For defensive security audits of dumps you own or are authorized to review (e.g. before a migration or pentest remediation). All parsing and scoring happens locally in your browser via JavaScript — no file or credential is ever sent to any server.

Load SQL / CSV Dump

Drop .sql, .csv or .txt dump file(s) here, or click to browse

Supports MySQL/PostgreSQL INSERT INTO, PostgreSQL COPY ... FROM stdin, and CSV with header row

Detection Settings

Add custom column names if your dump uses non-standard naming (auto-detection already covers common patterns like user, login, pwd, pass_hash...).

Hash type is identified by structure (bcrypt/argon2/scrypt prefixes, hex length for MD5/SHA1/SHA256/SHA512, base64 length for others). This does not crack any hash.

Load a SQL dump above and click Run Audit to see results.