SAML Metadata Security Auditor

SAML Metadata Extractor

datamule/saml-metadata-extractor

Point at any SAML 2.0 identity-federation metadata feed (or MDQ service) and get one structured row per IdP/SP: endpoints, cert fingerprints, attributes, UI metadata.

Track public SAML IdP federation metadata, signing-certificate expiry and rotation, SSO endpoints, and trust-sensitive changes across scheduled runs.

Audit OpenAPI and Swagger specifications for unsecured operations, unsafe server URLs, weak auth schemes and missing security responses.

Audit OIDC discovery documents and JWKS for issuer mismatches, unsafe endpoints, weak keys, insecure algorithms and missing PKCE.

CSP Header Analyzer

junipr/csp-header-analyzer

Deep-analyze Content Security Policy headers and flag unsafe or missing directives.

SSL Certificate Checker

bgfc97/ssl-certificate-checker

Check TLS/SSL certificates for many hosts: issuer, valid-from/to, days until expiry, expired/expiring-soon flags, SAN domains and trust status. For uptime & certificate-expiry monitoring. No key, no proxy.

Audit package-lock.json files for missing integrity, insecure or non-registry sources, install scripts, duplicate versions and unsupported formats.

Hash Generator

web.harvester/hash-generator

Generate MD5, SHA-1, SHA-256, SHA-512 hashes for text or files. Verify integrity, create checksums, deduplicate content.

security.txt Auditor

junipr/security-txt-auditor

Audit security.txt auditor inputs and return structured findings, evidence rows, and a buyer-ready report for SEO, developer, and operations teams.

Expired Domain Finder with SEO Metrics

constant_quadruped/expired-domain-finder

Find expired and expiring domains enriched with WHOIS data, backlink counts, domain authority, and Wayback Machine history. Quality scored and ranked.