Six things we kept rebuilding by hand, made properly and given away. Each one runs entirely in your browser. No account, no upload, and nothing you type is transmitted to us or to anyone else.
Build valid SPF, DMARC and CAA records for your domain, with a live count against the ten-lookup SPF limit.
HTTP headersGenerate HTTP security header config for Apache, nginx, Caddy, Cloudflare, Netlify or IIS, with warnings on the settings that can break a site.
Content Security PolicyBuild a Content-Security-Policy from what your site actually loads, or paste an existing one and have it explained in plain English.
ProcessAnswer a dozen questions and get a one-page incident response plan you can save, print and hand to an auditor. Runs entirely in your browser.
ProcessList every vendor that touches your customer data, track which have signed DPAs, and export as CSV or Markdown. Runs entirely in your browser.
Crawling & SEOSee which crawlers fetch your site, what they waste time on and what fails for them. Reads Apache and nginx logs in your browser. No upload, no account, no line limit.