Confirm authorisation
Only test sites you own or are contracted to assess. Keep written scope for client work.
Penetration Testing Toolkit
A free, browser-based toolkit for hardening your own websites the way an attacker would probe them — find exposed files, weak headers, spoofable email, expiring certificates and disclosure leaks, then fix them with a prioritised report.
Authorised use only. Scan sites you own or have written permission to test.
Unlock Results
Enter your name and email to reveal tool results.
We send a one-time code to your email. Verified users get 3 free scans per day, then upgrade to Growth Lab Pro for unlimited access.
The kit
Everything you need for a defensive self-audit
Sensitive File Exposure
Scan your site for exposed .env, .git, backups, phpinfo, server-status and directory listings.
Security Headers
Grade HSTS, CSP, COOP, CORP, frame and MIME protection, cookie flags and disclosure.
DNS & Email Spoofing
Check MX, SPF, DMARC and CAA to stop spoofing and improve deliverability.
TLS / SSL Certificate
Read certificate issuer, validity window and days remaining to expiry.
security.txt & Discovery
Check responsible-disclosure and crawler-discovery files.
Password & Token Lab
Test passphrase strength, decode JWTs, hash text and build a hardened CSP — all locally.
Security Tools Library (Pro)
Members-only portal: download the best free pen-testing tools with official links and step-by-step usage guides.
Methodology
How to run a responsible self-audit
Map the surface
Run the exposure scan and TLS, DNS and header checks to see what's reachable and what leaks.
Prioritise fixes
Close exposed files first, then fix headers, cookie flags and email spoofing. Use the report's ranked list.
Re-test & monitor
Re-scan after each fix. Growth Lab Pro adds continuous monitoring so regressions email you automatically.
Growth Lab Pro
Run every tool without limits.
Free accounts get 3 scans a day. Go Pro for unlimited scans across every tool, white-label PDF reports with your own logo, the AI content assistant, rank tracking and continuous monitoring — €25/month or €200/year. Cancel anytime.
- Unlimited audits & scans
- White-label PDF reports
- Rank tracking & monitoring