Tools

Free developer tools, built fast. All client-side, all open source.

Encode / Decode Hub

Encode and decode Base64, URL encoding, HTML entities, Hex, and Unicode escapes. Auto-detects encoded input. Secret detection built in. 100% client-side.

Cron Expression Builder

New

Build, decode, and test cron expressions visually. See next run times with timezone support. GitHub Actions mode included. 100% client-side.

JSON Formatter & Validator

New

Format, beautify, minify, and validate JSON with a collapsible tree view. Detects leaked API keys, tokens, and secrets. 100% client-side.

CSP Builder & Validator

New

Visually build Content Security Policy headers with presets and recommendations, or validate existing CSPs with a security grade. 100% client-side.

Secret Scanner

Browser

Paste any text — code, logs, configs — to instantly detect leaked API keys, passwords, and tokens. 100% client-side.

ENV Validator

Browser

Detect leaked API keys, weak passwords, and misconfigurations in your .env files. 100% client-side — your secrets never leave your browser.

CLI Tool

Terminal

Scan .env files from your terminal. Zero dependencies, CI-friendly exit codes.

npx halfday-env-scan .env

GitHub Action

CI/CD

Add env scanning to your CI pipeline. Fails the build when secrets or misconfigurations are detected.

uses: halfday-dev/env-validator@main

Pre-commit Hook

Git

Block commits with leaked secrets before they hit version control. Works with the pre-commit framework.

- repo: https://github.com/halfday-dev/env-validator
  hooks:
    - id: env-scan