Free tools · No signup, nothing stored
Check your own exposure before someone else does.
A small set of genuinely useful, genuinely private tools, the same checks we run for the businesses we protect. Pick one and go.
Email security
Can someone spoof your email?
Enter your domain and see, in plain English, whether an attacker can forge mail from your name. Reads your SPF, DKIM, DMARC, MX, and DNSSEC straight from public DNS. Nothing stored.
Public DNS · Graded A–F · ~10 seconds
Email branding
Get your logo in the inbox (BIMI)
Check whether your verified logo can appear next to your emails in Gmail and Apple Mail. Tests your BIMI record, DMARC enforcement, and VMC — the three things it takes.
Public DNS · Instant · ~10 seconds
Website health
The Website Score
Enter your address, get an instant plain-English grade on security headers, HTTPS, speed signals, and search fundamentals. Checked once from our edge; nothing stored.
Instant · Graded A–F · ~10 seconds
Disclosure readiness
security.txt checker
If someone found a flaw in your site, could they tell you? Check whether you publish a security.txt — the standard vulnerability-reporting front door — and how it grades against RFC 9116.
Reads one file · Graded A–F · instant
Human security
Phishing link checker
Got a link that feels off? Paste it and see the phishing red flags — lookalike domains, hidden redirects, character spoofing. Analyzed as text in your browser; the link is never opened.
In-browser · Never clicked · instant
Cybersecurity
Password breach check
See if a password has appeared in a known data breach. Checked privately in your browser using k-anonymity, so your password never leaves the page.
In-browser · Private · ~10 seconds
Insurance readiness
Cyber-insurance readiness check
Score your environment against the controls carriers now require — enforced MFA, EDR, tested backups. See which renewal answers are defensible today, before you sign. Weighted, private, no signup.
8 controls · Weighted · ~3 minutes
Access security
MFA coverage gap calculator
Find the login surfaces where MFA is missing — email, VPN, remote desktop, admin accounts, and the legacy protocols that bypass MFA entirely. See your most dangerous gap.
Your inputs · Weighted · instant
Ransomware & recovery
Ransomware readiness scorecard
If ransomware hit tomorrow, would you restore from backup or be negotiating a payment? Score your recovery, containment, and response — and see your weakest link.
10 questions · Weighted · ~3 minutes
Healthcare compliance
HIPAA IT-safeguards self-check
For medical, dental, and legal practices: check the administrative, physical, and technical safeguards HIPAA expects, scored by category. Awareness only, not a compliance assessment.
11 checks · By category · ~3 minutes
Card-payment compliance
PCI scope finder
Take cards? Answer four questions and see how much of PCI actually applies — your likely SAQ type and the single biggest move to shrink your scope. Not a QSA assessment.
4 questions · Guided · ~1 minute
Self-assessment
Security posture self-check
Answer thirteen honest yes/no questions and get a clear, non-alarmist score of where your business stands. Nothing is sent anywhere.
13 questions · Scored · ~3 minutes
Risk & continuity
Downtime cost calculator
Put in your real numbers and see what an outage actually costs you. Conservative, stated assumptions; the math runs in your browser.
Your inputs · Honest math · instant
Why these are different
Nothing personal is stored
Eleven of these tools run entirely in your browser — the email checks read public DNS records straight from Cloudflare's resolver, and the phishing checker never even opens the link you paste. Only the Website Score and security.txt checker touch our edge worker, which fetches one public page or file, reads it once, and stores nothing. No signup walls anywhere.
No fake numbers
No invented benchmarks, no scare-stats. Where a tool states an assumption, it states it plainly.
Built by a security company
These are the same checks we run for clients, made free and self-serve. The deeper version is the IT Health Check.
Above the line · Want the why behind the tools?
Plain-English guides in the knowledge base.
The free resources library explains the dark web, MFA, ransomware, backups, and phishing in language a business owner can actually use. No gated PDFs.