01 / SOSEC.IO

Security researchand working tools

SOSEC publishes investigations into vulnerabilities, malware, account abuse, and on-chain incidents, alongside browser tools that work without uploading the material being examined.

Frequently used tools

CURATED / 03

01URL encoder and decoderPercent-encode or decode URL parameters, full URLs, and form values locally for batch debugging and report snippets.02JWT decoderDecode JWT header and payload locally, with optional pasted RSA JWK or JWKS public-key checks for RS256, RS384, and RS512.03HTTP security headers analyzerAnalyze pasted HTTP response headers locally for common security headers and response cookie attributes.

On this pageInput is handled in the browser; these tools do not visit a target on your behalf.

WHERE IT RUNSEncoding, parsing, and summaries run in the current browser.

WHERE DATA GOESInput is not placed in the URL, browser storage, or application logs.

WHAT LEAVESCopy and download require a click; shared links contain no working input.

02 / Latest Radar report

Implementing All 153 CIS Controls v8.1 Safeguards: 13,020 PRD Requirements, Boundaries, and Proof (July 2026)

Research · July 27, 2026

A field guide and machine-readable implementation register for all 153 CIS Controls v8.1 Safeguards. Each Safeguard carries 72–108 atomic requirements across twelve product and operating dimensions, plus exact populations, owners, control points, evidence, negative tests, exception expiry, platform boundaries, dependency-first rollout, and forty reproducible CAS findings.

Read report →