Security Tools

Passive assessment of website security posture including HTTP security headers, TLS observations, and DNS security records.

• •Checks HTTP Security Headers (CSP, HSTS, X-Frame-Options, etc.)
• •Inspects DNS email security records (SPF, DMARC, MX)
• •Detects exposed web server software banners
• •Provides copy-pasteable remediation configs for Nginx, Apache, and Next.js

Evaluates individual HTTP response headers against current defensive best practices and provides remediation guidance.

• •Comprehensive audit of 6 essential defensive headers
• •Semantic color coding (Pass, Warning, Missing)
• •Detailed rationale and threat mitigation context for each header
• •Direct copy-ready configuration snippets

Extracts, deduplicates, and defangs Indicators of Compromise (IPs, domains, hashes, URLs, CVEs) from raw logs and text.

• •Extracts IPv4, IPv6, Domains, URLs, Email Addresses, MD5, SHA-1, SHA-256, and CVEs
• •One-click defanging toggle to neutralize dangerous links and addresses
• •Local-only in-browser execution with zero server data retention
• •Export results as formatted plain text or structured JSON

Parses raw RFC 822 email headers to trace hop-by-hop Received latency, verify SPF/DKIM/DMARC authentication results, and flag display-name spoofing and envelope sender mismatches.

• •Hop-by-hop Received header timeline with calculated transit latency
• •Authentication-Results validation (SPF, DKIM, and DMARC status)
• •Display name spoofing and Return-Path envelope mismatch detection
• •100% in-browser client-side execution with zero retention of sensitive email data

Score your security operations team on people, process, data, tooling and AI governance, find your agentic SOC phase, and sort SOC tasks into AI agent quick wins, strategic investments, rule-based automation and tasks to avoid.

• •20-question readiness scorecard across people, process, data, tooling and governance
• •Recommended phase on the four-phase agentic SOC roadmap with next steps
• •Impact and difficulty matrix that sorts SOC tasks for AI agents
• •Copy-ready summary to share with your SOC manager or CISO

Inspects URLs for heuristic risk factors such as suspicious TLDs, IP hosts, excessive subdomains, and obfuscated query strings without visiting the target.

• •100% safe inspection: Does not send outbound HTTP requests to the target URL
• •Identifies IP-based hostnames, deceptive subdomains, and suspicious keywords
• •Decodes URL-encoded parameters and character sets
• •Outputs standardized defanged URL format (hxxps[://]...)

Search National Vulnerability Database (NVD) records, CVSS v3.1 vector metrics, and CISA Known Exploited Vulnerabilities (KEV) catalog entries.

• •NVD vulnerability record search by CVE ID and affected software keyword
• •CISA Known Exploited Vulnerabilities (KEV) catalog flag and remediation deadlines
• •Interactive CVSS v3.1 vector metric breakdown (Attack Vector, Complexity, Privileges, Impact)
• •Curated quick-reference advisories for prominent actively exploited vulnerabilities

Check your readiness for ISO 27001 and GDPR across policies, risk, PII protection, access, training, suppliers, incidents and audit reporting, with every gap mapped to the clause or article it affects.

• •32 questions across 8 governance, risk and compliance domains
• •Filter by ISO 27001, GDPR or both, with clause, Annex A and article references
• •Domain scores, maturity level and a prioritized gap list with recommended actions
• •Copy or download a Markdown action plan for management reporting

Build a cybersecurity risk register in your browser: score likelihood and impact on a 5x5 matrix, record inherent and residual risk, owners and treatments, view a heat map and export to CSV.

• •5x5 likelihood and impact scoring with Low, Medium, High and Critical bands
• •Inherent and residual risk, treatment, owner role, due date and review date
• •Heat map and list of risks above your chosen risk appetite
• •Sample risks to start from, plus CSV export for spreadsheets and GRC platforms