Coming soon
CSP Analyzer
Spot weak directives and improve your Content Security Policy.
CSPWeb
SIXHACK SECURITY TOOLS · FREE
Practical security tools for curious minds.
Analyze, decode and understand technical data with fast, practical tools. No installs, no sign-up, and local processing in your browser.
✓ No sign-up✓ 100% local✓ HTTPS
Instant resultsProcessing runs on your device
Privacy by designToken contents never reach our server
Free, no accountAccessible on any device
01 — TOOLS DIRECTORY
01 / 06Available tools
Start with the JWT Decoder. More tools for pentesters, developers and researchers are on the way.
Available
JWT Decoder
Decode JWT headers and payloads, inspect claims and verify supported signatures without sending tokens to a server.
JWTBase64URLHS / RS / PS
Open tool
Coming soon
CORS Analyzer
Inspect CORS headers and identify risky configurations.
CORSAPI
Coming soon
CVSS Calculator
Calculate vulnerability severity from CVSS vectors.
CVSSRisk
Coming soon
HTTP Headers Analyzer
Review security headers in HTTP responses.
HTTPHeaders
Coming soon
Base64 Toolkit
Encode and decode Base64 and Base64URL in your browser.
Base64Encoding
No tools match your search.
02 — WHY SIXHACK
Why SixHack Security Tools exists
01
Useful by design
Focused utilities for real-world security testing and secure development.
02
Learn as you analyze
Every tool comes with explanations and security guidance.
03
Built by SixHack Academy
Free resources alongside the academy's practical courses and labs.
03 — SIXHACK ACADEMY
From tools to hands-on skills.
Go deeper into offensive security, authentication and APIs with SixHack Academy's courses.
Explore courses