Cybersecurity tools
50 tools for your website, domain, email and personal security. Live checks use only public, low-impact requests, and every result is shown with its coverage and source.
Scan reports and browser-based tools are currently in Turkish.
Website and domain
Website Security Checker
Assesses your website's HTTPS, certificate, security headers, cookie settings, redirects and information disclosure in a single report.
SSL Certificate Checker
Checks the certificate's validity, expiry date, hostname match, chain, key strength and signature algorithm.
TLS Configuration Checker
Measures the TLS versions (1.0–1.3) the server supports and the negotiated cipher suite through handshake attempts.
HTTP Security Headers Checker
Analyses Content-Security-Policy, HSTS, X-Content-Type-Options, X-Frame-Options/frame-ancestors, Referrer-Policy, Permissions-Policy and COOP headers.
DNS Security Checker
Checks DNSSEC, CAA, name server redundancy, SOA values and the presence of email authentication records.
DNSSEC Checker
Verifies the DNSSEC chain using the DS record in the parent zone, the DNSKEY record in the zone and the validating resolver's AD flag.
Domain Expiration Checker
Looks up the domain's registration expiry date and remaining time via RDAP.
RDAP Domain Information Checker
Retrieves the registrar, registration/update/expiry dates, status codes and name servers from official RDAP services.
HTTPS Redirect Checker
Checks whether the http:// address permanently redirects to https:// and inspects the redirect chain.
HSTS Checker
Evaluates the Strict-Transport-Security header, its max-age, includeSubDomains and preload eligibility.
Mixed Content Checker
Detects scripts, styles, images and iframes loaded over http:// on an HTTPS page.
WordPress Public Security Configuration Checker
Checks the public WordPress configuration (version disclosure, readme.html, XML-RPC, directory listing, REST user listing) with low-impact requests.
Website Technology Information Checker
Identifies the server, framework, CMS, CDN and analytics tools from response headers and HTML markers, and evaluates version disclosure.
Website Availability Monitor
Measures whether the site responds, its HTTP status code and response time; scheduled monitoring is available once added as an asset.
Website Change Monitor
Detects changes in page content, script sources and security headers compared with the previous check (login required).
Email security
SPF Record Checker
Checks the SPF record's syntax, "all" policy, DNS lookup count (maximum 10) and duplicate record errors.
DKIM Configuration Checker
Looks for the DKIM public key on the selector you provide or on common selectors, and evaluates the key type and length.
DMARC Checker
Evaluates the DMARC policy (none/quarantine/reject), subdomain policy, percentage, reporting addresses and alignment mode.
MX Record Checker
Checks MX records, their priorities, resolvability, redundancy and Null MX status.
Email Security Configuration Analyzer
Evaluates SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT and BIMI records together.
Email Authentication Report Generator
Turns email authentication checks into a downloadable PDF report you can share with management (login and premium reports required).
Email Domain Spoofing Exposure Assessment
Assesses, based on SPF and DMARC policies, how easily email can be spoofed in your domain's name (main domain and subdomains).
Personal security
Password Strength Checker
Estimates how guessable your password is, entirely in your browser. The password is never sent to the server.
Passphrase Strength Advisor
Generates memorable Turkish passphrases with cryptographic randomness (Web Crypto) and shows their entropy.
Phishing URL Risk Checker
Analyses a link without opening it, using indicators such as domain structure, punycode/homographs, suspicious TLDs, brand impersonation, raw IP use and domain age.
Suspicious Link Analyzer
Follows the link's redirect chain safely on the server and shows the final destination and risk indicators, without opening the page on your device.
QR Code URL Safety Checker
Decodes a QR code image in your browser (the image is not uploaded) and analyses the embedded link with the Phishing URL Risk Checker.
Personal Security Checklist
An actionable checklist for your account, device, network and data security; your progress is saved when you are logged in.
Public Breach Exposure Checker
Checks whether your password appears in known breaches via Have I Been Pwned's Pwned Passwords using k-anonymity (only the first 5 characters of the SHA-1 hash are sent).
Account Protection Advisor
Produces MFA, recovery and password manager recommendations based on the accounts you use (email, banking, social media, e-Devlet).
Threat intelligence
IP Reputation Checker
Evaluates an IP address against public DNS blocklists (DNSBL), reverse DNS and RDAP network ownership data.
Domain Reputation Checker
Evaluates a domain against domain blocklists together with its age and basic email authentication status.
Domain Blacklist Checker
Queries the domain's web and mail server IP addresses, and the domain itself, against common DNS blocklists.
Public Threat Intelligence Lookup
Looks up a URL, domain or IP indicator in the configured threat intelligence providers (URLhaus, AbuseIPDB). Without a provider, the result is shown as "not assessed".
CVE Information Explorer
Search CVE records from NVD data: CVSS, CWE, references and CISA KEV status on a single page.
CISA Known Exploited Vulnerabilities Explorer
Filter actively exploited vulnerabilities in the CISA KEV catalog by vendor, product and date.
Security Advisory Explorer
Editorial security bulletins and the latest additions to the KEV catalog.
Vulnerability Severity Information Viewer
Parses a CVSS v3.1 vector, calculates the base score with the official formula and explains each metric in plain language.
Business tools
Business Security Posture Assessment
A structured self-assessment for SMEs covering governance, access, backups, training and incident response; can be combined with technical scan scores.
Asset Inventory
Manage your domains, websites and email domains with ownership, criticality, verification and risk information.
Security Configuration Baseline Checker
Measures compliance with a defined minimum security baseline for web, TLS, DNS and email in one run (login and findings management required).
Security Findings Manager
Manage scan findings through a workflow (NEW → RESOLVED), assign owners, and add evidence and comments.
Risk Register
Record risks with a likelihood × impact matrix and track treatment strategy and residual risk.
Security Improvement Planner
Prioritises open findings by severity and asset criticality and turns them into tasks.
Incident Register
Manage security incidents with a timeline, evidence integrity (hash chain), response and closure report.
Security Policy Checklist
A checklist based on NIST CSF 2.0 (Govern, Identify, Protect, Detect, Respond, Recover) with editable policy templates.
Backup Readiness Assessment
Scores your backup readiness against the 3-2-1 rule, immutable/offline copies, restore tests and RPO/RTO targets.
Employee Security Awareness Assessment
A scenario-based awareness test on phishing, passwords, social engineering and data protection.
Security Report Generator
Generate PDF/CSV reports from your scans, findings, tasks and training data; branded reports are included in the Agency plan.
AI Security Recommendations
A sourced remediation plan and plain-language explanations based on your actual check results (when an AI provider is configured; otherwise rule-based recommendations).