Printable checklist · PDF
Pre-Demo-Day Security Checklist
Review test data, authentication, administrator access, account recovery, privacy, and incident readiness before presenting a startup product.
Practical identity and security resources for startup teams.
Free, reusable material for founders, incubators, accelerators, university innovation cells, and developer communities building safer products.
Free browser tools
No signup, no upload. Each tool runs entirely in your browser, so nothing you paste leaves your machine.
PKCE generator
Generate an RFC 7636 code_verifier and its S256 code_challenge, validate an existing verifier, and debug an invalid_grant mismatch. Self-tests against the specification's own test vector on every load.
Redirect URI checker
Find why an authorization server rejected your redirect_uri. Names the exact cause: trailing slash, host case, an explicit default port, percent-encoding, or an invisible character you cannot see.
DLT SMS template checker
Check an Indian DLT content template before you register it: variable format, the 30-character limit, header rules for your route, and whether one stray character pushes the message into Unicode and multiplies your per-SMS cost.