HTTP Security Header Checker - Online HSTS, CSP, X-Frame Analysis
Paste response headers string and get a security audit. Check presence and configuration of key security headers. Local analysis.
UD5 Toolkit
Paste response headers string and get a security audit. Check presence and configuration of key security headers. Local analysis.
Select a state and year to see all public holidays. Works offline with built-in data. Plan your long weekends. Simple reference tool.
Enter your UK tax code and see an explanation of what the numbers and letters mean. Simple educational reference. No data stored.
Answer a short questionnaire based on common deferral criteria (travel, medication, tattoos) to see if you may be eligible to donate blood. Educational only.
Identify common grammar mistakes (subject-verb agreement, tense, articles) with simple rule-based analysis. Explanations provided. Not AI, purely rule-based and local.
Paste your email subject and body. The tool highlights common spam trigger words and gives a risk score. Improve inbox placement.
Enter a domain and see its SSL certificate details: issuer, validity dates, and chain. Client‑side fetch.
See how a full paragraph looks with your chosen text and background colors. Not just a ratio; the real appearance.
Enter a URL and get a list of all images that fail to load (404, CORS). A simple asset audit tool. Runs in your browser.
Enter foreground and background colors to instantly see the contrast ratio and pass/fail for AA and AAA. Simple and fast.
Check which cipher suites a website supports and identify weak or outdated ones. Quick security audit from your browser.
See your current notification permission status. Request or reset it. Test browser notification behavior.
Query a domain's DNS record against multiple public resolvers (Google, Cloudflare) and see how it propagates. Client‑side fetch.
Paste a list of foreground/background color pairs and instantly see which pass AA/AAA. Perfect for checking entire style guides.
Interpret your blood pressure reading based on American Heart Association and European Society of Cardiology categories. Visual gauge with actionable health insights.
Check if a password appears in the Have I Been Pwned database using k‑Anonymity. Only the first 5 characters of the hash are sent.
Fetch a site’s HSTS header and validate its syntax, max‑age, and subdomain flags. Ensure your site enforce HTTPS.
Check if a number of the form 2^p‑1 is a Mersenne prime. Quick Lucas‑Lehmer test simulation for small p.
Check if the browser has captured the beforeinstallprompt event. Understand why your PWA is (or isn't) installable.
Enter an API URL and quickly check its HTTP status code and response time. See response headers and body. Browser fetch.
Enter a palette of colors and see a grid showing whether each foreground/background pair passes AA or AAA contrast. Must for designers.
Enter a URL and get a one‑page report of titles, description, headings, image alts, and broken links. All from browser.
Define minimum length, uppercase, digits, special chars, and check if a password meets your custom policy. Instant feedback.
Enter a URL and see its favicon at all standard sizes. Check if it's properly defined. SEO basic check.
Tell if your password has appeared in data breaches without sending the full password. Uses hash prefix locally.
Trace the full redirect path of a URL. See every hop, status code, and final destination. Detect broken chains.
Type any character and see how it renders in different font stacks. Detect missing glyphs and fallback behavior.
Check if an IBAN has the correct length and structure for its country. Early validation, no bank connection.
Paste your email body and subject, and get a spam score based on common trigger words and patterns. Improve your cold outreach.
Check HTTP status codes for multiple URLs at once. Identify broken links and redirects. All requests made via browser fetch.
Check a live URL to extract and validate its canonical link element. Ensure correct SEO configuration. Runs from your browser.
Look at HTTP headers and JavaScript objects to guess which browser extensions might be installed. For awareness.
Type a word to see all its homophones with definitions. Avoid embarrassing mistakes (their/there/they’re). Static dictionary.
Check if a word or phrase is a palindrome (reads same forward and backward). Live validation and fun facts.
Preview the Gravatar image associated with any email address. Generate the correct Gravatar URL. Handy for avatar debugging.
Enter a year to check if it is a leap year. Shows the rule explanation and next/previous leap years. Simple reference.
Evaluate the strength of your passwords with a visual meter and detailed feedback. Check for length, complexity, and breached passwords. All analysis is client-side.
Check the contrast ratio between foreground and background colors to ensure web accessibility compliance. Get WCAG 2.1 AA/AAA pass/fail results instantly.
Drop an image that might have wrong extension and see its real format (JPEG, PNG, WebP) based on header bytes.
Enter a URL and see the full HTTP response headers returned by the server. Detect redirects and server type. Useful for SEO and web debugging.
Check if a website is globally reachable or experiencing issues. Status code and latency displayed. Quick browser-side test.
Find out if a word is an isogram (no repeating letters). Different types: first-order, second-order. Word nerd fun.
Enter a package name and version range to see all satisfying versions from the registry. Understand ^ and ~.