Free tools
A passive external check of your website and email security, plus self-assessments, calculators and developer utilities that run in your browser. Nothing you enter is stored, and nothing reaches us unless you choose to send us a summary.
External Security Check: website and email
Enter a domain to see what attackers see: TLS, security headers, cookies, exposed software and third-party scripts, plus SPF, DKIM, DMARC, MTA-STS and CAA. Graded, mapped to the OWASP Top 10:2025, with fixes.
Open the toolSoftware project cost estimator
Web and mobile apps, PWAs, SaaS, fintech and mobile money, core banking modules, WhatsApp bots and security tools: an indicative budget in FCFA, US dollars and euros, with a typical timeline.
Open the toolCyber Readiness Check for Banks and Microfinance
For CEMAC credit, microfinance and payment institutions. 27 questions based on COBAC regulation R-2024/01, ISO/IEC 27001:2022 and CIS Controls v8, with a 30/60/90-day plan.
Open the toolData Protection Readiness Check
How ready is your organisation for Cameroon Law No. 2024/017 on personal data protection? 21 questions, score by area and an action plan.
Open the toolFraud and incident first-response checklist
Ransomware, a hacked account, payment redirection fraud, unauthorised mobile money transfers or a data leak: an ordered checklist for the first hour, the first day and the first week, including when Cameroon law and COBAC require you to notify.
Open the toolCan my crypto be recovered?
An honest first assessment after a crypto loss or scam: what can realistically be done, the evidence to keep, and how to avoid recovery scams. We never ask for your seed phrase or private key.
Open the toolWhatsApp automation ROI calculator
Enter your own figures to see the staff time and money a WhatsApp bot could save, compared with the real price range of a Los Bebes bot.
Open the toolThreat-model starter
Tick what your system has (web app, API, payments, file uploads and more) and get the STRIDE threats that apply, with concrete mitigations, ready to copy as Markdown.
Open the toolContent Security Policy generator
Read your site and build a Content Security Policy that fits what it loads, with warnings that match our Security Check and ready-to-paste snippets for Firebase Hosting, Nginx and Apache.
Open the toolsecurity.txt generator
Check the security.txt your domain publishes against RFC 9116, then create or renew a valid file so security researchers know how to report a vulnerability to you.
Open the tool