Scan a website and see what an attacker sees, mapped to the Essential Eight. Or, with no account at all, check a password against billions of leaked credentials and find out whether someone can send email as your business.
What would an attacker see if they looked at your website today? Checks the things that actually get small firms breached: out-of-date software, missing browser protections, weak encryption. Every finding is mapped to the Essential Eight and says what it means in plain English.
Launch scannerOne check that runs the others. Scans the website, tests the email authentication, then fills in the Essential Eight and cyber insurance audit with everything those results can prove. Whatever a scan cannot see is marked for a person to answer.
Scan and populate the auditCan someone send email pretending to be your business? Reads your SPF, DKIM and DMARC records and gives a plain-English answer. No account needed.
Check my domainSee whether a password has appeared in a public data breach. Runs entirely in your browser, and the password is never sent to us.
Check a passwordPaste Mermaid or UML code, flowcharts, sequence, class, state and ER diagrams, and get a clean SVG. Renders in your browser; the code never leaves the page.
Open rendererHas a service your firm relies on been breached? Type its domain, see when, how many accounts, and whether passwords leaked. No personal data is sent anywhere.
Check a serviceIs this email really from who it says? Drop in the suspicious message and see where it actually came from, whether the sender passed the usual checks, and the signs of a fake. Processed in memory, never stored.
Analyse an emailHas somebody already registered a domain that looks like yours? Finds the typos and near-misses a scammer would use to invoice your clients, and shows which of them are set up to send email.
Find lookalikesCould you lose your domain without noticing? Shows when it expires, whether it is locked so nobody can transfer it away from you, and whether your home address is sitting in the public record.
Check a domainFinished a workshop lab? Verify your AWS resources step by step with read-only checks, and get a hint for anything that fails.
Open lab checkerIs the padlock in your visitors' browser actually doing its job? Certificates expire quietly and old encryption settings linger for years. Tells you whether yours is current, and what to ask your provider for if it is not.
Check my certificate