Security & Privacy

Reviews supplied HTTP response headers for common browser security protections.

Generates a Content Security Policy from selected directives.

Identifies common configuration weaknesses in a supplied policy.

Generates a Referrer-Policy header based on privacy requirements.

Creates password rules based on configurable organizational requirements.

Estimates password strength locally and explains common weaknesses.

Checks a supplied policy against sample password strings without transmitting them.

Flags likely API keys, tokens, and passwords in supplied text.

Masks matching credentials in logs and configuration files.

Finds suspicious secret assignments in a supplied environment-file excerpt.

Flags likely credentials in supplied Git diffs.

Creates validation steps for file uploads and stored content.

Maps common file extensions to expected media types.

Creates a defensive review checklist for parameterized database queries.

Reviews output encoding, content sanitization, and browser security controls.

Generates checks for cross-site request forgery defenses.

Reviews a supplied login flow for common security omissions.

Creates session cookie, expiration, rotation, and invalidation requirements.

Checks supplied password-reset requirements for common weaknesses.

Creates a security.txt template with contact and disclosure-policy fields.

Organizes vulnerability findings by impact, evidence, and remediation.

Converts security risks into an owner, likelihood, impact, and mitigation table.

Structures assets, trust boundaries, threats, and mitigations for a system.

Organizes known application entry points and exposed services.