Free Tools
Free security tools, no signup required
The same quick checks we run when we assess a new client, packaged so you can run them yourself. Everything works right in your browser. No account, no email required, and full results every time.
Email Security Checker
Can scammers send email that looks like it came from your company? Enter your domain and get a graded report on your DMARC, SPF, and DKIM protection, explained in plain English.
Open the toolBreached Password Checker
See if a password has appeared in known data breaches. Your password never leaves your browser: we check it against the Have I Been Pwned database using a privacy-preserving method.
Open the toolPassword Strength Tester
Find out how long it would take an attacker to crack a password, then generate a strong, easy-to-remember passphrase. Everything runs on your device, nothing is sent anywhere.
Open the toolEmail Header Analyzer
Got a suspicious email? Paste its hidden headers and we will decode where it really came from, whether it passed authentication checks, and the red flags to look for.
Open the toolDomain Lookalike Checker
Scammers register near-identical copies of real domains to impersonate businesses. Enter yours and we will check which common lookalikes are already registered, and whether they can send email.
Open the toolSpot the Phish Quiz
Nine realistic emails: some genuine, some scams. Can you tell which is which? Get your score, see the tells you missed, and share it with your team.
Open the toolDowntime Cost Calculator
What would a day of downtime actually cost your business? Plug in your own numbers and see the math on lost productivity and revenue, per hour and per incident.
Open the toolQR Code Safety Checker
QR phishing is on the rise because nobody can read a QR code by eye. Upload a photo of one and see exactly where it leads, plus red flags in the destination, before you ever scan it.
Open the toolWhy are these free?
Because they answer questions every business should be able to answer without paying anyone: can my email be spoofed, are my passwords safe, is this message legit? If a tool turns up a problem you'd like handled for you, that's what we do all day. Fixing these issues is included in our managed plans, and we're happy to help on a one-off basis too.
Privacy first: these tools run in your browser. Passwords and pasted emails are never sent to our servers, and we don't store what you check.
Want a real expert to look things over?
These tools catch the basics. A free assessment goes deeper: we review your setup, flag your biggest risks, and show you exactly what we'd fix first.