Professional security checks, free
Scan your domain or assess your security programme, see your headline score instantly, then receive a detailed branded PDF report by email.
Website & Email Security Scan
Live, non-intrusive checks of public information about your domain: Mozilla Observatory grade, 10 security-header tests, HTTPS/HSTS, SPF, DMARC, DKIM, CAA, DNSSEC, MX and certificate-transparency subdomains.
Only scan domains you own or are authorised to assess. Checks use public APIs (Mozilla Observatory, Google Public DNS, crt.sh).
Security Readiness Assessment
32 questions across 8 domains — governance, identity, network, endpoint, cloud, data, incident response and compliance. Takes about 6 minutes.
0 of 32 answered
Breached Password Check
Checks a password against Have I Been Pwned’s 900M+ breached passwords. Uses k-anonymity: only the first 5 characters of a SHA-1 hash leave your browser.
Password Strength & Generator
Entropy and estimated crack time, computed locally. Generate strong passwords and passphrases with the Web Crypto API.
Hash Generator
SHA-1, SHA-256, SHA-384 and SHA-512 of any text — computed in your browser.
Phishing Link Analyzer
Heuristic checks for suspicious URLs: lookalike domains, IP hosts, punycode, risky TLDs, credential keywords and more. The link is not visited.
Email Header Analyzer
Paste raw email headers to see SPF, DKIM and DMARC results, the sending path and red flags.
These tools provide indicative results and are no substitute for a professional assessment. Penetration testing · Gap analysis · Case studies
Ready to know where you stand?
Start with a complimentary security audit. Our consultants review your exposure and deliver a prioritised, plain-English action plan.