The Best CheckFileType Alternatives in 2026

GoPlus offers Web3 security tools including audits, APIs, a user security hub, and a browser extension.

Generate two-factor authentication codes in Chrome, Firefox, or Edge with the Authenticator extension.

Zeek analyzes network activity through an open source monitor with a flexible scripting language.

Spur analyzes internet infrastructure and network signals to help investigators interpret obfuscated connections.

Octane analyzes application code to find exploitable security vulnerabilities and trace attack paths.

Manage two-factor authentication codes with OTP Auth, an iOS app listed on the App Store.

Generate secure SSL configurations for selected web, database, and mail software.

Ndiff compares Nmap scan results from two XML files, showing changes such as hosts and ports appearing or disappearing.

unblob extracts files from complex binary blobs and firmware images, supporting security analysis of embedded software.

See what information a website can access from your browser with Webkay, a browser data demonstration.

URLhaus shares URLs identified as being used to distribute malware and supports tracking those reported links.

ZeroSSL issues online SSL certificates and supports HTTPS setup through a certificate management interface.

Solve reverse engineering challenges published on challenges.re, a challenge-focused site.

Search the National Vulnerability Database, a public resource for vulnerability information.

Canary Tokens creates decoy files and links that alert users when someone accesses them, helping detect unauthorized activity.

View Toronto Police calls for service on a map that updates in real time, according to the supplied page description.

Add proof-of-work verification to websites with mCaptcha, a privacy-focused automated CAPTCHA system.

WhatsMyDNS checks DNS record propagation across global resolvers for record types including A, AAAA, MX, and TXT.

Use Metasploit to find security issues, verify mitigations, and manage authorized penetration testing assessments.

The Snyk Security Database provides vulnerability details and remediation guidance for packages and cloud configurations.

The URL Decoder and Encoder converts text between encoded and decoded forms, including JavaScript URLs.

Lucia was deprecated in March 2025. The website was updated in July 2026 and points to code/auth_session.ts as a single-file replacement for the NPM package and to the Auth Book for auth information.

DNSPerf compares the performance and uptime of enterprise and commercial DNS providers.

Search a community-curated collection of bug bounty writeups and learning resources.