About ToolsWalla
A privacy-first collection of free online tools, all running in your browser.
Why ToolsWalla exists
As a working cyber security engineer, I reach for small utilities every day: format a JSON response, decode a JWT, look up DNS records, calculate a CIDR, parse a packet capture. Most online tools for these tasks are full of ads, popups, and quietly send your data to a server. That is not acceptable when the input is a production token, a customer log file, or a packet capture from a corporate network.
ToolsWalla is the answer. One clean, predictable place for the tools I use most, with one firm rule: everything runs in your browser. Your input never leaves your machine.
What is different here
- Client-side by default. Open DevTools, Network tab. Use any tool. You will see no outbound requests for your data.
- No signup, no paywalls, no daily limits. Use anything as much as you want.
- Fast. Static pages on Vercel's edge network. Most pages load under a second.
- Reliable. Built on well-tested open-source libraries (PapaParse, jsdiff, Web Crypto, pdfjs-dist, pdf-lib) instead of fragile custom code.
- Ad-supported, not data-supported. Ads pay for hosting. Your inputs are never sold because they are never collected.
The tools
25 tools across four areas. Developer utilities (JSON, JWT, UUID, hashing, encoding, diffs). Network and security analysis (packet captures, DNS, CIDR, TLS certificates, security headers, log analysis, email headers). File and image work (PDF extract, merge, split, render to images, image format conversion, QR codes). Everyday calculators and converters (loan, GST, tip, BMI, age, percentage, currency, units, time zones, word count). The full list lives on the home page.
More are added regularly based on what people ask for. If a utility you need is missing, tell me on the contact page.
The tech
Next.js 14 with the App Router, React 18, TypeScript, Tailwind CSS. Static where possible; interactive tools render as client-side React components. The two backend routes (TLS certificate inspector, security headers scanner) run as Vercel serverless functions and block requests to private IP ranges so the public site cannot be used to scan internal networks.
Feedback
Drop a note via the contact page. Bug reports, missing features, and edge cases are all welcome.