Secure Defaults Checker

Check whether your defaults are secure

Insecure defaults are a common source of vulnerability, and reviewing them hardens a system. This tool helps check whether your configuration defaults are secure, so you can find settings that ship insecure.

Why defaults matter for security

Software often ships with defaults chosen for ease of setup rather than security, an open setting, a permissive permission, a feature enabled that should be off, and a system left on its defaults inherits all of these weaknesses. Attackers know the common insecure defaults and look for systems that still use them. Checking your configuration against secure-default expectations surfaces the settings that ship insecure and should be changed, which is often a quick, high-value hardening step. This is defensive review of your own configuration, catching the weak defaults that are easy to leave in place unnoticed.

Harden the defaults

It runs entirely in your browser, so nothing you paste is uploaded, which matters when the input is your own code, configuration or security-sensitive data.

Related tools

• User Agent Parser — Parse a User-Agent string into browser, engine, operating system and device. Explains why UA strings are unreliable and what to use instead.
• QR Code Generator — Generate QR codes for URLs, text, Wi-Fi and contact details. Adjustable error correction and size, produced entirely in your browser.
• Credit Card Validator — Validate a card number with the Luhn algorithm and identify the issuing network from its prefix. Runs locally, nothing is transmitted.
• Text Case Converter — Convert text between camelCase, PascalCase, snake_case, kebab-case, CONSTANT_CASE, Title Case and sentence case. Runs entirely in your browser.