THE OPEN TOOLKIT / 5 TOOLS
Application security
A closer look.
JavaScript, browser extensions, tokens, response headers, and URLs. Inspect the details behind everyday application security decisions.
Free to use. No account. Local reviews. Optional AI summaries.
THE TOOLKIT
Find the right check.
Search by task, technology, or file format.
Every tool explains its limits. Local reviews stay on your device; online lookups and optional AI explain what is sent.
Application security
Chrome / Firefox manifest.json
Browser extension review
Review a browser extension manifest for permission scope, injected scripts, messaging boundaries, and update settings.
JavaScript / ES modules
JavaScript review
Inspect JavaScript syntax for dynamic execution, HTML injection sinks, message handling, and sensitive storage patterns.
JWT
JWT inspector
Decode token headers and claims. Inspect expiry, declared algorithms, and key references without sending the token anywhere.
Pasted HTTP response headers
Security header review
Turn HTTP response headers into a practical review of browser protections, with notes on what needs closer attention.
Absolute URL
URL inspector
Unpack a link before you open it. Review its scheme, hostname, embedded credentials, and encoding-related signals locally.