Audit website HTTP response headers for missing Content-Security-Policy, Strict-Transport-Security, and X-Frame-Options.
Configures headers input during client-side http security headers (csp, hsts, x-frame) inspector computation.
Configures curl domain during client-side http security headers (csp, hsts, x-frame) inspector computation.
Primary input payload or parameter set for HTTP Security Headers (CSP, HSTS, X-Frame) Inspector.
Selects the target processing mode or specification standard for HTTP Security Headers (CSP, HSTS, X-Frame) Inspector.
HSTS forces compliant web browsers to strictly communicate over encrypted HTTPS connections. This thwarts SSL stripping, man-in-the-middle attacks on public Wi-Fi networks, and prevents unencrypted plaintext session cookie transmission.
Clickjacking occurs when an attacker renders your authenticated website inside a transparent or hidden iframe to trick users into clicking buttons. Declaring X-Frame-Options: DENY completely prevents third-party framing.
Verify that your headers input matches the expected string format. Load a built-in sample preset to compare structural formatting.
Check the curl domain setting in HTTP Security Headers (CSP, HSTS, X-Frame) Inspector to ensure encoding, precision, or specification version matches your target runtime.
Convert JSON Web Keys (JWKS / JWK) to standard PKCS#8 PEM public and private keys for JWT verification.
JSON Web Token（JWT）をデコードし、ヘッダーとペイロードのクレームを解析。有効期限の自動計算や署名検証をブラウザ上で安全にローカル実行します。
暗号論的擬似乱数生成器（Web Crypto CSPRNG）を用いた高エントロピーパスワード、覚えられるDicewareパスフレーズ、PIN、APIトークンをブラウザ内で瞬時に安全生成。NIST SP 800-63B準拠。
SHA-256、SHA-512、MD5、SHA-1、SHA-3、Keccak、CRC32をブラウザ内で瞬時に一括算出。Web Crypto APIによる100%クライアントサイド完結。
Decode, verify, and inspect JWT headers, payloads, and claims with local secret or public key without sending data to servers.
Evaluate password strength using information entropy math and zxcvbn heuristic estimation with zero network transmission.