Validate JSON Schema, OpenAPI and SHACL contracts with every finding pinned to its source line, and diff two versions to see exactly what breaks. Nothing you paste leaves your device.
Drop a CSV or JSON array and read every column: its type, null rate, distribution, cardinality and quality, with a candidate key and an inferred schema you can export. Computed in your browser.
Paste a response, or fetch a URL through a safe server-side proxy, and grade its security headers and cookies against current OWASP guidance, with a letter grade, a per-header breakdown, and the exact fixes.
Decode X.509 certificate chains and JWTs, hash and encode with WebCrypto, and score a secret's real strength. Real ASN.1 parsing, and not a single byte leaves your browser.
