Practical cyber safety workflows, ready when something looks wrong.

Fast checks for links, domains, files, and browser signals.

• URL InspectorWhat it does: Reviews URL structure, reputation, redirects, and phishing indicators. How to use it: Enter a suspicious link before opening it.
• Trust SignalsWhat it does: Summarizes domain, DNS, HTTPS, and known risk signals. How to use it: Enter a domain before credentials or payment details.
• DNS LookupWhat it does: Reviews SPF, MX, DMARC, and public records. How to use it: Enter a domain to check its visible posture.
• Domain IntelWhat it does: Checks hostname patterns and impersonation clues. How to use it: Enter a domain that resembles a trusted service.
• Header AnalyzerWhat it does: Reviews sender alignment and delivery warnings. How to use it: Paste sanitized email headers.
• IP ReputationWhat it does: Provides defensive context for an IP in a message or log. How to use it: Enter the address and note where it appeared.
• Hash CheckerWhat it does: Validates MD5, SHA-1, or SHA-256 format. How to use it: Paste a hash for safe lookup guidance.
• Speed ProbeWhat it does: Measures browser delivery timing. How to use it: Run it when a page or browser workflow feels slow.
• API LatencyWhat it does: Measures browser-to-service round-trip timing. How to use it: Run it to compare a slow connection or API path.
• Threat TimelineWhat it does: Orders incident events for response and follow-up. How to use it: Add times, actions, and affected accounts.

Deeper website, hostname, and impersonation review.

• SSL/Header ValidatorWhat it does: Reviews visible TLS and website security-header posture. How to use it: Enter a site you own or may assess.
• Domain Reputation SnapshotWhat it does: Creates a structured trust and risk snapshot. How to use it: Enter a URL or domain before login or payment.

Investigate phishing, spoofing, and business-email risk.

• Email AuditorWhat it does: Reviews sender, subject, body, and context for phishing and BEC indicators. How to use it: Paste the email after removing private details.
• Email Security PostureWhat it does: Reviews SPF, DKIM, DMARC, and MX notes. How to use it: Enter your domain to identify spoofing gaps.

Create practical documents, checklists, and recovery guidance.

• IR PlanWhat it does: Builds containment, evidence, recovery, and escalation steps. How to use it: Describe a phishing click or compromise.
• Device CheckupWhat it does: Creates an endpoint basics checklist. How to use it: Describe the device and symptoms without credentials.
• Password PolicyWhat it does: Reviews password, MFA, admin-account, and manager readiness. How to use it: Answer the guided access questions.
• ScorecardWhat it does: Produces a small-business cybersecurity maturity view. How to use it: List the controls your business uses.

Structured reviews for business risk and team readiness.

• Asset ExposureWhat it does: Organizes public assets, subdomains, and URLs. How to use it: Enter assets you own or may assess.
• Vendor RiskWhat it does: Builds a supplier questionnaire around access, criticality, MFA, and evidence. How to use it: Enter supplier details before granting access.
• TrainingWhat it does: Creates security-awareness lessons. How to use it: Choose a topic and audience for a practical draft.

Local utility for approved encryption and hashing.

• Crypto UtilitiesWhat it does: Performs local AES-GCM encryption, decryption, or SHA-256 hashing. How to use it: Choose an operation and use non-sensitive test content.

Import approved evidence for defensive interpretation. No live commands run here.

• WiresharkWhat it does: Summarizes authorized packet evidence. How to use it: Import a sanitized PCAP or export.
• TCPdumpWhat it does: Reviews authorized traffic evidence. How to use it: Import a sanitized capture or text export.
• NmapWhat it does: Prioritizes exposure from an authorized inventory. How to use it: Import Nmap XML or text.
• OWASP ZAPWhat it does: Prioritizes authorized web findings. How to use it: Import a ZAP XML, JSON, or HTML report.
• NiktoWhat it does: Reviews authorized web-exposure findings. How to use it: Import sanitized text or CSV output.
• Password AuditWhat it does: Provides policy guidance from an approved offline audit. How to use it: Import sanitized CSV, JSON, or text.