Check your connection
Leaks, blockers and what sites can see.
VPN and DNS Leak TestLeaks, exit network and browser fingerprint in one run.Ad and Tracker Block TestWhether your blocker stops ads, trackers and ad SDKs.Exit IP IntelWhat sites learn from this connection.Browser FingerprintCanvas, GPU, fonts and clock a site can read.Tunnel Speed and OverheadLatency, jitter and throughput through your tunnel.
Set up a VPN
Choose, configure and audit a VPN tunnel.
VPN ChooserSix questions, one recommendation.VPN Protocol Comparator18 tunnel protocols compared field by field.WireGuard Config GeneratorServer and client configs with fresh keys.WireGuard AllowedIPs CalculatorExclude ranges from a tunnel with minimal CIDRs.VPN MTU and MSS CalculatorEncapsulation overhead and the MSS clamp.VPN Config AuditorGrade a .conf, .ovpn or ipsec.conf.VPN Endpoint ProberDetect WireGuard, OpenVPN, IKEv2 and TLS on a host.VPN Censorship RadarWhich VPNs work in China, Iran or Russia.
Hidden cameras & bugs
Sweep a room with your phone's sensors.
Room Sweep ChecklistSearch a room for hidden cameras, in order.Hidden Camera Lens FinderSpot lens glints with your phone camera.Ultrasonic Beacon DetectorWatch 15 to 24 kHz on your mic for tracking beacons.Magnetic Field SweepFind magnets holding hidden devices.MAC Vendor IdentifierName the devices on your router's client list.Smart Glasses Field GuideWhat camera glasses can record and how to tell.Camera Exposure ProbeRTSP, ONVIF and HTTP observations on a device you own; no response is inconclusive.Camera CVE WatchExploited bugs in IP cameras, NVRs and NAS.
Patch & threats
Exploited vulnerabilities and ransomware activity.
KEV Patch QueueExploited CVEs ranked by what to patch first.VPN Edge CVE WatchExploited bugs in VPN and remote-access appliances.CVSS CalculatorScore CVSS 3.1 or 4.0 with EPSS, KEV and your context.PHP2Shell Impact ObservatoryAffected stacks, sourced events, patch status and private inventory triage.Linux TCP UAF CheckerIs your kernel patched for CVE-2026-98432, and how exposed is it?Cyber WatchNational threat levels and who got hit, by country.Ransomware RadarCrews spiking against their own baseline.
Stolen accounts
Check for infostealer exposure and sign out everywhere.
Investigate
Map a domain, an incident, an ATT&CK trail or a photo.
Exposure GraphA domain's DNS, mail security and certificate footprint.ATT&CK Evidence MapperReview ATT&CK v20 candidates with cited evidence and analyst decisions.Breach Surface TimelineReview dated claims, source references and analyst severity.Shadow LocatorWhere and when a photo was taken, from its shadows.Threat Intel Data Sources256 public threat intel sources by category, vendor and actor.IOC EnrichmentPaste a report; get verdicts for every IP, domain, CVE, package and hash, with STIX and MISP export.
Vet a security vendor
Check a pen testing or SOC firm's licence.
Developer security
Leaked keys, webhook checks, cloud config and database migrations.
Secret ScannerFind leaked API keys in a log or .env, then redact.Webhook Signature CheckerVerify a webhook HMAC or public-key signature and see why it fails.Cloud Baseline CheckerCheck AWS and GCP Terraform against 31 rules.PostgreSQL Migration Safety CheckerLocks, rewrites and the online form of each migration statement.Kubernetes Workload HardeningCheck manifests, Helm values, RBAC and caps against the Pod Security Standards.Observability Exposure CheckerFind open Grafana, Prometheus and Loki settings and exposed monitoring ports.PQ Migration WorkbenchHarvest Window, PQ key sizes, NIST deadlines and a migration plan.
Detection engineering
Test rules, measure alert quality, define telemetry, map coverage.
Honeypot WorkbenchReview Cowrie, OpenCanary and T-Pot evidence, sessions, hashes and analyst notes.Sigma Rule TesterTest, lint, fix and convert Sigma rules; 471/471 SigmaHQ regression samples pass.Sigma ConverterSigma to Splunk SPL, Sentinel KQL, Lucene and SQL, checked on all 3,791 SigmaHQ rules.Detection CoverageSigmaHQ coverage on ATT&CK for your log sources.Identity Anomaly FinderImpossible travel, spray, brute force and MFA fatigue in Okta, Entra and CloudTrail logs.Audit Log ExplainerDecode one cloud, Windows or Sysmon event, or open an .evtx file.Alert Budget and Detection QualityPer-rule precision and tune list from Sentinel, Splunk ES, Elastic or TheHive exports.Detection Pipeline Lab13 Sigma detections with correlation, CI and alert quality on a 7-day sample estate.SOC Shift DeskWork a full analyst shift, then export cases to TheHive, DFIR-IRIS or STIX 2.1.Telemetry Contract BuilderOCSF 1.9.0 logging contracts that pass the official validator, with DeTT&CT export.
Freight and payment fraud
Check freight emails, invoices and carriers for fraud.
No tool matches. Try the Security Tool Finder for outside tools.