17 tools, one rule: nothing here runs against you. Files are analysed in the browser, demos show real captured output, and live scanning is by invitation.
Binaries and files are analysed in your browser. Nothing is uploaded.
Every demo shows results captured from an actual scan of a named target.
Export any result as JSON, CSV, or an SBOM.
The tools
Email Security
Phishing, BEC, and domain spoofing, caught before the inbox.
- 01PhishGuard
AI-powered phishing email scanner. Paste an email or use the Chrome extension to detect spear-phishing, BEC, and credential-harvesting attacks in real time.
BEC DetectionLink AnalysisAI ScoringChrome Extension - 02BEC Domain Detector
Find lookalike domains targeting your brand. Detects typosquatting, homoglyph attacks, and doppelganger domains used in Business Email Compromise.
TyposquatHomoglyphsMX ValidationWHOIS - 03Email Security Grader
Grade any domain's email security posture. Checks SPF, DKIM, DMARC, MTA-STS, and BIMI records with plain-English fix guidance.
SPFDKIMDMARCMTA-STSBIMI
AI Threat Detection
Deepfakes, cloned voices, and synthetic imagery, unmasked.
- 01AI Photo Detector
Upload any image and instantly find out if it was generated by AI tools like Midjourney, DALL-E, Stable Diffusion, or Firefly.
Artifact DetectionTool IdentificationConfidence Score - 02AI Video Detector
Detect if a video was made by Sora, Runway, Kling, or a deepfake tool. Frame-level artifact analysis, temporal coherence checks, face-swap detection.
Sora / RunwayDeepfake CheckFace Swap - 03Audio Deepfake Detector
Upload any audio file and detect AI-generated or cloned voices. Powered by Whisper transcription and acoustic analysis.
Prosody AnalysisCompression ArtifactsSpeaker Consistency - 04Live Call Detector
Put your phone on speaker and monitor calls in real time. Detects AI-generated voices mid-call. No data stored or sent externally.
Real-TimePitch DetectionSpectral Analysis
Malware & App Analysis
Static analysis for binaries, phishing kits, and mobile apps.
- 01App Scanner
Deep static analysis for Android APK, iOS IPA, and Windows EXE/DLL. Extracts bytecode, maps attack surfaces, checks against live threat intelligence feeds.
CVE DetectionPE AnalysisDark Web IntelSBOM - 02Phishing Kit Fingerprinter
Upload a ZIP phishing kit and identify the toolkit: Bluekit, Evilginx, GoPhish, and 20+ others. Extracts IOCs, exfiltration endpoints, C2 patterns.
Kit SignaturesIOC ExtractionC2 Patterns
Infrastructure & Network
Headers, certificates, DNS, and endpoints, audited.
- 01Security Monitor
Endpoint agent for Windows, macOS, and Linux. Scans running processes, open ports, and installed software for CVEs and misconfigurations.
CVE LookupProcess MonitorPort Scanner - 02Security Headers Analyzer
Audit any website's HTTP security headers. Checks CSP, HSTS, X-Frame-Options, COEP, COOP with severity grades and remediation steps.
CSPHSTSX-FramePermissions Policy - 03SSL/TLS Certificate Checker
Audit SSL/TLS certificate health. Checks expiry, cipher suites, protocol versions, chain validity, and CT log presence.
Expiry CheckCipher AuditChain Validation - 04Subdomain Takeover Scanner
Detect dangling DNS records vulnerable to subdomain takeover across AWS, Azure, GitHub Pages, Heroku, and more.
Dangling CNAMEAWS / AzureGitHub Pages
Access & Identity
OAuth permissions and consent phishing across the tenant.
Pentest & Red Team
Automated offensive testing for GraphQL APIs.
Awareness & Education
Plain-English guidance for people who are not in security.
- 01Common Sense Cyber
Not sure if something is a scam? Find your situation and get a plain-English answer. Designed for non-technical staff and SMBs.
Recruiter ScamsOTP FraudCEO FraudFake Tech Support - 02TapIn
Location-based social networking for real-world venues. Activate your location at a gym, library, or coffee shop. Chats disappear when you leave.
Location-BasedVenue ChatEphemeral