Free tools

Buyer-side tooling for security and compliance teams.

Browser-only utilities — no email gate, no analytics, no signup. Use them, save your work locally, share the results however you want.

Available tools

Live

SOC 2 pentest readiness checklist

24-point self-assessment covering scoping, application, API, cloud, and report alignment. Saves locally.

Coming

Pentest RFP template

A buyer-side RFP template with the eight scoping-call questions every vendor should answer.

Coming

Vulnerability severity calculator (CVSS v3.1)

Calculate CVSS base + environmental scores against your actual deployment.

Want a tool we have not built yet?

Tell us on the scoping call what would have saved you a week of work last quarter. The ones we hear twice get built.