Email & Domain Security Check
Grades SPF, DKIM, DMARC, DNSSEC, MTA-STS, TLS reporting and CAA, and shows exactly what to fix.
Run the check →Free tools
Free security tools for busy businesses.
Quick checks for business owners and the IT people who support them. No sign-up. The email check keeps a 90-day log of domains checked (never your IP address); GapMap Lite and IdentityMap Lite never upload your files and only count usage anonymously.
GapMap Lite
Compare device exports from your EDR, remote support, patching and Active Directory, and see which devices each tool is missing. Runs in your browser.
Map your gaps →GapMap Demo
A demo version with made-up data. The full agent coverage review on a fictional retailer: EDR, patching and remote support matched against Active Directory, coverage rules, and work lists by fix.
Explore the demo →IdentityMap Lite
Add your Microsoft Entra ID user exports and find admins without MFA, stale accounts and forgotten guest invites. Runs in your browser.
Check your accounts →IdentityMap Demo
A demo version with made-up data. The full Entra ID account review on a fictional company: Conditional Access checked account by account, admin roles, shared and service accounts, and a ranked fix list.
Explore the demo →Website Security Check
HTTPS, certificate expiry and the security headers that stop clickjacking and script injection.
Cyber Insurance Readiness Quiz
The ten controls insurers ask about most, and whether you could answer yes honestly today.
Do-it-yourself toolkits
Ready-to-use kits built from public frameworks like NIST CSF 2.0 and the CIS Controls.
Email Security Kit
Step-by-step SPF, DKIM, DMARC and MTA-STS setup for Microsoft 365, Google Workspace and common senders. Copy-paste records and a rollout plan.
Small Business Security Policy Pack
Editable policies that insurers and customer questionnaires ask for: information security, acceptable use, access control, incident response and more.
Ransomware Tabletop Kit
Run a 90-minute exercise with your leadership team. Facilitator guide, three scenarios, timed injects and an after-action template.
Field Notes
One short email every other week: a real-world attack technique and the exact fix. Plus first access when new tools and toolkits launch.
Rather have it done for you?