Free tools
Point these at your own stuff.
Small, free scanners, one new one every month. No account. Nothing secret is ever stored.
Free tool #1
LiveIs your website showing your secret keys?
We look at the same files your visitors download and tell you if an OpenAI, Stripe or AWS key is sitting in there.
Leaked Key Check
Free tool #2
NewCan someone send email pretending to be you?
Type your domain. We read your SPF, DKIM and DMARC records and grade how easy you are to fake, A to F.
Email Spoof Check
Free tool #3
NewIs your page whispering to AI agents?
Finds text that people can't see but AI agents read: hidden instructions, invisible characters, sneaky comments.
Agent Trap Check
Free tool #4
NewWhat can your AI tools actually touch?
Paste your Claude, Cursor or VS Code MCP config. We flag keys in plain text and tools with too much power. Runs in your browser.
AI Tool Permissions Audit
Next month
2FA Reality Check
A five-minute walk-through of the accounts that matter, and whether they're actually protected.
The newsletter
Get each new tool the day it ships.
One real AI-security risk in plain English, a five-minute fix, and a new free tool. One email a month.