Identify the hash algorithm type (MD5, SHA-1, SHA-256, etc.) and optionally query VirusTotal for reputation/threat intelligence on the hash.

Look up a CVE ID from the NIST National Vulnerability Database (NVD) and return severity, CVSS score, description, affected products, and remediation guidance.

Fetch HTTP response headers from a URL and audit them for security best practices (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, etc.).

Perform WHOIS and passive DNS reconnaissance on a domain. Returns registration info, registrar, name servers, creation/expiry dates, and IP geolocation via public APIs.

Decode obfuscated or encoded payloads commonly found in malware analysis, CTF challenges, and phishing emails. Supports Base64, URL encoding, hex, and ROT13.

Analyze password strength against NIST SP 800-63b guidelines. Checks length, entropy, character diversity, common patterns, and known breach indicators. Does NOT store or transmit the password.

Generate a structured threat intelligence report from collected findings. Provide any combination of: domain, IP, hash, CVE IDs, or free-form observations, and get a formatted TI report with risk rating, IOCs, and recommended actions.