Free tools
Small utilities for the jobs that come up every week. Everything runs in your browser (the SSL checker's TLS probe runs on our infrastructure): no signup, no tracking, and the things you look up never touch our servers.
Subnet calculator
CIDR in, everything out: network, broadcast, usable range, netmask and wildcard.
NetworkingVLSM subnet planner
Split a base network into right-sized subnets from a list of host counts.
DNSDNS lookup
A, AAAA, MX, TXT, NS and more over DNS-over-HTTPS, with Google as fallback.
EmailSPF, DKIM and DMARC checker
Grades a domain's email authentication and explains what is missing.
DomainsDomain expiry checker
The registry's authoritative RDAP record: expiry, registrar, status, nameservers.
TLSSSL certificate checker
Expiry with days remaining, issuer, protocol, cipher and covered names.
SecurityPassword generator
Cryptographic randomness with honest crack-time estimates.
SecurityPassword breach checker
Checks the HIBP corpus with k-anonymity; the password never leaves your browser.
LifecycleOS end-of-life checker
End-of-support dates for Windows, Server, Ubuntu, Debian, RHEL and macOS.
SLASLA uptime calculator
What 99.9% actually allows, per day, month and year.
SchedulingCron expression builder
Plain-English explanation and the next five run times for any cron line.
Linuxchmod calculator
Permissions to octal and back, including setuid, setgid and sticky.
Security checklists
Hardening jobs written in the order a technician runs them, with the reasoning kept in the posts they link to. Free, and each one downloads as Markdown.
Entra ID hardening
Break-glass accounts, legacy auth, MFA, privilege and logging, in the order that does not lock you out of the tenant.
ChecklistMail server hardening
Support status first, then Extended Protection, basic auth, TLS on SCHANNEL and .NET together, and an SPF record that survives the 10 lookup limit.
Templates
Working documents for the operational side of managed IT, written to be edited and handed to a client rather than admired.
Client onboarding
Contracts, access, discovery, agent rollout, security baseline and the first 30 days.
TemplateBackup policy
Scope, RPO and RTO per system, the 3-2-1-1-0 rule, retention, immutability and restore testing.
TemplateIncident response plan
Severity levels, roles, the first hour, containment, recovery and the post-incident review.
Want a tool we have not built yet? Tell us and it goes on the list.