Small tools, no login.

Everything here runs in your browser. Inputs are not transmitted, not logged, and not stored — you can check that in the network tab.

Investigation

2 tools

For reading a message or mapping a domain before you touch anything.

Email header analyzer

SPF, DKIM and DMARC results, the Received chain with hop delays, and From / Return-Path / Reply-To mismatches.

open

OSINT query builder

Build search queries for indexed pages, documents, exposed files, subdomains, third-party mentions, and a person.

open

Quick checks

3 tools

Small lookups you reach for mid-engagement.

Subnet calculator

IPv4 and IPv6 prefix math: network, broadcast, usable range, host count, and the mask in dotted and wildcard form.

open

JWT inspector

Decode a token's header and claims, check expiry and not-before, and flag the algorithms you should not accept.

open

Hash identifier

Identify likely algorithms from length, prefix, and charset, with the cracking mode to start from.

open

On the list

Next up: a certificate-transparency view for a domain, an image metadata reader that never uploads the file, and a base64/URL/hex converter that keeps state in the URL so a result is shareable without a backend.

If you want a tool that isn't here, ask — if it's small and doesn't need your data on our servers, it will probably get built.

Request a tool

Scope and consent

These tools help you look, not break in. Only investigate assets you own or have written permission to test. If a query surfaces credentials or personal data, report it to the owner and delete your copy.