Free tools
Free tools that tell you something useful in under three minutes
No sign-up, no email wall, no drip campaign. Each tool answers a question we get asked constantly — whether your domain can be spoofed, what an hour offline really costs, and whether a managed agreement stacks up against what you spend today.
- Security2 minutes
Cyber exposure estimator
What would one serious incident cost you?
Score eight essential controls and model your indicative exposure to a breach: notification costs, lost productivity during recovery and typical extortion spend, in your own currency.
You get: A dollar figure for your current risk and a ranked list of the gaps driving it.
Open cyber exposure estimator - Security30 seconds
Domain & email health check
Is your domain able to be spoofed?
Live lookup of your SPF, DMARC, DKIM, MX, DNSSEC and CAA records with a plain-English score and the exact records that are missing or misconfigured.
You get: A scored report on whether criminals can spoof your domain
Open domain & email health check - Resilience1 minute
Downtime cost calculator
What does one hour offline actually cost?
Model the real cost of an outage using your revenue, staff count and wages, then compare it against uptime tiers from 99% to 99.99%.
You get: Your annual cost of downtime at each uptime tier
Open downtime cost calculator - Cost2 minutes
Managed IT savings calculator
Break-even on a managed agreement.
Compare your current ad-hoc IT spend — hourly callouts, lost productivity and unmanaged licences — against a fixed per-user managed plan.
You get: A three-year cost comparison you can take to your board
Open managed it savings calculator - ProductivityInstant
Passphrase generator
Strong credentials, generated in your browser.
Generate random passwords or memorable passphrases entirely in your browser — nothing is sent to a server — with a live entropy and crack-time estimate.
You get: Credentials that survive an offline cracking attempt
Open passphrase generator - Security3 minutes
Essential Eight self-assessment
Score your security maturity against the ACSC baseline.
Answer a short set of questions across all eight ACSC mitigation strategies and receive a maturity score with the highest-impact next actions.
You get: A maturity score and a prioritised remediation order
Open essential eight self-assessment

Why we give these away
Most IT buying decisions stall because nobody has quantified the risk or the cost. These tools put a number on it using your own inputs, so the conversation with your board, your accountant or your insurer starts from evidence instead of a vendor claim. If the numbers say you are fine, that is a legitimate answer — and we will tell you so.
- No email gate — every result is shown before we ask you anything
- Calculations run in your browser wherever possible, and the passphrase generator never sends data anywhere
- The domain check reads only public DNS records, exactly as an attacker would
- Every tool ends with what we would actually change first, in order of impact
Want the full picture instead of a single number?
A 30-minute discovery call covers your environment, risks and priorities — and you leave with a written summary whether or not you engage us.
