// Anil K

anlabs

Security Architect & Consultant | Technology, Local Services, Lifelong Learning

I’m a Security Architect and Consultant passionate about technology and building local services. I love reading and learning new skills. In my free time, I enjoy traveling, exploring new cities, and taking walks in nature.

Read the blogSecurity toolsWork with me

What I build

23 articles

CipherMind blog

In-depth writing on AI and LLMs, cybersecurity, PKI and cryptography — and the command-line recipes that tie them together.

Read the blog →

11 tools · 6 focused decoders

Security tools

JWT, SAML, certificates, CSP and headers, IOCs, encodings and more — locked by your browser so nothing you paste can leave the page.

Open the tools →

in the works

Coming next

  • Finance toolsCalculators and planners that keep your numbers on your device.
  • Creative writing toolsSmall helpers for drafting, editing and structure.
  • AI toolsPractical, private utilities for working with language models.

Latest from CipherMind

All 23 articles →
Apple’s Free Local LLM Is Hiding in macOS Terminal
AI4 min

Apple’s Free Local LLM Is Hiding in macOS Terminal

There's a working local AI model in your Mac's terminal that most people never notice — free, private, and requiring no account or API key.

5 Essential Tools to Supercharge Your Claude Workflows
AI5 min

5 Essential Tools to Supercharge Your Claude Workflows

Five open-source tools—Graphify, Ponytail, Task-Observer, Claude-Mem and Headroom—that save tokens, keep context and make Claude Code more reliable.

Harness Engineering: The Harness Around the Brain
AI7 min

Harness Engineering: The Harness Around the Brain

The loop makes an LLM behave like an agent, but the harness is what makes it survivable in production — tool registry, context manager, state store, guardrails, and evaluators around the model.

Security tools

All 11 tools →

Free tools that run entirely in your browser — locked so nothing you paste can leave it.

Paste anything — we’ll pick the tool

JWT Inspector

Decode a JSON Web Token, verify its signature, and check it the way your API should — plus inspect a JWKS or OpenID Connect configuration for risky settings.

Open →

Certificate & CSR Decoder

Read certificates, CSRs, .p7b bundles and CRLs — then check the chain reaches a trusted root, covers your host name, follows the CA/Browser Forum rules, and isn’t revoked.

Open →

Security Headers & CSP Analyzer

Paste a site’s response headers or its Content-Security-Policy and see what is missing, what is misconfigured and how to fix it — HSTS, CSP, framing, cookies, CORS and more.

Open →

SAML Inspector

Decode a SAMLResponse or AuthnRequest and see who it logs in, for which service and until when — with checks for unsigned assertions, signature wrapping and comment tricks.

Open →

IOC Extractor & Defanger

Pull URLs, domains, IP addresses, email addresses, hashes and CVE IDs out of any text — defanged and ready for a ticket — and brute-force single-byte XOR.

Open →

Encode / Decode Workbench

Base64, hex, URL, HTML, Unicode, Base32, quoted-printable, MIME headers, PowerShell -EncodedCommand, gzip/deflate (SAML), punycode, ROT and XOR — auto-detected, chainable and shareable as a link.

Open →

Work with me

Cyber Security Consultant in Stockholm with ~15 years in the field. CISSP, CISM, CCSP. Writes about AI security, PKI, and the tooling in between.

Connect on LinkedIn →

Stay in the loop

New articles on AI, Cybersecurity, and PKI — delivered to your inbox.

No spam. Unsubscribe any time. By subscribing you agree to our Privacy Policy.