Free tools
Small tools that fix real mistakes
No sign-in. Most tools run entirely in your browser. The two that read a live page fetch only the URL you enter and do not store what they find.
Reads a live page
Can Google see my site?
Paste a URL and compare the raw HTML a crawler gets first with the page after JavaScript runs. Spot content that only exists client-side.
Open tool →Reads a live page
OG and social preview checker
See how a link will look when shared on X, LinkedIn, Facebook, Slack and WhatsApp, with a checklist of missing or broken tags.
Open tool →Runs in your browser
Search result preview
Type a title and meta description and see roughly how they may look in Google, with a width guide and tips when they will be cut off.
Open tool →Runs in your browser
Schema markup generator
Generate JSON-LD structured data for Organization, WebSite, SoftwareApplication and FAQPage, with notes on what Google actually uses.
Open tool →Runs in your browser
robots.txt and llms.txt generator
Build a robots.txt with per-bot rules for AI crawlers, and an llms.txt in the llmstxt.org format.
Open tool →Runs in your browser
CSP builder
Build a Content-Security-Policy directive by directive, add presets for Supabase, Stripe and analytics, or paste a policy to find weak spots.
Open tool →Runs in your browser
Supabase RLS policy generator
Generate row level security SQL for owner-only, team, admin and insert-only tables, with a test snippet for the SQL editor.
Open tool →Runs in your browser
JWT decoder
Decode a JSON Web Token, check its expiry, verify the signature locally and catch risky claims such as a Supabase service_role key.
Open tool →Runs in your browser
Pre-launch security checklist
An interactive checklist for launching an AI-built app, filtered by your stack, with progress saved on your device.
Open tool →Runs in your browser
Security headers generator
Config for HSTS, Content-Security-Policy, nosniff and more, for Next.js, Vercel, Netlify, Cloudflare Pages and nginx.
Open tool →Runs in your browser
Environment variable exposure checker
Paste variable names to see which are public by design, which are server-only and which are exposed secrets.
Open tool →