Is my data sent anywhere when I use CyberChef?

No. CyberChef runs entirely in your browser. The page is served from your own instance and all encoding, decoding and crypto happens locally, so the data you paste never leaves your machine for a third-party website.

Does it store anything or need a login?

No. This is a static single-page app with no database and no accounts. Nothing you process is saved on the server, so just bookmark the address and open it when you need it.

Which version of CyberChef is this?

The official GCHQ CyberChef v11.2.0 build, served by nginx from a thin CoreHost image. We keep it patched as new releases land.

Who keeps CyberChef updated?

We do. Curated updates roll out shortly after upstream releases and are tested on our platform first; security fixes move fast. If an update changes behaviour in a breaking way, we email you before it lands.

What happens to my data if I cancel?

Take a final export or SFTP copy any time before you cancel. After termination we keep your data for 14 days (in case you change your mind), then purge it, backups included.

Can I use my own domain?

Yes. Point a CNAME at your instance, prove ownership with a TXT record, and TLS certificates are issued automatically. Cloudflare-proxied domains work; if you use CAA records, allow letsencrypt.org.

Dev Tools

Managed CyberChef hosting

The cyber swiss-army knife, running on your own private instance

Live in minutes
Daily backups, one-click restore
SFTP access, no lock-in
from US$1.10/mo in Poland

Deploy CyberChefStart free with $5 credit · no card needed

CyberChefWhat you're getting

CyberChef is GCHQ's Cyber Swiss-Army Knife: a visual workbench where you drag simple operations into a recipe to encode and decode, encrypt and hash, convert data formats, compress, parse and analyse. Base64, URL and HTML entities, hex and binary, JWT decoding, AES and RSA, ROT and XOR, gzip and zip, JSON and CSV, timestamps, regular expressions, magic auto-detection and hundreds more operations chain into a live pipeline that shows the result of every step as you type.

The reason to run your own instance is privacy. All of CyberChef's work happens inside your own browser against a page served only from your server, so secrets and customer data never travel to a third party. The app is completely static, with no database and no accounts, so it loads fast, works offline once open, and we keep it patched and available in a region close to your team.

Replaces Online encode/decode sites: Instead of pasting tokens, config blobs, API keys or customer records into whatever free base64 or JWT decoder shows up in search results, your CyberChef instance does the same work privately, with the data never leaving your browser.

On CoreHost

Hundreds of operations for encoding, encryption, hashing, compression and data-format conversion
Fully in-browser: sensitive data is processed locally and never sent to a third-party site
Live recipe workbench chains steps into one pipeline with instant output as you type
Static and stateless with no database or accounts, so it is fast and nothing is stored server-side

Included with every appStandard, not add-ons

Daily backups, one-click restore

Every instance is backed up daily. Restore any snapshot yourself from the panel. No support ticket, no fee.

SFTP file access

Direct SFTP access to your app's data folders. Your files are never locked away from you.

Custom domain + auto TLS

Bring your own domain with a CNAME and a TXT verification record. Certificates are issued and renewed automatically.

AI + human support

A 24/7 AI engineer that can actually inspect and fix your app, with a human escalation path. App-level help included.

Automatic updates with rollback

Each update is tested on a copy and backed up first, and rolled back automatically if the app fails its checks.

Per-app firewall

Restrict access to the IP addresses you choose, with an Add my IP button. Off by default.

Backups to your own S3

Add encrypted, incremental backups to your own S3-compatible storage on top of the daily ones we include.

Resize any time

Move up or down a tier from the panel. Your balance is drawn by the hour, so you pay the new rate from the change.

RegionsWhere CyberChef runs

CyberChef can be deployed in Sydney, the US and Poland. Pick the region closest to the people who use it. Daily backups are encrypted and stored in the EU.

Sydneyfrom US$1.50/moClosest to Australia and New Zealand.
The USfrom US$1.50/moClosest to the Americas.
Polandfrom US$1.10/moLowest price, 25% less than the other regions.

Moving to CoreHostMove your existing CyberChef here

CyberChef keeps nothing on the server that you need to carry over.

Nothing to move

CyberChef keeps nothing on the server, so there is nothing to move. Saved recipe links carry the recipe in the address, so they usually open the same recipe on your new address.

How moving to CoreHost works CoreHost compared with PikaPods More Developer tools apps

DeployPick a size and a region

1. Plan (CyberChef needs Lite or larger to run well)

Prices exclude GST/VAT where applicable. Drawn hourly from your prepaid balance, cancel any time.

Lite

$1.50/mo

1 vCPU
1 GB RAM
5 GB NVMe

Lightweight tools: bookmarks, feeds, uptime checks, password vaults.

Standard

$2.30/mo

1 vCPU
2 GB RAM
10 GB NVMe

The right fit for most apps: automation, wikis, databases.

Power

$3.90/mo

2 vCPU
4 GB RAM
20 GB NVMe

Busy teams and heavier workloads with room to breathe.

Scale

$6.30/mo

3 vCPU
8 GB RAM
40 GB NVMe

The most demanding apps in the catalog, at full stride.

Extra storage+25 GB NVMe per block, stackable on any tier

+$0.00/mo

2. Region

…

Australia

$2.30/mo

…

United States