Free tools

One risk. One check. One clear next step.

Run a bounded check without creating an account. Each tool states exactly what it observes and what it cannot prove.

A bounded, passive check of the public response your website sends to browsers.

See whether your public DNS gives receiving systems enough evidence to reject impersonated email.

Paste a snippet and scan for common token, private-key and secret-assignment patterns entirely in your browser.

Review a Content-Security-Policy header locally and get a safer rollout sequence before enforcement.

A read-only guided review based on the strongest opportunity found in the supplied marketplace research.