SecuTools.io

Inspect CSP, HSTS, X-Frame-Options

Expand and trace redirects

Compute CVSS scores

Test for public/misconfigured buckets

Detect misconfigured Access-Control headers

Frame-busting & X-Frame-Options check

Check CSRF token presence & randomness

Browser fingerprinting - screen, DPR, user agent, network, preferences

Evaluate and score Content Security Policy configurations

Test for open redirect vulnerabilities in URLs

Analyze AWS S3 bucket policies for security issues

Deep analysis of CORS configurations and vulnerabilities

Inspect cookie flags, security risks, and best practices

Custom password/wordlists

XML external entity injection payloads

Tweak claims and signatures

Common OS injection payloads

Controlled redirect endpoints for SSRF testing

Test for OAuth and OpenID misconfigurations

MIME spoof test and file upload security validation

Browse and generate deserialization attack payloads

Create reusable structured prompts (system + user + examples).

Compare model responses across prompt variations.

Automatically shorten context to stay under token limits.

Detect system prompt exposure or overfitting.

Emulate model behavior under various personas.

Evaluate prompt-injection and system override attempts.

Detect harmful or biased language in model outputs.

Compare generated output with factual references.

Rate model safety, honesty, and relevance.

Visualize task-chains and tool-use flows.

Evaluate how well an agent retains prior context.

Connect documents → embeddings → LLM for retrieval QA.

Simulate agent reasoning and tool calls.

Scan web pages for prompt injection vulnerabilities

Classify risk levels in LLM outputs with examples

Generate project-ready LLM security audit checklists

Flashcards & rotating advice

Flashcards with short explanations of key AI terms.

Interactive tutorials for writing better prompts.

Summaries of top LLM research papers weekly.

Discover and compare open models from HF/Ollama.

shortcut prompt.

Convert text into spoken audio in the browser. Play, pause, tweak voice/pitch/rate, and export text (audio export requires server-side TTS).