github","hmac","signature"]},{"id":"waf-detector","name":"WAF & CDN Detector","description":"Detect Cloudflare, Akamai, AWS WAF, Sucuri, Fastly. Passive header analysis — no attack payloads.","url":"https://securitytoolshub.com/waf-detector","category":"HTTP","tags":["waf","cdn","cloudflare","akamai","security"]},{"id":"redirect-chain-checker","name":"Redirect Chain Checker","description":"Follow 301/302/307/308 redirects. See every hop with status and latency. SEO & security.","url":"https://securitytoolshub.com/redirect-chain-checker","category":"HTTP","tags":["redirect","301","302","seo","chain"]},{"id":"homoglyph-checker","name":"Homoglyph / IDN Checker","description":"Detect homograph attacks — Cyrillic/Greek lookalikes in domains. Phishing prevention. 100% client-side.","url":"https://securitytoolshub.com/homoglyph-checker","category":"Crypto","tags":["homoglyph","idn","phishing","punycode"]},{"id":"punycode-converter","name":"Punycode Encoder / Decoder","description":"Convert IDN domains to ASCII (xn--) and back. Internationalized domain names. Free online.","url":"https://securitytoolshub.com/punycode-converter","category":"Crypto","tags":["punycode","idn","domain","encode"]},{"id":"api-key-generator","name":"API Key Generator","description":"Generate secure random API keys. Hex or URL-safe Base64. 100% client-side.","url":"https://securitytoolshub.com/api-key-generator","category":"Crypto","tags":["api key","secret","random","generate"]},{"id":"json-minifier","name":"JSON Minifier","description":"Minify JSON — remove whitespace. Validate and compress. 100% client-side.","url":"https://securitytoolshub.com/json-minifier","category":"Crypto","tags":["json","minify","compress"]},{"id":"email-validator","name":"Email Validator","description":"Validate email format and check MX records. Verify if domain accepts mail.","url":"https://securitytoolshub.com/email-validator","category":"Email","tags":["email","validate","mx","format"]},{"id":"reverse-dns","name":"Reverse DNS (PTR) Lookup","description":"Look up PTR hostname for an IP. Reverse DNS for IPv4/IPv6. Like HackerTarget.","url":"https://securitytoolshub.com/reverse-dns","category":"DNS","tags":["ptr","reverse dns","rdns","ip"]},{"id":"ip-geolocation","name":"IP Geolocation Lookup","description":"IP to location, ISP, ASN. Country, city, timezone. Free geolocation.","url":"https://securitytoolshub.com/ip-geolocation","category":"DNS","tags":["geolocation","asn","isp","ip location"]},{"id":"caa-checker","name":"CAA Record Checker","description":"Check Certificate Authority Authorization. Restrict which CAs can issue SSL certs.","url":"https://securitytoolshub.com/caa-checker","category":"DNS","tags":["caa","dns","ssl","certificate","security"]},{"id":"referrer-policy-checker","name":"Referrer-Policy Checker","description":"Check Referrer-Policy header. Control referrer info. Privacy & security. Like Barrion.","url":"https://securitytoolshub.com/referrer-policy-checker","category":"HTTP","tags":["referrer-policy","headers","privacy","security"]},{"id":"security-headers-grade","name":"Security Headers Grade","description":"Get A+ to F grade for HTTP security headers. Like SecurityHeaders.com.","url":"https://securitytoolshub.com/security-headers-grade","category":"HTTP","tags":["security headers","grade","csp","hsts","audit"]},{"id":"permissions-policy-checker","name":"Permissions-Policy Checker","description":"Check Permissions-Policy header. Restrict geolocation, camera, microphone.","url":"https://securitytoolshub.com/permissions-policy-checker","category":"HTTP","tags":["permissions-policy","feature-policy","privacy"]},{"id":"http-https-redirect-checker","name":"HTTP to HTTPS Redirect Checker","description":"Check if site redirects HTTP to HTTPS. Redirect chain. HSTS preload requirement.","url":"https://securitytoolshub.com/http-https-redirect-checker","category":"HTTP","tags":["http","https","redirect","hsts"]},{"id":"server-info-disclosure","name":"Server Info Disclosure Checker","description":"Detect Server, X-Powered-By headers leaking tech versions. Barrion competitor.","url":"https://securitytoolshub.com/server-info-disclosure","category":"HTTP","tags":["server header","x-powered-by","information disclosure"]},{"id":"x-content-type-options-checker","name":"X-Content-Type-Options Checker","description":"Check X-Content-Type-Options: nosniff. Prevent MIME sniffing.","url":"https://securitytoolshub.com/x-content-type-options-checker","category":"HTTP","tags":["x-content-type-options","nosniff","mime","security"]}],"toolsCount":66}