Tools we use
The stack we reach for when a threat report turns into work: locking down exposed services, checking a file or domain, finding leaked credentials, and keeping staff accounts safe.
Cloudflare
DDoS protection, WAF and DNS for anything internet-facing. The first stop after a bad reputation score.
Visit siteShodan
The search engine for internet-connected devices. See what your own ranges expose before someone else does.
Visit siteVirusTotal
Check files, URLs, domains and IPs against dozens of engines in one request.
Visit siteDeHashed
Search breach data for company email addresses and the credentials that leaked with them.
Visit siteHave I Been Pwned
Monitor staff addresses and get alerted the moment they appear in a new breach.
Visit site1Password
Team password manager with breach monitoring built in, so leaked passwords stop being reusable.
Visit siteNordLayer
Zero-trust remote access for distributed teams — no exposed admin panels on the public internet.
Visit siteBitdefender GravityZone
Endpoint protection and EDR that a small security team can actually run day to day.
Visit siteSome links on this page are affiliate links. If you sign up through one we may earn a commission — at no extra cost to you. We only list tools we would recommend on a report.
Start with the report
Scan any IP, domain or company first — then use the tools above on whatever it turns up.
Run a free scan →