Search PlayCISO
One box across everything on the site — tools, scanners, labs, studios, guides, templates and the blog. Instant, private and on-device: nothing you type leaves your browser.
One box across everything on the site — tools, scanners, labs, studios, guides, templates and the blog. Instant, private and on-device: nothing you type leaves your browser.
Popular
Score a vulnerability and get the vector string — or decode one from a CVE advisory. Free. — A free, in-browser CVSS calculator for CVSS v3.1 and v4.0: pick the Base/Temporal/Environmental (or Threat/Supplemental) metrics and get the…
Toggle components, get a STRIDE register mapped to 6 frameworks, explore it as a knowledge graph, export a PDF. — Pick one of 10 industry profiles, switch 13 architectural assets on or off, and get a threat register for every resulting…
Maturity wheel, roadmap, crosswalk, audio flashcards & tabletop. — Score your NIST CSF 2.0 maturity as a visual wheel and heat-map, build a tier roadmap, cross-walk to CIS / ISO 27001 / SOC 2 / PCI, and drill the framework with…
Branching incident simulations — make security-leadership decisions under pressure and get scored.
How secure is my password? Entropy, score & crack time — 100% in-browser. — Estimates password strength entirely client-side — a 0–4 score, entropy in bits, realistic crack-time estimates (online / bcrypt / GPU), and the specific…
Decode a JSON Web Token and verify its signature — 100% in your browser. Free. — Paste a JWT to split it into header, payload and signature, pretty-print the JSON, and read the claims in plain English — exp/iat/nbf as absolute + relative…
Browse the public leaderboard free; scan your own server with Pro. — One standard MCP handshake (no exploitation, ever) scored against 27 deterministic rules — auth, dangerous capability exposure, prompt injection, input validation…
Every interactive, in-browser security lab — cryptography, identity, OT/ICS, SOC and more.