Webinars
UUser
Log out

Welcome back, there 👋

Here is what is happening across your security workspace.

-
Scans run
 
-
Open issues
 
-
Tool checks run
 
-
Webinars available
 

Findings by severity

View scanner
-issues
Critical -
High -
Medium -
Low -

Recent activity

Loading…

Quick actions

Website Scanner

Passive security scan plus a design and quality audit, safe to run on any site you are authorised to test. No intrusive requests.

Enter a URL and press Start scan to see findings mapped to the Essential Eight.

Mermaid / UML Renderer

Paste Mermaid or UML code and render it to SVG. Everything happens in your browser: the code never leaves this page.

Diagram code
Preview

AWS Lab Checker

Finished a workshop lab? Pick your session, enter your resource details, and the checker inspects your real AWS resources with read-only calls and stamps each step pass or fail.

Read-only. The checker never creates, changes, or deletes anything in your account.

Breached Services

Type the domain of a service your firm relies on and see whether it has suffered a known data breach, when, and what kind of data leaked. Nothing about you or your clients is sent anywhere.

Try the tools your staff log in to every day: xero.com, canva.com, linkedin.com, dymocks.com.au, ticketek.com.au. If a service has leaked passwords, anyone reusing that password elsewhere is exposed.

Email Header Analyser

Paste the whole suspicious email, just its headers, or a forwarded copy, or drag the email file straight onto the box. It finds the headers itself and shows where the message really came from, whether it passed authentication, and the warning signs to look for. Processed in memory and never stored.

Drop an email file here, or
Best result: the original file. Outlook desktop: drag the email from your inbox list straight onto the box. Gmail: three dots menu, Download message, then drop the file here. A forwarded copy works too, but only shows what the forwarder chose to include.

Lookalike Domains

Generate the typos, swaps and lookalike spellings of your domain that a scammer would register, and find out which ones already exist. Uses DNS only.

Checks around a hundred variations in a few seconds. Worth re-running every few months, since new registrations appear all the time.

Domain Registration

When your domain expires, who the registrar is, whether it is locked against transfer, and whether your personal details are published. Read from the registry directly.

SSL / TLS Checker

Inspect a host's certificate and TLS configuration: expiry, protocol versions, and common misconfigurations.

DNS & Email Security

Look up a domain's email-authentication and DNS posture: SPF, DKIM, DMARC, MX and DNSSEC.