Practical, explainable tools for sysadmins and small agencies — sized to answer one specific compliance or hardening question, then get out of your way. Companions to the guides.
Paste a URL. 42 external checks — TLS + certificate, DNS + email authentication, security headers, cookies + CORS, NIS2 signals — and every finding links to the guide that fixes it. Score out of 100, per-category breakdown, shareable result URL.
15–30 seconds. Read-only. Retained 30 days.
Prefer not to paste a URL? Answer ten yes / mostly / no questions across host, edge, data tier, and operations. Same 100-point rubric as the Scan, plus a tailored reading list ranked by which gaps close the most ground fastest.
Two minutes. Shareable result URL, no account.
Estimate whether your organisation falls into scope of NIS2 as an essential or important entity, based on sector and size thresholds. Output includes the reasoning and the caveats.
Not legal advice — see the disclaimer.
Generate a hardened Nginx server block for your domain — TLS 1.2/1.3 (or 1.3 only), OCSP stapling, HSTS, modern cipher selection — with PHP-FPM, reverse-proxy, or static-only backend options.
Test before deploying — see the disclaimer.