Security
API Key Format Identifier
Paste a key and see which service it likely belongs to, based on documented prefix conventions - useful for the moment a key shows up somewhere it shouldn't.
Paste a key
Stripe
Secret key (live)
If this key is real and you're pasting it anywhere other than your own editor, rotate it - this page runs entirely in your browser and never sends it anywhere, but that's not something you can verify just by looking at a page.
This is one question. ArchSetu answers it for a whole repository.
Call graph, dead code, blast radius and a health score, in about a minute.
Related tools
All Security tools →CORS Config Generator/ExplainerOrigins, methods, headers to generated CORS headers.Security Risk ScannerPaste a real GitHub repo - hardcoded secrets, unsafe dynamic execution, string-built SQL, insecure transport, and weak cryptography. Sign in required.JWT InspectorDecode a JWT header and payload, check expiry - decode-only, signing key never needed.Bcrypt Cost Factor CalculatorA measured benchmark on your hardware plus a target hash time to the right bcrypt cost factor.AWS IAM Policy GeneratorService, access level, and a resource ARN to a valid, scoped IAM policy JSON.OAuth Redirect URI ValidatorCheck a redirect URI against the OAuth 2.0 Security BCP - HTTPS, exact-match, no wildcards.
Was this tool helpful?