Security

Inspect tokens and generate digests, processed only by cent-ai's API and never forwarded to external services.

security

JWT Decoder

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Decode a JWT's header and payload to read its claims. Does not verify the signature.

  • decode
  • live-preview
security

Hash Generator

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Generate an MD5, SHA-1, SHA-256, or SHA-512 hex digest of text input.

  • md5
  • sha1
  • sha256
  • sha512
  • live-preview
security

TLS/Certificate Inspector

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Connect to a host over TLS and report its certificate's subject, issuer, validity, and trust status.

  • fetch-certificate
  • trust-check
security

Certificate Decoder

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Decode a PEM-encoded X.509 certificate's subject, issuer, validity, SANs, and public key details.

  • decode
  • live-preview
security

HMAC Generator

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Generate an HMAC-MD5, HMAC-SHA1, HMAC-SHA256, or HMAC-SHA512 digest of text input using a secret key.

  • md5
  • sha1
  • sha256
  • sha512
  • live-preview
security

CSR Decoder

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Decode a PEM-encoded PKCS#10 certificate signing request's subject, public key, and requested SANs.

  • decode
  • live-preview
security

HTTP Security Headers Checker

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Check a domain's HSTS, CSP, and other security-relevant HTTP response headers, with findings and remediation guidance.

  • hsts
  • csp
  • frame-protection
  • findings
security

SSL/TLS Domain Checker

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Check a domain's TLS certificate health: trust, expiry, hostname match, chain, and negotiated protocol/cipher.

  • trust-check
  • expiry
  • hostname-match
  • chain
  • cipher
  • findings
security

Certificate Analyzer

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Analyze a pasted PEM certificate's fields, extensions, and expiry, with clear findings and remediation guidance.

  • analyze
  • expiry
  • findings
security

Certificate Chain Validator

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Validate a live host's certificate chain: ordering, missing intermediates, expired links, and basic constraints.

  • chain-validation
  • findings
security

Certificate Expiry Checker

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Check certificate expiry from a live domain or a pasted/uploaded PEM certificate, with clear severity levels.

  • expiry
  • findings
security

Secret Scanner

Processing: Browser. Processed entirely in your browser — this input never leaves your device.

Scan text for likely secrets — cloud/API tokens, private keys, database URLs — entirely in your browser by default.

  • pattern-detection
  • contextual-detection
  • entropy-detection
  • redaction
  • findings
security

.env Security Scanner

Processing: API. Processed by cent-ai's API: sent to our server, held in memory, never stored.

Scan .env-style configuration for exposed secrets, publicly-shipped credentials, weak defaults, and risky settings — paste content directly, or check a live URL.

  • pattern-detection
  • contextual-detection
  • entropy-detection
  • config-risk-checks
  • findings