Tools

Check your defences.

Free tools you can run on your own organisation. The IP, website and email checks hand off to the NCSC, Qualys SSL Labs and Mozilla Observatory and only look at public information. The rest run in your browser or through cybun.kr. We don't store what you check.

• Free tool

  IP & Website Check

  Check your IP address and website for exposed services, known vulnerabilities and related domains, using the NCSC's free IP & Website Check.

  Run the check→IP

• Free tool

  Email Security Check

  See whether criminals can send email pretending to be your domain, and whether your email is protected in transit, using the NCSC's free Email Security Check.

  Run the check→Email

• Free tool

  HTTPS & Headers Check

  Grade your website's HTTPS setup with Qualys SSL Labs and its security headers with Mozilla Observatory, two free, widely used testers.

  Run the check→HTTPS

• Free tool

  Cyber Essentials Readiness Check

  Answer yes or no against the official Cyber Essentials requirements and get a fix-first list of what to sort out before you apply.

  Run the check→CE

• Free tool

  Password Breach Check

  See whether a password has appeared in known data breaches without it ever leaving your device, and generate a strong random passphrase.

  Run the check→Pwned

• Free tool

  CVE Lookup

  Look up any CVE to see how severe it is (CVSS), how likely it is to be exploited (EPSS) and whether CISA lists it as exploited in the wild.

  Run the check→CVE

• Free tool

  Email Header Analyser

  Paste the headers of a suspicious email to see whether it passed SPF, DKIM and DMARC, who really sent it and the route it took.

  Run the check→Headers

• Free tool

  Show My IP

  See the public IP address you connect to the internet from, IPv4 or IPv6, and copy it in one click.

  Run the check→My IP