Comprobador de seguridad de solicitudes API PROCESAMIENTO LOCAL

Revisa una solicitud HTTP o cURL copiada y sus cabeceras de respuesta para detectar secretos en URL, HTTP sin cifrar, CORS inseguro, cookies débiles y caché inadecuada. No contacta el destino.

This is a text-only local review. KivTools never sends, replays, or scans the URL in your request.
Request or cURL command
Response headers Optional; paste only headers, not a sensitive response body.
Review summary
  • Paste a request and optional response headers to review common API risks.

A focused review, not a penetration test

The checker evaluates only visible copied text and rules that are safe to assess locally. It cannot discover authorization flaws, rate limits, server behavior, or vulnerabilities in a live API.

Herramientas recientes: