Everyday cybersecurity

IP address-based tracking for threat detection.

Open-source Cybersecurity framework for your company’s compliance.

Manage your company’s cybersecurity governance, risk and compliance.

A kit of cybersecurity resources and tools to strengthen your organization.

Visualize the threat and cyberattack landscape in real time.

Explore the key elements of Cybersecurity visually.

Icebreaker questions to open the conversation about security.

Flowcharts for security processes and procedures.

Key dates and relevant Cybersecurity events.

A visual gallery of milestones, figures and iconic moments in cybercrime.

Create strong, random passwords instantly.

Generate free QR codes for your links and campaigns.

Compute the hash of any text or file.

Check and validate your domain’s SPF records.

Encode and decode text in Base64.

Encode and decode URLs easily.

Encode and decode text in hexadecimal.

Generate universally unique identifiers (UUID).

Generate 2FA (TOTP) codes from a secret key, with a QR for authenticator apps.

Convert dates and times between time zones (UTC, Bogotá and more).

Learn and identify Confidentiality, Integrity and Availability.

Estimate how long it would take an attacker to crack your password.

Practice spotting phishing messages in emails and SMS.

Illustrated examples of brand impersonation on Instagram, Facebook, WhatsApp, websites and more, with red flags and how to verify official accounts.

Review a simulated inbox and tell safe emails apart from malicious ones.

Step-by-step animation of the signs that confirm a site is safe.

Find the 10 bad security practices on a simulated desk.

Check your public IP, approximate location, connection date and user agent.

Look up the owner, range and ASN of an IP, or the registrar, dates and DNS of a domain, and export a PDF.

Get the ID and public data of a Facebook, Instagram, TikTok or X profile.

Team activity to discuss and learn good and bad cybersecurity practices.

As a leader, verify that your team and their computers meet basic cybersecurity protections.

Immediate steps during a security incident, as a team member or as a team leader.

See step by step how authentication, authorization and roles (fixed or custom) work for API and MCP access.

Practice telling vulnerable from secure code: OWASP Top 10, AI/LLM Top 10, hardcoded secrets, SCA, SAST, DAST and pentesting.

How PGP encryption works step by step: public and private keys, hybrid encryption and digital signatures.

Learn what personally identifiable information (PII) is, its categories and how to protect it, with a practice quiz.

An educational tool for parents, children and teens: grooming stages, warning signs and what to do, with a practice quiz.

An educational tool on the risks of sexting: loss of control, digital permanence, legal consequences and pressure, with a practice quiz.

An educational tool on how sextortion works, its stages, warning signs and what to do if it happens, with a practice quiz.

Compute the MD5, SHA-1, SHA-256 and SHA-512 of a file (PDF, ZIP, RAR, images or office files) without uploading it to any server.

Uncover the hidden metadata of an image or office document (author, dates, GPS) and download a PDF report.

View the contents of any file byte by byte in hexadecimal and ASCII, with text or byte search.

Check end-of-support and lifecycle dates for software, operating systems and languages.

Search engine for devices and services exposed on the internet.

Check whether your email or password has been exposed in a data breach.

A directory of hundreds of specialized search engines for online research.

Browse archived historical versions of any website.

Check the reputation and risk associated with an email address.

Scan and analyze suspicious URLs to detect phishing and malicious content.

Generate and detect lookalike or typosquatted domains from a given domain.

Check the abuse history and reputation of an IP address.

Link analysis platform for OSINT investigations and relationship visualization.

Search for a username across hundreds of platforms and social networks.

Command-line tool to find accounts by username across social networks.

Collect information from public profiles starting from a username.

Gather emails, subdomains, hosts and names from public sources.

Modular web reconnaissance framework for OSINT investigations.

Diagnose MX and DNS records, blacklists and the health of your email domain.

Map the subdomains and DNS infrastructure of a domain for free.

Browser extension to extract the email addresses visible on a web page.

OSINT geolocation tool based on social media metadata.

Guide to GitHub’s advanced search syntax for finding exposed code and secrets.

Analyze suspicious files, URLs, domains and IPs with dozens of antivirus engines.

Free sandbox to analyze the behavior of suspicious files and URLs for malware.

Detect image manipulation using error level analysis (ELA).

Edit or remove a PDF’s metadata (author, dates, software) online.

Check whether an email address exists and is valid.