Paste an AWS IAM policy JSON to check for wildcard resources, overly broad actions, and full admin access. Deny-by-default review with least-privilege guidance — free, local, no signup.
Parse Set-Cookie headers into structured JSON, or analyze cookie security flags (Secure, HttpOnly, SameSite, expiry). Flag missing Secure, HttpOnly, and SameSite attributes — free, local, no signup.
Decode Base64 strings and pretty-print JSON data — paste encoded text to see the decoded result instantly. Inspect API payloads and tokens readably — free, local, no signup.
Audit tsconfig.json for strictness gaps, misconfigured paths, and target mismatches. Catch lax strictNullChecks before production does — local analysis, free, no signup.
Raise any base to any power — squares, cubes, negative and fractional exponents with full precision. Students check 2^10 = 1024 homework in seconds — free, no signup, runs locally.
Generates a browser extension that captures browser tabs, full screens, or specific application windows with configurable resolution, frame rate. No signup or account required.
It flags wildcard resources (Resource: *), overly broad actions (Action: *), full admin access (AdministratorAccess), and policies that grant access to sensitive services like IAM, STS, or Organizations without restrictions.
Paste the IAM policy as valid JSON. This can be an inline policy, an attached managed policy, or the policy document from the AWS IAM console.
The analyzer focuses on IAM policy content — wildcard detection, action breadth, and resource scope. For SCP and permission boundary analysis, use the AWS Policy Simulator.
No. It identifies issues and provides recommendations. You must manually edit the policy in the AWS IAM console or via CLI to apply the suggested fixes.
No. All analysis runs locally in your browser. Your IAM policy JSON is never sent to any server.
Secret Scanner
Scan text and code for leaked secrets and credentials. Detects Stripe keys, GitHub tokens, Slack tokens, Google API keys, AWS keys, OpenAI keys, JWT tokens, private keys, and config passwords.
CVE Lookup
Look up CVE vulnerabilities by ID with severity, descriptions, and affected products. Check CVE-2024-3094 before patching decisions — live OSV data, free, no signup.
Last updated October 2026