🧰 CHECK BEFORE YOU TRUST The Free Security Toolkit A growing library of free, public tools anyone can use to check a link, a file, a password, or a website for security problems — no expertise required. 62 tools100% free to use9 categoriesNo expertise needed How to use this page: tap a category below to jump to it, then open any tool in a new tab. Everything here has a free option, though some also sell paid plans. Always reach tools through their official site, and never upload truly sensitive or private files to public scanners. Jump to a category Malware & Files 10Website & URL 8Passwords & Accounts 9Email & Phishing 6Network & Exposure 5Web Config & SSL 8Domain, DNS & Certs 6Vulns & Threat Intel 6Privacy & Tracking 4 Category 01 of 9Malware & Files 10 Malware & FilesVirusTotal↗Scans files and links with 70+ antivirus engines at once.MakerGoogle (Chronicle)Use it toUpload a suspicious file or paste a link to see if it’s flagged as malware. Malware & FilesHybrid Analysis↗Free automated malware analysis sandbox.MakerCrowdStrikeUse it toDetonate a suspicious file safely and read a behaviour report. Malware & FilesANY.RUN↗Interactive online malware sandbox (free community tier).MakerANY.RUNUse it toWatch a suspicious file run live inside a safe virtual machine. Malware & FilesJoe Sandbox Cloud↗Deep automated malware analysis service.MakerJoe SecurityUse it toGet a detailed report on exactly what a suspicious file does. Malware & FilesMetaDefender Cloud↗Multi-engine file and URL scanner.MakerOPSWATUse it toScan a file with many engines and check it for threats. Malware & FilesJotti’s malware scan↗Free multi-engine scanner for suspicious files.MakerJottiUse it toGet a quick second opinion on whether a file is malicious. Malware & FilesMalwarebytes Free↗On-demand malware remover (free version).MakerMalwarebytesUse it toScan and clean up an already-infected Windows or Mac computer. Malware & FilesMicrosoft Defender↗Antivirus built into Windows.MakerMicrosoftUse it toReal-time malware protection that’s already on your PC for free. Malware & FilesClamAV↗Open-source antivirus engine.MakerCisco (Talos)Use it toScan files and servers for malware on Linux, Windows or Mac. Malware & FilesTriage↗Free cloud malware sandbox.MakerRecorded FutureUse it toSubmit a sample and get automated analysis and a verdict. Category 02 of 9Website & URL 8 Website & URLGoogle Safe Browsing↗Checks Google’s list of dangerous sites.MakerGoogleUse it toPaste a URL to see if Google considers it unsafe. Website & URLurlscan.io↗Scans, screenshots and records what a website loads.Makerurlscan GmbHUse it toSee what a suspicious link actually does, without visiting it. Website & URLSucuri SiteCheck↗Free website malware and blacklist scanner.MakerSucuri (GoDaddy)Use it toCheck whether a website is hacked or blacklisted. Website & URLURLVoid↗Website reputation checker.MakerNoVirusThanksUse it toSee a site’s reputation across dozens of blocklists at once. Website & URLNorton Safe Web↗Community website safety ratings.MakerGen Digital (Norton)Use it toLook up whether a website is rated safe to visit. Website & URLPhishTank↗Community database of known phishing sites.MakerCisco TalosUse it toCheck or report whether a link is a known phishing page. Website & URLTalos Reputation↗IP and domain reputation lookup.MakerCisco TalosUse it toCheck the reputation of a sender’s domain or IP address. Website & URLCheckPhish↗Free phishing and scam URL scanner.MakerBolsterUse it toScan a link for phishing, scams and fake brand pages. Category 03 of 9Passwords & Accounts 9 Passwords & AccountsHave I Been Pwned↗Breach lookup for emails and phone numbers.MakerTroy HuntUse it toSee if your email has appeared in a known data breach. Passwords & AccountsPwned Passwords↗Checks if a password has leaked in any breach.MakerTroy HuntUse it toTest whether a password you use has already been exposed. Passwords & AccountsMozilla Monitor↗Breach alerts tied to your email.MakerMozillaUse it toGet notified automatically if your data shows up in a breach. Passwords & AccountsBitwarden Strength Tester↗Password strength estimator.MakerBitwardenUse it toSee roughly how long your password would take to crack. Passwords & AccountsHow Secure Is My Password?↗Instant password crack-time visualiser.MakerSecurity.orgUse it toGet a quick, visual estimate of a password’s strength. Passwords & AccountsGoogle Security Checkup↗Guided account security review.MakerGoogleUse it toWalk step-by-step through securing your Google account. Passwords & Accounts2FA Directory↗Lists which websites support two-factor auth.MakerOpen-source communityUse it toFind out if a service offers two-factor authentication. Passwords & AccountsBitwarden↗Free, open-source password manager.MakerBitwardenUse it toGenerate and store strong, unique passwords for every site. Passwords & AccountsKeePass↗Free, open-source offline password vault.MakerDominik ReichlUse it toKeep all your passwords in one encrypted local database. Category 04 of 9Email & Phishing 6 Email & PhishingMXToolbox↗Email and DNS diagnostics with blacklist checks.MakerMXToolboxUse it toCheck if a mail server is blacklisted or misconfigured. Email & PhishingGoogle Messageheader↗Email header analyser.MakerGoogleUse it toTrace where a suspicious email really came from. Email & PhishingEmailRep↗Email address reputation lookup.MakerSublime SecurityUse it toSee the risk and reputation behind an email address. Email & PhishingMail-Tester↗Spam-score checker for outgoing email.MakerMail-TesterUse it toFind out why your emails might be landing in spam. Email & PhishingMessage Header Analyzer↗Detailed email header parser.MakerMicrosoftUse it toAnalyse email headers for spoofing and delivery delays. Email & PhishingSpamhaus Lookup↗IP and domain blocklist lookup.MakerThe Spamhaus ProjectUse it toCheck whether an IP or domain is on a spam blocklist. Category 05 of 9Network & Exposure 5 Network & ExposureShodan↗Search engine for internet-connected devices.MakerJohn MatherlyUse it toSee which of your devices are exposed to the internet. Network & ExposureNmap↗Open-source network and port scanner.MakerGordon LyonUse it toDiscover open ports and running services on a network. Network & ExposureCensys Search↗Internet asset and exposure search.MakerCensysUse it toFind exposed services and certificates for a domain. Network & ExposureWireshark↗Open-source network packet analyser.MakerWireshark FoundationUse it toInspect network traffic to spot suspicious activity. Network & ExposureGRC ShieldsUP!↗Free firewall and port exposure tester.MakerGibson ResearchUse it toCheck whether your firewall leaves ports open to attack. Category 06 of 9Web Config & SSL 8 Web Config & SSLQualys SSL Labs↗SSL/TLS server configuration test.MakerQualysUse it toGrade how well a website’s HTTPS is set up. Web Config & SSLMozilla Observatory↗Website security header scanner.MakerMozillaUse it toCheck a site’s security headers and settings, graded A to F. Web Config & SSLSecurityHeaders.com↗HTTP security header checker.MakerScott HelmeUse it toSee which protective headers a website is (or isn’t) sending. Web Config & SSLImmuniWeb Community↗Free SSL, headers and privacy tests.MakerImmuniWebUse it toTest a site’s SSL, security and privacy compliance. Web Config & SSLOWASP ZAP↗Open-source web application scanner.MakerOWASPUse it toFind vulnerabilities in a web app that you own. Web Config & SSLNikto↗Open-source web server scanner.MakerChris SulloUse it toScan a web server for thousands of known issues. Web Config & SSLtestssl.sh↗Command-line SSL/TLS tester.MakerDirk WetterUse it toCheck a server’s encryption and certificate from your terminal. Web Config & SSLWPScan↗WordPress vulnerability scanner.MakerAutomatticUse it toScan a WordPress site for vulnerable plugins and themes. Category 07 of 9Domain, DNS & Certs 6 Domain, DNS & CertsICANN Lookup↗Official WHOIS domain lookup.MakerICANNUse it toSee who registered a domain and when it was created. Domain, DNS & Certscrt.sh↗Certificate transparency search.MakerSectigoUse it toFind every SSL certificate ever issued for a domain. Domain, DNS & CertsDNSdumpster↗DNS reconnaissance and mapping.MakerHacker TargetUse it toMap a domain’s DNS records and subdomains. Domain, DNS & CertsViewDNS.info↗Bundle of DNS and IP lookup tools.MakerViewDNSUse it toRun reverse-IP, DNS and WHOIS lookups in one place. Domain, DNS & CertsAbuseIPDB↗Crowd-sourced IP abuse database.MakerMarathon StudiosUse it toCheck whether an IP has been reported for attacks or spam. Domain, DNS & CertsWappalyzer↗Website technology detector.MakerWappalyzerUse it toSee what software and services a website is built with. Category 08 of 9Vulns & Threat Intel 6 Vulns & Threat IntelNVD↗US government vulnerability database.MakerNISTUse it toLook up the details and severity of a known CVE. Vulns & Threat IntelCVE Program↗The official catalogue of disclosed vulnerabilities.MakerMITREUse it toFind the canonical record for a named vulnerability. Vulns & Threat IntelCISA KEV Catalog↗List of vulnerabilities under active attack.MakerCISAUse it toSee which vulnerabilities attackers are exploiting right now. Vulns & Threat IntelExploit-DB↗Archive of public exploit code.MakerOffSecUse it toResearch known exploits tied to a vulnerability. Vulns & Threat IntelAlienVault OTX↗Open community threat-intelligence exchange.MakerLevelBlue (AT&T)Use it toLook up indicators and reports tied to known threats. Vulns & Threat IntelCyberChef↗Browser-based data analysis toolkit.MakerGCHQUse it toDecode, decrypt and analyse suspicious data and hashes. Category 09 of 9Privacy & Tracking 4 Privacy & TrackingEFF Cover Your Tracks↗Browser fingerprinting and tracker tester.MakerEFFUse it toSee how trackable your browser is right now. Privacy & TrackingAmIUnique↗Browser fingerprint uniqueness checker.MakerAmIUnique projectUse it toCheck how unique and trackable your browser looks. Privacy & TrackingWebbkoll↗Website privacy inspector.MakerDataskydd.netUse it toSee what trackers and data a website collects on visitors. Privacy & TrackingBrowserLeaks↗Suite of browser privacy leak tests.MakerBrowserLeaksUse it toSee what personal info your browser quietly reveals. Every tool listed here has a free option; some also offer paid plans. Always reach tools through their official website, and never upload truly sensitive or private files to public scanners. Tool names and logos belong to their respective owners. Listing here is informational and not an endorsement by Oluma.
Malware & FilesVirusTotal↗Scans files and links with 70+ antivirus engines at once.MakerGoogle (Chronicle)Use it toUpload a suspicious file or paste a link to see if it’s flagged as malware.
Malware & FilesHybrid Analysis↗Free automated malware analysis sandbox.MakerCrowdStrikeUse it toDetonate a suspicious file safely and read a behaviour report.
Malware & FilesANY.RUN↗Interactive online malware sandbox (free community tier).MakerANY.RUNUse it toWatch a suspicious file run live inside a safe virtual machine.
Malware & FilesJoe Sandbox Cloud↗Deep automated malware analysis service.MakerJoe SecurityUse it toGet a detailed report on exactly what a suspicious file does.
Malware & FilesMetaDefender Cloud↗Multi-engine file and URL scanner.MakerOPSWATUse it toScan a file with many engines and check it for threats.
Malware & FilesJotti’s malware scan↗Free multi-engine scanner for suspicious files.MakerJottiUse it toGet a quick second opinion on whether a file is malicious.
Malware & FilesMalwarebytes Free↗On-demand malware remover (free version).MakerMalwarebytesUse it toScan and clean up an already-infected Windows or Mac computer.
Malware & FilesMicrosoft Defender↗Antivirus built into Windows.MakerMicrosoftUse it toReal-time malware protection that’s already on your PC for free.
Malware & FilesClamAV↗Open-source antivirus engine.MakerCisco (Talos)Use it toScan files and servers for malware on Linux, Windows or Mac.
Malware & FilesTriage↗Free cloud malware sandbox.MakerRecorded FutureUse it toSubmit a sample and get automated analysis and a verdict.
Website & URLGoogle Safe Browsing↗Checks Google’s list of dangerous sites.MakerGoogleUse it toPaste a URL to see if Google considers it unsafe.
Website & URLurlscan.io↗Scans, screenshots and records what a website loads.Makerurlscan GmbHUse it toSee what a suspicious link actually does, without visiting it.
Website & URLSucuri SiteCheck↗Free website malware and blacklist scanner.MakerSucuri (GoDaddy)Use it toCheck whether a website is hacked or blacklisted.
Website & URLURLVoid↗Website reputation checker.MakerNoVirusThanksUse it toSee a site’s reputation across dozens of blocklists at once.
Website & URLNorton Safe Web↗Community website safety ratings.MakerGen Digital (Norton)Use it toLook up whether a website is rated safe to visit.
Website & URLPhishTank↗Community database of known phishing sites.MakerCisco TalosUse it toCheck or report whether a link is a known phishing page.
Website & URLTalos Reputation↗IP and domain reputation lookup.MakerCisco TalosUse it toCheck the reputation of a sender’s domain or IP address.
Website & URLCheckPhish↗Free phishing and scam URL scanner.MakerBolsterUse it toScan a link for phishing, scams and fake brand pages.
Passwords & AccountsHave I Been Pwned↗Breach lookup for emails and phone numbers.MakerTroy HuntUse it toSee if your email has appeared in a known data breach.
Passwords & AccountsPwned Passwords↗Checks if a password has leaked in any breach.MakerTroy HuntUse it toTest whether a password you use has already been exposed.
Passwords & AccountsMozilla Monitor↗Breach alerts tied to your email.MakerMozillaUse it toGet notified automatically if your data shows up in a breach.
Passwords & AccountsBitwarden Strength Tester↗Password strength estimator.MakerBitwardenUse it toSee roughly how long your password would take to crack.
Passwords & AccountsHow Secure Is My Password?↗Instant password crack-time visualiser.MakerSecurity.orgUse it toGet a quick, visual estimate of a password’s strength.
Passwords & AccountsGoogle Security Checkup↗Guided account security review.MakerGoogleUse it toWalk step-by-step through securing your Google account.
Passwords & Accounts2FA Directory↗Lists which websites support two-factor auth.MakerOpen-source communityUse it toFind out if a service offers two-factor authentication.
Passwords & AccountsBitwarden↗Free, open-source password manager.MakerBitwardenUse it toGenerate and store strong, unique passwords for every site.
Passwords & AccountsKeePass↗Free, open-source offline password vault.MakerDominik ReichlUse it toKeep all your passwords in one encrypted local database.
Email & PhishingMXToolbox↗Email and DNS diagnostics with blacklist checks.MakerMXToolboxUse it toCheck if a mail server is blacklisted or misconfigured.
Email & PhishingGoogle Messageheader↗Email header analyser.MakerGoogleUse it toTrace where a suspicious email really came from.
Email & PhishingEmailRep↗Email address reputation lookup.MakerSublime SecurityUse it toSee the risk and reputation behind an email address.
Email & PhishingMail-Tester↗Spam-score checker for outgoing email.MakerMail-TesterUse it toFind out why your emails might be landing in spam.
Email & PhishingMessage Header Analyzer↗Detailed email header parser.MakerMicrosoftUse it toAnalyse email headers for spoofing and delivery delays.
Email & PhishingSpamhaus Lookup↗IP and domain blocklist lookup.MakerThe Spamhaus ProjectUse it toCheck whether an IP or domain is on a spam blocklist.
Network & ExposureShodan↗Search engine for internet-connected devices.MakerJohn MatherlyUse it toSee which of your devices are exposed to the internet.
Network & ExposureNmap↗Open-source network and port scanner.MakerGordon LyonUse it toDiscover open ports and running services on a network.
Network & ExposureCensys Search↗Internet asset and exposure search.MakerCensysUse it toFind exposed services and certificates for a domain.
Network & ExposureWireshark↗Open-source network packet analyser.MakerWireshark FoundationUse it toInspect network traffic to spot suspicious activity.
Network & ExposureGRC ShieldsUP!↗Free firewall and port exposure tester.MakerGibson ResearchUse it toCheck whether your firewall leaves ports open to attack.
Web Config & SSLQualys SSL Labs↗SSL/TLS server configuration test.MakerQualysUse it toGrade how well a website’s HTTPS is set up.
Web Config & SSLMozilla Observatory↗Website security header scanner.MakerMozillaUse it toCheck a site’s security headers and settings, graded A to F.
Web Config & SSLSecurityHeaders.com↗HTTP security header checker.MakerScott HelmeUse it toSee which protective headers a website is (or isn’t) sending.
Web Config & SSLImmuniWeb Community↗Free SSL, headers and privacy tests.MakerImmuniWebUse it toTest a site’s SSL, security and privacy compliance.
Web Config & SSLOWASP ZAP↗Open-source web application scanner.MakerOWASPUse it toFind vulnerabilities in a web app that you own.
Web Config & SSLNikto↗Open-source web server scanner.MakerChris SulloUse it toScan a web server for thousands of known issues.
Web Config & SSLtestssl.sh↗Command-line SSL/TLS tester.MakerDirk WetterUse it toCheck a server’s encryption and certificate from your terminal.
Web Config & SSLWPScan↗WordPress vulnerability scanner.MakerAutomatticUse it toScan a WordPress site for vulnerable plugins and themes.
Domain, DNS & CertsICANN Lookup↗Official WHOIS domain lookup.MakerICANNUse it toSee who registered a domain and when it was created.
Domain, DNS & Certscrt.sh↗Certificate transparency search.MakerSectigoUse it toFind every SSL certificate ever issued for a domain.
Domain, DNS & CertsDNSdumpster↗DNS reconnaissance and mapping.MakerHacker TargetUse it toMap a domain’s DNS records and subdomains.
Domain, DNS & CertsViewDNS.info↗Bundle of DNS and IP lookup tools.MakerViewDNSUse it toRun reverse-IP, DNS and WHOIS lookups in one place.
Domain, DNS & CertsAbuseIPDB↗Crowd-sourced IP abuse database.MakerMarathon StudiosUse it toCheck whether an IP has been reported for attacks or spam.
Domain, DNS & CertsWappalyzer↗Website technology detector.MakerWappalyzerUse it toSee what software and services a website is built with.
Vulns & Threat IntelNVD↗US government vulnerability database.MakerNISTUse it toLook up the details and severity of a known CVE.
Vulns & Threat IntelCVE Program↗The official catalogue of disclosed vulnerabilities.MakerMITREUse it toFind the canonical record for a named vulnerability.
Vulns & Threat IntelCISA KEV Catalog↗List of vulnerabilities under active attack.MakerCISAUse it toSee which vulnerabilities attackers are exploiting right now.
Vulns & Threat IntelExploit-DB↗Archive of public exploit code.MakerOffSecUse it toResearch known exploits tied to a vulnerability.
Vulns & Threat IntelAlienVault OTX↗Open community threat-intelligence exchange.MakerLevelBlue (AT&T)Use it toLook up indicators and reports tied to known threats.
Vulns & Threat IntelCyberChef↗Browser-based data analysis toolkit.MakerGCHQUse it toDecode, decrypt and analyse suspicious data and hashes.
Privacy & TrackingEFF Cover Your Tracks↗Browser fingerprinting and tracker tester.MakerEFFUse it toSee how trackable your browser is right now.
Privacy & TrackingAmIUnique↗Browser fingerprint uniqueness checker.MakerAmIUnique projectUse it toCheck how unique and trackable your browser looks.
Privacy & TrackingWebbkoll↗Website privacy inspector.MakerDataskydd.netUse it toSee what trackers and data a website collects on visitors.
Privacy & TrackingBrowserLeaks↗Suite of browser privacy leak tests.MakerBrowserLeaksUse it toSee what personal info your browser quietly reveals.