The security toolkit
we actually use.

Analyse the SSL/TLS configuration of any web server. Industry standard for certificate and protocol assessment.

Scan any domain for missing HTTP security headers. Essential for web application security posture.

Open-source web application security scanner used by security professionals worldwide.

Network discovery and security auditing. Industry standard for network scanning and host discovery.

Search engine for internet-connected devices. Used for attack surface discovery and exposure assessment.

Check if an email address has appeared in known data breaches. Essential for credential monitoring.

Breach monitoring service. Useful for ongoing personal and corporate email monitoring.

Search engine for breached credentials and leaked data. Used in threat intelligence and incident response.

Comprehensive DNS and email security diagnostics. Check SPF, DKIM, DMARC, MX records, and blacklists.

Analyse and monitor DMARC configuration. Essential for protecting your domain from email spoofing.

Global DNS propagation checker. Verify DNS changes have propagated across global resolvers.

The updated NIST CSF — the most widely adopted security framework globally.

Nigeria Data Protection Act 2023 — official text and NDPC guidelines. Mandatory reading for Nigerian data controllers.

Annotated GDPR text with recitals and article-level commentary. The best free GDPR reference available.

AICPA Trust Services Criteria — the definitive reference for SOC 2 audit requirements.

Prescriptive configuration guides for operating systems, cloud platforms, and applications.

Open-source cloud security tool for AWS, Azure, and GCP. Checks against CIS benchmarks and compliance frameworks.

Multi-cloud security auditing tool. Assesses cloud infrastructure against security best practices.

Centralised security findings across AWS accounts. Automated checks against CIS AWS Foundations Benchmark.

Security posture measurement for Microsoft 365 and Azure with prioritised improvement recommendations.

Open-source password manager. Recommended for teams needing enterprise-grade credential management.

Local password manager. Ideal for air-gapped environments or organisations with strict data residency requirements.

Browser-based tool for encryption, encoding, and data analysis. Used extensively by security professionals.