tools --list
Tools
Practical tools for M365, cybersecurity and compliance. Local processing, privacy guaranteed.
Decode JWT tokens, inspect header and payload, check expiry. No external requests.
Generate secure passwords using Web Crypto API. Fully client-side, no external requests.
Check MX, SPF, DKIM and DMARC records for a domain via Cloudflare DNS-over-HTTPS.
Paste raw email headers to check SPF/DKIM/DMARC, the Received chain, and spot anomalies typical of phishing.
Check SSL certificate validity, expiry and Subject Alternative Names via crt.sh.
Analyzes a site's HTTP security headers (CSP, HSTS, X-Frame-Options and more) and gives a score with recommendations.
Search a CVE by ID or by product using the public NVD database and view CVSS severity and description.
Select MITRE ATT&CK tactics and techniques and get suggested mitigations for M365 and Defender.
Interactive checklist covering backup, MFA, EDR, segmentation and incident response to measure ransomware readiness.
Answer a few questions about your admin task and get the least-privilege Entra ID role recommendation.
Paste a Conditional Access policy JSON and get a plain-English breakdown.
Simulates how Entra ID Conditional Access policies apply to a specific user, app and device.
Look up a Microsoft Graph permission and see its type, admin consent requirement, risk level and exact capabilities.
Compare Microsoft 365 plans: Business Basic, Standard, Premium, E3 and E5.
Search Intune, Autopilot and MDM error codes with explanations and troubleshooting tips.
Search AADSTS error codes from the Entra ID sign-in screen with cause and practical fix.
Searchable directory of Purview Unified Audit Log RecordTypes and Operations, with a Search-UnifiedAuditLog command generator.
Paste a CSV or JSON export of the Entra ID sign-in log: success/failure summary, breakdown by user/app/location, error explanations and anomaly heuristics — all in the browser.
A step-by-step guided path to diagnose the most common Windows Autopilot and Intune enrollment issues.
Configure a Windows compliance policy and export the JSON and PowerShell script.
Fill in the form and generate a PowerShell detection + remediation script pair for Intune.
Browse and search Microsoft Secure Score improvement actions with plain-English explanations.