End User Tools

What's My IP

Instantly find your public IP address and essential network details.

Try it out here
Password Strength Checker

Create strong, unique passwords to protect your accounts.

Try it out here
URL Expander & Scan

Reveal full URLs to avoid phishing scams.

Try it out here
QR Code Generator

Easily create your own QR codes.

Try it out here
QR Code Investigator

Decode QR Codes before visiting sites.

Try it out here
Wi-Fi Security Checker

Check if your Wi-Fi name (SSID) looks like a default ISP or router broadcast and get simple tips to improve security.

Try it out here
Is It Safe?

Review and scan any link to check for hidden redirects and known threats.

Try it out here

Security Checkups

Password Breach Lookup

Check if your password was leaked in breaches.

Try it out here
Email Breach Lookup

Check if your email is in data breaches.

Try it out here
Website Security Checkup

Analyze domain security & reputation.

Try it out here
Email Health Checkup

Evaluate email health of your website.

Try it out here
DMARC Insights

Analyze DMARC reports & ensure policy compliance.

Try it out here
Email Spoof Test

Test if your domain is vulnerable to spoofing.

Try it out here
Network Port Scanner

Scan network ports to identify open services and potential vulnerabilities.

Try it out here
security.txt Validator

Check if your site has a valid and standards-compliant security.txt file.

Try it out here
Web Secrets Scanner

Scan a JavaScript file or web page for exposed API keys, tokens, and secrets — with adjustable depth and limits.

Try it out here
Upload Form Security Tester

Check your file upload forms for risky acceptance patterns and weak filtering.

Try it out here
Domain Reputation Check

Test a domain against major reputation and block lists with clear scoring and details.

Try it out here

Web Development & Admin

Markdown Sandbox

Live Markdown editor with split-screen preview. Write and instantly see your formatted output (from xp4cyber.com).

Try it out here
.htpasswd Generator

Create secure .htpasswd files to protect website directories.

Try it out here
Web Source Code Viewer

Explore the underlying source code of any page.

Try it out here
Web Site Accessibility Test

Check how accessible your website is.

Try it out here
Web Site Performance

Evaluate site speed & performance.

Coming Soon
SBOM Scanner

Analyze website resources to generate a Software Bill of Materials and detect risky dependencies.

Try it out here
CORS Misconfiguration Tester

Probe endpoints with crafted Origin headers to detect risky CORS settings and real-world exploit paths.

Try it out here
Base64 Encoder & Decoder

Quickly encode or decode text to and from Base64, with URL-safe options.

Try it out here
Hash Text

Generate MD5, SHA, and other cryptographic hashes directly in your browser.

Try it out here
ASCII Art Generator

Turn text into ASCII art banners with a variety of FIGlet fonts.

Try it out here
WordPress Site Analyzer

Passive fingerprint & risk scoring for WordPress: themes/plugins, versions, REST exposure, WPScan-enriched vulns, and smart recommendations.

Try it out here
JSON Prettifier

Format, minify, and validate JSON locally in your browser.

Try it out here

Cyber Risk & Executive

Cyber Risk Calculator

Estimate financial impact of cyberattacks.

Try it out here
Account Exposure Report

Sample report showing company account exposures - service starts at $99 CAD/year.

Try it out here

Professional / Technical Analysis

Nmap XML Analyzer

Analyze Nmap XML data for CVEs & risks.

Try it out here
Abused IP Threat Viewer

Investigate reported IPs, abuse history, and threat intelligence in real time.

Try it out here
Email Header Analyzer

Inspect email headers to trace delivery path, detect spoofing, and assess trust signals.

Try it out here
Web Log Analyzer

Analyze webserver (Apache, Nginx, LiteSpeed, etc.) logs for suspicious IPs, threats, and attack patterns.

Try it out here
Web Server Stress Tester

Evaluate web server performance under configurable load with visual analysis and AI insights.

Try it out here
CT Subdomain Risk Scanner

Find subdomains via CT logs and flag takeover risks from dangling DNS (S3, CloudFront, GitHub Pages, Azure, etc.).

Try it out here

Security Education & Training

Cyber Awareness Assessment

Test your knowledge of online threats and best practices.

Coming Soon
Phishing Simulator

Test employee phishing awareness.

Coming Soon
Cyber-Survivor Island

A fun, interactive cybersecurity learning game.

Coming Soon
Cyber on the Slopes

Identify phishing attempts while racing down retro ski slopes.

Coming Soon
Inbox Invaders

Blast phishing emails in this 8-bit space invaders-style cyber game.

Coming Soon