Nutter Tools
Nutter Tools

A free toolbox that runs in your browser. A tool for every job.

Your files never leave your device

Images

  • Convert images
  • Compress images
  • Resize images
  • Crop
  • Watermark

PDF & files

  • Merge PDFs
  • Split a PDF
  • Images to PDF
  • PDF to images
  • Remove photo location

Video & audio

  • Compress video
  • Convert video
  • Video to GIF
  • Convert audio
  • Trim audio

Everyday

  • QR codes
  • Passwords
  • Time zones
  • Unit converter
  • Word count
  • Webcam test

Developer

  • JSON formatter
  • Base64
  • Regex tester
  • Hashes
  • JWT decoder

Site

  • About
  • Contact
  • Settings
  • Privacy
  • Terms
  • Site map
  • llms.txt

Everyday

  • Images
  • Video
  • Audio
  • PDF & files
  • Text
  • QR codes
  • Units & math
  • Time & dates
  • Color
  • Passwords & IDs
  • Device tests
  • Sun & moon

For developers

  • JSON
  • Encoding
  • Regex & cron
  • Web & auth
  • Hashing & encryption
  • Config files
  • Network
  • Browser
  • AI
  • Fake data
© Nutter Toolsnutter.tools
  1. Home
  2. Web & auth
  3. Website security remediation plan
Your files stay on your device

Website security remediation plan

Turn audit findings into an ordered plan with owner, effort, due date, and verification step, editable in place and exported as Markdown or CSV.

This tool is in beta

Still being tested. If a result looks wrong, tell us.

Report a problem

Paste an audit export and build the plan.

This tool reads the audit, it does not run any checks of its own. Failed findings become fix tasks, unknown findings become investigation tasks, and passed, informational, and not-applicable findings are left out. Rows order severity first, worst at the top, with effort as the tie-breaker inside each severity, so lowering an effort moves a task ahead of its severity peers. Every row starts at effort 3 and status "to do"; the rest is yours to assign. Exports are generated in this tab and nothing is uploaded.

Audit export

Paste a schema 1.x export, or drop the file
Or drop the audit JSON fileStays on your device

Inputs stay within 200,000 characters and 1,000 findings. Owners are limited to 40 characters and due dates to 32.

More web & auth tools

  • CSP evaluator & builder
  • HTTP header parser
  • Cookie analyzer
All web & auth tools

Was this tool useful?