All tools · page 20

Creates a browser Permissions-Policy header from selected features.

Generates a Referrer-Policy header based on privacy requirements.

Creates password rules based on configurable organizational requirements.

Estimates password strength locally and explains common weaknesses.

Flags likely API keys, tokens, and passwords in supplied text.

Masks matching credentials in logs and configuration files.

Reviews allowed origins, methods, headers, and credentials settings.

Lists HTTP methods enabled in a supplied endpoint configuration.

Creates validation steps for file uploads and stored content.

Maps common file extensions to expected media types.

Tests filename inputs against configurable sanitization rules.

Generates benign test strings for checking path validation in authorized environments.

Reviews output encoding, content sanitization, and browser security controls.

Generates checks for cross-site request forgery defenses.

Compares supplied roles, resources, and permissions for unintended access.

Creates session cookie, expiration, rotation, and invalidation requirements.

Generates account protection rules with configurable thresholds.

Organizes defensive controls for repeated authentication failures.

Creates an implementation and recovery checklist for MFA.

Creates a security.txt template with contact and disclosure-policy fields.

Structures assets, trust boundaries, threats, and mitigations for a system.

Creates a review report from supplied package and version inventories.

Compares supplied dependency licenses with an allowed-license policy.

Creates retention rules for supplied data categories.