security tools
Security Tools
Simple, free utilities to help you check exposure, test your passwords, and validate your email security setup.
breach checker
Check if your email or mobile number have been compromised
Hackers are targeting your business!
Find out in seconds if your email address or cell number has been stolen or compromised from any known breach. Enter it here, and we'll run it through a comprehensive database of all data stolen over the last few years. Make sure to enter your mobile number in international format, such as 14841234567.
If your data has been compromised, it's possible cyber criminals have used it to attempt to access your systems. Make sure to change your passwords (you can generate a strong one below), and never reuse passwords across different sites.
password strength
Test Your Password Strength, or Generate a Strong Password
The longer and more complex your password, the harder it will be for cyber-criminals to crack it through brute force. That's where automated software tries thousands of variations of passwords, until it finds the right one.
Check your password now. Enter it below and you'll see how long it would take criminals to crack it. The longer, the better.
If you need a better password, click Generate Password and we'll create a random one for you. Make sure you use a password manager to remember it. Your password is safe and is not sent across the internet.
email configuration
Test Your Email Configuration: Security and Deliverability
DMARC, DKIM, and SPF are like security guards for your emails. They make sure that only the right people can send emails from your domain (your email address ending, like @yourcompany.com).
Think of DKIM and SPF like ID badges or a doctor's diploma in their office. They show that the email is really from who it says it's from. DMARC is the boss who decides what happens if someone tries to send an email without the right ID badge. It can tell email servers to mark these fake emails as spam, deliver them anyway, or not deliver them at all.
If your domain (@yourcompany.com) doesn't have these guards set up right, your emails might end up in the spam folder or not get delivered. Plus, it's easier for spammers to pretend to be you.
DKIM selectors are chosen by your mail provider, so we check common ones automatically. A miss there doesn't necessarily mean DKIM is missing.
SPF
PendingDKIM
PendingDMARC
Pending lookalike domains
Could Someone Be Impersonating Your Domain?
Scammers often register domains that look almost identical to a real business's: a missing letter, a swapped character, a different ending like .net instead of .com. They then use these to send phishing emails that look like they came from you, or to trick your customers into visiting a fake site.
Enter your domain below and we'll generate common lookalike variations and check which ones are actually registered right now.
We generate common typo/lookalike variants of your domain and check which ones are actually registered, a quick way to spot domains that could be used to impersonate you in phishing emails.
A registered lookalike isn't automatically malicious. It could be one you registered defensively, or an unrelated business. Domains with an active mail server are the highest-risk cases, since they're capable of sending phishing email that looks like it came from you.
