Free security tools
Free tools from Excession Labs: a security headers checker for any public site, and a pentest scoping checklist from PentestCompare.
Free tools you can use without an account.
Security headers checker#
Security headers checker makes one request to a public site and grades its response headers: HTTPS, HSTS, CSP, framing, content type sniffing, referrer policy, permissions policy, version disclosure and cookie flags. Each result comes with the recommended value and copy-paste config for common stacks.
Related tool on PentestCompare#
Pentest scoping checklist is a free interactive checklist from PentestCompare, a provider comparison published by Excession Labs. It collects scope, roles, environments and report needs, so every provider quotes the same work.
Need a pentest you can act on?
Tell us what you need tested and why. We reply to agree scope, and testing starts only after written authorization.