2
Free Tools

Free Security Tools

Two focused security checks that need no setup: look up an email address against known breach data, and test whether a site's headers leave it open to clickjacking.

Security tools

Which Security tool should you use?

These two checks answer different questions and neither replaces a real security review. The Email Breach Checker tells you whether an address appears in known public breach data — useful before reusing a password or when onboarding someone. The Clickjacking Checker inspects whether a site allows itself to be framed, which is a header configuration question rather than a code one. Both take seconds and neither touches the target beyond an ordinary request.

Security tools — common questions

Does a clean breach check mean the address is safe?
No. It means the address does not appear in the breach corpora that are public. Breaches go undisclosed for years, and many are never published at all.
Is the clickjacking check intrusive?
No. It reads the response headers a browser already receives — X-Frame-Options and the CSP frame-ancestors directive. Nothing is submitted to the site and no vulnerability is exercised.
Can I run these against a site I do not own?
Both only read publicly served responses, which any visitor receives. That said, use the results to inform a report rather than as a claim about a site you have no relationship with.

Need more tools?

Explore all 59 free tools across 9 categories.

Explore Other Categories