Free resources
Free security resources
Free tools, checklists and guides for people who run and secure systems. Start with a quick check, work through a checklist, or learn a topic step by step.
Free security tools
Quick checks you can run right now. Free to use, no sign-up needed.
Website
Website safety check
Grade your website’s HTTPS, security headers and email protection from the outside.
Check my website →
Email security checker
Check SPF, DKIM and DMARC for your domain and get copy-paste fixes.
Check my domain →
Scams
Scam message checker
Paste a suspicious SMS, WhatsApp message or email and see the warning signs.
Check a message →
ISO 27001
ISO 27001 self-assessment
Answer 30 questions on clauses 4–10 and Annex A.
Start the assessment →
Policies
Security policy generator
Create 7 information security policies aligned with ISO 27001, DPDP and CERT-In.
Generate policies →
Checked your website? See how you compare on the security leaderboard →
Checklists
All our free checklists in one place. New checklists are added here as we publish them.
Checklist · Linux
Linux Server Hardening Checklist (2026)
11 sections from patching to backups, with the exact SSH, sysctl and firewall settings. Mapped to CIS.
Open the checklist →
Checklist · ISO 27001
ISO 27001:2022 Readiness Checklist
Self-assess against clauses 4–10 and all 93 Annex A controls, with a scoring guide and the mandatory documents list.
Open the checklist →
Checklist · WordPress
WordPress Security Checklist (2026)
12 sections from updates and logins to exposed backups, security headers and backups, with WP-CLI audit commands.
Open the checklist →
Checklist · DPDP Act
DPDP Compliance Checklist for Small Businesses
Get ready for India’s DPDP Act before May 2027: data mapping, consent, notices, safeguards, 72-hour breach reports and rights.
Open the checklist →
Coming next
More checklists on the way
An OSINT investigation quick-reference card is next. New checklists appear here first.
YC Lab
OSINT & security tools directory
180+ tools in 20 categories: username, email and phone lookups, image and geolocation analysis, dark-web and threat intelligence, recon, compliance and pentest. Search, filter and save your favourites.
Guides by topic
Plain-language guides from our blog. Pick a topic, or start with the guide we recommend.
Updated weekly
Security news & alerts
Fact-checked incident guides with the exact steps to check and patch.
Start here: the Black October fact-check
Compliance
ISO 27001
The 2022 standard explained clause by clause and control by control.
Start here: all 93 Annex A controls
Compliance
IT audit & compliance
How IT audits work, from planning to follow-up, with practical checklists.
Start here: what is an IT audit?
Hardening
Server & cloud security
Secure Linux servers, cloud instances and self-hosted apps.
Start here: 10 controls for Linux on AWS EC2
Fundamentals
Networking
Routing, switching, VLANs and ACLs, with Cisco configuration examples.
Start here: the OSI model explained
Careers
Interview preparation
Questions and answers for sysadmin, DevOps and security roles.
Start here: top Linux sysadmin questions
Need more than a free resource?
When you want ready-made templates, or want it done for you.
Toolkits & templates
Digital products
The OSINT Investigator’s Toolkit and the ISO 27001:2022 Starter Kit: templates, playbooks and the tool lists we use ourselves.
Visit the shop →
Done for you
Services
ISO 27001 readiness, Linux hardening audits, VAPT and OSINT investigations, delivered personally.
See our services →
Missing something? Suggest a checklist or guide →