Category
Security tools
JWTs, CORS, cookies, OAuth redirects, and IAM policy - the checks worth running before something ships.
9 tools · all free
CORS Config Generator/ExplainerOrigins, methods, headers to generated CORS headers.Security Risk ScannerPaste a real GitHub repo - hardcoded secrets, unsafe dynamic execution, string-built SQL, insecure transport, and weak cryptography. Sign in required.JWT InspectorDecode a JWT header and payload, check expiry - decode-only, signing key never needed.Bcrypt Cost Factor CalculatorA measured benchmark on your hardware plus a target hash time to the right bcrypt cost factor.AWS IAM Policy GeneratorService, access level, and a resource ARN to a valid, scoped IAM policy JSON.API Key Format IdentifierPaste a key prefix - which service it belongs to, based on documented prefix conventions.OAuth Redirect URI ValidatorCheck a redirect URI against the OAuth 2.0 Security BCP - HTTPS, exact-match, no wildcards.Session Cookie Security CheckerPaste a Set-Cookie header - HttpOnly, Secure, SameSite checked, each missing flag mapped to its risk.CORS Preflight SimulatorMethod, Content-Type, and headers - whether a preflight OPTIONS request fires, per the Fetch spec.
These answer one question each. ArchSetu answers them for a whole repository.
Call graph, dead code, blast radius and a health score, in about a minute.