Perry AY

Decode JWT tokens, verify HMAC/RSA/ECDSA/EdDSA signatures, detect alg=none bypass, key confusion, weak secrets, and expired tokens. Batch processing and audit report generation for DevSecOps teams.

Extract Open Graph meta tags (og:title, og:description, og:image, twitter:card) from any URL. Generate structured preview cards with validation warnings for missing or malformed OG tags. Batch mode for site-wide audits.

Scan any webpage for broken links. Validates HTTP status codes, detects redirects with chain tracking, classifies internal vs external links, and measures response times. Batch scan up to 10 pages.

Enterprise-grade URL phishing risk analysis using 14+ detection signals. Multi-factor scoring combining URL patterns, domain analysis, SSL validation, redirect chain inspection, security header audit, and page content analysis. Ideal for automated phishing detection and SOC workflows.

Cryptographically secure password generator with configurable length, character sets, and entropy bits calculation. Supports uppercase, lowercase, digits, symbols, and ambiguous character exclusion.

Generate high-quality QR codes in PNG or SVG format. Supports batch processing (up to 50 codes), custom colors, multiple error correction levels, and returns both public download URLs and inline data URIs. Perfect for marketing, events, product packaging, and developer workflows.

Fetch and parse RSS 2.0, Atom, and JSON Feed formats into structured JSON output. Supports single feeds and batch analysis up to 20 feeds. Validates feed health, detects common issues, and extracts per-item metadata including title, link, dates, authors, categories, and enclosures.

Generate Google-approved JSON-LD structured data for 30+ Schema.org types. Supports SEO schema like Article, Product, FAQ, Event, LocalBusiness, and more.

Never get caught by an expired or misconfigured certificate. Inspect SSL/TLS certificates for any domain — issuer, subject, validity dates, SANs, key algorithm, chain length, and security ratings. Includes deep inspection for weak ciphers and outdated TLS. Batch analyze up to 20 domains.

Check SSL/TLS certificate details for one or more domains. Retrieves issuer, subject, validity dates, cipher info, and chain analysis.

Discover subdomains from Certificate Transparency logs using crt.sh and CertSpotter. Supports multi-source aggregation, deduplication, diff reporting, continuous monitoring, wildcard detection, and batch scanning — ideal for penetration testing, attack surface mapping, and security monitoring.

Batch CVE scanner for your entire technology stack. Check 30+ software packages against the NIST NVD database in a single run. Premium: severe CVE alerts and multi-software scanning.

Timezone conversion and world clock utility. Converts times between any IANA timezones, shows UTC offsets with DST auto-detection, and displays current time across multiple locations simultaneously.

Deep Unicode inspection: reveals every codepoint as U+XXXX with block/name. Detects invisible chars (zero-width, BOM, RTL/LTR overrides). Identifies mixed encodings and mojibake. Performs NFC/NFD/NFKC/NFKD normalization. Security mode detects homoglyph/confusable characters.

Comprehensive URL health checker with batch support. Tests HTTP status codes, response times, redirect chains, SSL certificate validity, and content-type detection. Check up to 20 URLs in a single run.

Trace HTTP redirect chains for any URL. Detects redirect loops, insecure http downgrades, open redirect vulnerabilities, and tracking/analytics parameters. Supports single and batch mode (up to 50 URLs). Returns full hop-by-hop chain with security grading.

Pure-Python ID generator producing UUID v4, UUID v7 (time-ordered), nanoid (customizable length/alphabet), short base62 IDs, and Crockford Base32 ULIDs. Supports batch mode for generating multiple different ID types in a single run. Zero external dependencies.

Monitor websites for visual regressions. Capture baseline screenshots, compare against new captures, and generate pixel-accurate diff reports with highlighted changes.

Identify technologies powering any website — CMS, frameworks, analytics, CDN, hosting, payment processors, and JS libraries from HTML and HTTP headers.

Enterprise email domain security audit: SPF/DKIM/DMARC/BIMI/MTA-STS DNS validation, 50+ blacklist scans, MX record analysis with IP resolution, deliverability scoring (0-100), and detailed remediation advice.

Verify email addresses with multi-layer checks: syntax validation, MX record lookup, SMTP mailbox verification, disposable domain detection, role-based detection, and domain typo suggestions.

Check the registration age and history of any domain using WHOIS data and Wayback Machine archives. Returns creation date, expiration date, registrar, DNS records, domain age in days/years, and oldest archived snapshot. Supports single and batch mode up to 50 domains.

Fetches one or more URLs and extracts Open Graph tags, Twitter Cards, JSON-LD structured data, meta description, title, and favicon. Supports batch processing of up to 20 URLs.

Download and extract metadata, text content, and page count from PDF documents. Supports batch processing with concurrent downloads.