A forensic-grade image operations console. Redact credentials from screenshots, annotate with shapes and callouts, burn audit stamps, apply OCR-powered auto-redaction, deskew scanned documents, and export annotated images — all client-side with no upload.

Visual network topology designer. Drag-and-drop nodes, define subnets with VLSM planning, annotate connections, simulate packet flow paths, and export production-ready network diagrams — entirely in the browser.

Design AWS-style VPC architectures with subnet collision detection, CIDR allocation previews, and availability zone mapping. Generate infrastructure-as-code scaffolding from your visual design.

Build and visualize SSH tunnel configurations — local forwarding, remote forwarding, dynamic SOCKS proxies, and jump host chains — with generated ready-to-run commands.

Construct complex log search queries visually with field filters, time ranges, and boolean logic. Works against paste-in log data or uploaded log files processed entirely in-browser.

Upload multi-file server logs for local parsing, pattern extraction, and PII redaction. Process thousands of lines without sending data anywhere.

Strip secrets, credentials, IP addresses, email addresses, and custom patterns from log data before sharing or filing tickets. Pattern library is fully configurable.

Parse Linux Out-of-Memory killer log segments and get a structured analysis: which process was killed, memory pressure context, and suggested remediation paths.

Full TLS certificate analysis — chain validation, SAN enumeration, expiry tracking, cipher suite inspection, and HSTS/HPKP header review.

Audit HTTP response security headers against OWASP best practices. Identifies missing headers, misconfigured CSP directives, and insecure cookie flags.

Parse and inspect PEM certificates, certificate chains, and CSRs locally. Extracts subject, issuer, SANs, key usage, and validity details without uploading the certificate.

Decode and debug SAML assertions, OAuth tokens, OIDC ID tokens, and SSO flows. Visualizes claims, expiry, audience mismatches, and signature metadata.

Generate production-quality Kubernetes YAML manifests for Deployments, Services, ConfigMaps, Ingress, and more — with field validation and best-practice hints.

Paste or upload Terraform HCL to analyze resource graphs, detect common misconfigurations, and visualize provider dependency trees.

Paste a Docker Compose file and get an interactive service dependency graph showing networks, volumes, port mappings, and environment bindings at a glance.

Test NGINX location block routing logic against request paths without running a server. Identifies which block wins and why — invaluable for debugging complex configurations.

500+ curated Linux commands with usage examples, flag references, and a visual pipeline builder for chaining commands with pipes and redirects.

Paste any shell command or script for plain-language explanation and risk auditing. Flags destructive operations, privilege escalations, and potentially dangerous patterns before you run anything.

A forensic patching engine for HTML and config files. Locate, diff, and precisely modify lines in large files with a visual before/after comparison before writing any changes.

A full-featured local photo management tool. Tag, categorize, star-rate, rename, deduplicate, and batch-move thousands of photos into organized folders — using the browser's File System Access API with zero uploads.

Semantic JSON/YAML configuration drift detection for Kubernetes, Terraform, and cloud environments. Paste two config versions to get a structural diff with path-level change classification.

Generate SPF, DKIM, and DMARC DNS records for email authentication. Enter your domain and mail provider details, get copy-paste TXT records ready for your DNS zone.

Generate Apache-compatible htpasswd entries with bcrypt, SHA-256, SHA-512, and MD5 (apr1) algorithms. Create password-protected directories without needing the CLI tool.

Interactive jq JSON query builder — paste a JSON payload, type a filter expression, see output instantly. Generates the equivalent shell command for use in pipelines.

Decode SELinux AVC denials and AppArmor log messages into plain English. Explains what was blocked, why, and suggests the correct policy fix.

Generate CSRs, self-signed certificates, and key pairs visually. Fill in subject fields, select algorithms, and get the complete OpenSSL commands and output files.

Simulate Linux file permission checks with kernel-accurate path traversal. Enter a user, file path, and operation to see exactly how the permission check resolves through the directory hierarchy.

TCP/UDP port database with risk ratings, protocol descriptions, Nmap scan commands, and local audit scripts. Search by port number, service name, or risk level.

Deep TLS certificate chain analysis — decode PEM/DER certificates, inspect X.509 extensions, check for weak signature algorithms, and visualize the full trust path from leaf to root CA.

Interactive reference tables for Chi-square, Z-score, and t-Student distributions. Look up critical values, calculate p-values, and visualize rejection regions with live distribution curves.

Multi-mode calculator: scientific, base converter (bin/oct/dec/hex), transfer time estimator, RAID capacity planner, and SLA availability calculator — all in one tool.

Production-ready crontab manifest generator with CRON_TZ timezone injection, flock execution locking, error hooks, environment headers, and multi-job queue management.

Advanced Base64 tool with hex stream conversion, visual bit-mapping, and UTF-8 forensic analysis — for debugging encoded payloads in JWTs, API responses, and binary protocols.

Side-by-side and unified diff views with word-level diffing, change statistics, and syntax-aware comparison — far beyond the inline diff checker.

Collapsible tree view with click-to-copy dot-notation paths, format/minify toggle, and deep structure navigation — for exploring complex JSON payloads.

Full header/payload/signature breakdown with temporal forensics (exp, iat, nbf timestamps), algorithm detection, and claim-level inspection beyond the inline decoder.

Visual bitmask mapping, wildcard mask calculation, broadcast address detection, and binary network analysis with a full usable-hosts breakdown.

Visually construct iptables and UFW firewall rules with chain selection, protocol matching, and port ranges. Generates copy-paste commands with proper ordering.

Multi-format data conversion hub — Base64, JWT, JSON, URL encoding, hex, and more in a single unified interface with bidirectional transformation.

Generate database and service connection strings for PostgreSQL, MySQL, MongoDB, Redis, and more. Supports SSL options, SSH tunneling parameters, and query string options.

Visualize cron schedule execution on a timeline. Paste a cron expression to see upcoming fire times, interval gaps, and schedule density over the next 24 hours or week.

Check DNS record propagation across 12+ global resolvers simultaneously. See which nameservers have updated and which are still serving stale records.

Build systemd service unit files with a visual form. Set ExecStart, restart policies, dependencies, environment, sandboxing options, and generate a ready-to-deploy .service file.

Audit AWS IAM policies and Kubernetes RBAC manifests for overly permissive rules, wildcard actions, missing conditions, and common security anti-patterns.

Full-featured regex engine with named capture groups, lookahead/lookbehind support, match highlighting, substitution preview, and flag toggles (g, i, m, s).