Reference & Standards · Security
Open Worldwide Application Security Project: standards like the Top 10.
Discover the 23 best browser-based tools for security. Run directly in any modern browser without local installation. Curated, compared, and updated for developers.
| Tool | Pricing | Platforms | Top Strength | Link |
|---|---|---|---|---|
| OWASP | free | web | Open Worldwide Application Security Project: standards like the Top 10. | Details → |
| SSL Labs | free | web | Deep SSL/TLS server certificate and configuration analysis. | Details → |
| Mozilla SSL Config Generator | free | web | Generate recommended TLS configurations for many servers. | Details → |
| Security Headers | free | web | Scan any site's HTTP security response headers and get a grade. | Details → |
| CSP Evaluator | free | web | Google's tool to evaluate and debug Content Security Policies. | Details → |
| crt.sh | free | web | Search certificate transparency logs for any domain. | Details → |
| Let's Debug | free | web | Diagnose why Let's Encrypt certificate issuance fails for a domain. | Details → |
| Snyk | freemium | web, cli | Find and fix vulnerabilities in dependencies, containers and code. | Details → |
| Socket | freemium | web | Detect supply-chain attacks and malicious changes in npm and PyPI packages. | Details → |
| GitGuardian | freemium | web | Enterprise secrets detection and remediation platform. | Details → |
Showing top 10 of 23. Browse the full grid below.
Reference & Standards · Security
Open Worldwide Application Security Project: standards like the Top 10.
SSL & TLS · Security
Deep SSL/TLS server certificate and configuration analysis.
SSL & TLS · Security
Generate recommended TLS configurations for many servers.
Headers & CSP · Security
Scan any site's HTTP security response headers and get a grade.
Headers & CSP · Security
Google's tool to evaluate and debug Content Security Policies.
SSL & TLS · Security
Search certificate transparency logs for any domain.
SSL & TLS · Security
Diagnose why Let's Encrypt certificate issuance fails for a domain.
Dependency Security · Security
Find and fix vulnerabilities in dependencies, containers and code.
Dependency Security · Security
Detect supply-chain attacks and malicious changes in npm and PyPI packages.
Secret Scanning · Security
Enterprise secrets detection and remediation platform.
Passwords & IDs · Security
Check if your email or password has appeared in known data breaches.
Passwords & IDs · Security
Generate strong, random passwords free from 1Password.
Passwords & IDs · Security
Open-source password manager with a free generator and vault.
Passwords & IDs · Security
Generate UUIDs/GUIDs in bulk, including v4 and v7 versions.
Passwords & IDs · Security
Online GUID/UUID generator with many formatting options.
Reference & Standards · Security
Official W3C validator for HTML markup quality.
Reference & Standards · Security
Scan files, URLs and domains with 70+ antivirus engines.
Headers & CSP · Security
Mozilla's scanner that grades a site's security headers and config.
Dependency Security · Security
Fast static analysis for finding bugs and vulnerabilities in code.
Passwords & IDs · Security
Manage secrets, certificates and encryption centrally.
Penetration Testing · Security
Guided, browser-based cybersecurity training with hands-on labs from beginner to offensive paths.
Penetration Testing · Security
Crowdsourced penetration testing labs and CTF challenges for practicing offensive security skills.
Penetration Testing · Security
Free, in-depth web security training with interactive labs, maintained by the Burp Suite team.