SEC
Security desk
Hashes, encodings, headers, and checks you would rather run yourself. Nothing here asks for an account.
865–888 / 915
Dockerfile Security Auditor
LiveDockerfile Security Auditor. Find insecure Dockerfile patterns. The result stays on this page.
Open toolKubernetes Manifest Security Auditor
LiveKubernetes Manifest Security Auditor. Find risky settings in K8s YAML. The result stays on this page.
Open toolTerraform Security Auditor
LiveFind insecure cloud resources in Terraform. The result stays on this page.
Open toolGitHub Actions Workflow Security Auditor
LiveFind risky workflow patterns and secrets exposure. The result stays on this page.
Open toolConditional Access Policy Auditor
LiveFind gaps in Entra ID conditional access exports. The result stays on this page.
Open toolJWT Security Auditor
LiveFind weak algorithms, missing claims and long expiry. The result stays on this page.
Open toolTLS Configuration Auditor
LivePaste server TLS config to find weak protocols/ciphers. The result stays on this page.
Open toolSecurity Policy Gap Auditor
LiveCompare a policy document to framework requirements. The result stays on this page.
Open toolMicrosoft Secure Score Report Analyzer
LivePrioritize Secure Score recommendations. The result stays on this page.
Open toolOAuth App Permissions Auditor
LiveFlag risky third-party app permissions. The result stays on this page.
Open toolZeek Script Snippet Generator
LiveGenerate Zeek logging/detection snippets. The result stays on this page.
Open toolIBM QRadar Firewall Deny Spike Detection Generator
LiveGenerate a tuned IBM QRadar detection for firewall deny spike with field mapping and false-positive guidance
Open toolSumo Logic Impossible Travel Detection Generator
LiveGenerate a tuned Sumo Logic detection for impossible travel with field mapping and false-positive guidance
Open toolSumo Logic Account Lockout Spike Detection Generator
LiveGenerate a tuned Sumo Logic detection for account lockout spike with field mapping and false-positive guidance
Open toolSumo Logic MFA Fatigue Detection Generator
LiveGenerate a tuned Sumo Logic detection for mfa fatigue with field mapping and false-positive guidance
Open toolSumo Logic Login from Tor or Anonymizer Detection Generator
LiveGenerate a tuned Sumo Logic detection for login from tor or anonymizer with field mapping and false-positive guidance
Open toolSumo Logic Service Account Interactive Logon Detection Generator
LiveGenerate a tuned Sumo Logic detection for service account interactive logon with field mapping and false-positive guidance
Open toolSumo Logic New Scheduled Task Created Detection Generator
LiveGenerate a tuned Sumo Logic detection for new scheduled task created with field mapping and false-positive guidance
Open toolSumo Logic New Service Installed Detection Generator
LiveGenerate a tuned Sumo Logic detection for new service installed with field mapping and false-positive guidance
Open toolSumo Logic Office App Spawning Shell Detection Generator
LiveGenerate a tuned Sumo Logic detection for office app spawning shell with field mapping and false-positive guidance
Open toolSumo Logic Security Tool Disabled Detection Generator
LiveGenerate a tuned Sumo Logic detection for security tool disabled with field mapping and false-positive guidance
Open toolSumo Logic Kerberoasting Detection Generator
LiveGenerate a tuned Sumo Logic detection for kerberoasting with field mapping and false-positive guidance
Open toolSumo Logic RDP Exposed to Internet Detection Generator
LiveGenerate a tuned Sumo Logic detection for rdp exposed to internet with field mapping and false-positive guidance
Open toolSumo Logic Large Outbound Data Transfer Detection Generator
LiveGenerate a tuned Sumo Logic detection for large outbound data transfer with field mapping and false-positive guidance
Open tool