Business Security

Full domain reputation analysis: email deliverability, spam score, age, WHOIS, and threat intelligence verdict.

Validate business email addresses for deliverability, catch-all detection, disposable email, and role-based filtering.

Full WHOIS analysis: registrant exposure, privacy protection status, historical records, and ownership risk assessment.

Enumerate subdomains of any domain using passive intelligence sources. Find forgotten, exposed, or vulnerable subdomains.

Audit any public social media profile for security signals: impersonation risk, brand squatting, and exposure checklist.

Generate syntactically correct SPF and DMARC TXT records, or paste an existing record to catch common real-world mistakes before they cost you deliverability.

Generate realistic phishing training emails from 5 ready-made scenarios, complete with a trainer red-flag breakdown for the debrief.

Generate a formal data breach notification letter covering the standard elements — what happened, what data was involved, and what you're doing about it.

Build a structured Incident Response Plan around your team, your NIST-aligned phases, and your critical assets — export it in seconds.

Pick from a 30-question security bank across 6 categories and generate a clean, exportable questionnaire to send to any third-party vendor.

Generate a structured risk assessment for any AI tool or AI-powered vendor your team wants to adopt, covering data handling, output reliability, compliance, and access control.

A built-in 18-step IT/security offboarding checklist with custom items, progress tracking, and local save so every employee departure gets the same thorough shutdown.

Map critical business functions to recovery targets, alternate work locations, backup communications, and supplier fallbacks into one exportable Business Continuity Plan.

Score your business against the controls cyber insurers actually check before issuing or pricing a policy, with a weighted readiness score and a prioritized gap list.

Select the data categories your business collects and generate a structured Data Retention Policy with suggested retention periods and plain-language rationale for each.

Generate a printable multiple-choice security awareness quiz from a built-in 30-question bank spanning phishing, passwords, physical security, social engineering, and data handling — with a separate answer key.

Walk through the essential elements a Data Processing Agreement should cover and generate a structured checklist for reviewing or drafting a DPA with any vendor.

Select the security requirements that matter for your team — VPN, device rules, wifi restrictions, screen lock, document handling, and more — and generate a ready-to-share Remote Work Security Policy.

Score your office against 7 weighted physical security fundamentals — access control, visitor logs, cameras, server room security, and more — and get a prioritized list of what to fix first.

Generate a defensible organization password policy built on current best-practice guidance: long passphrases, MFA as the primary defense, and rotation only after a known compromise.

Walk through 14 common behavioral-control, financial-control, and relationship-type factors to get a weighted lean toward contractor or employee classification.

Generate a structured NDA template covering standard clauses — definitions, exclusions, obligations, term, remedies — ready for legal review.

Walk through 7 common business insurance categories, mark what you have, and get a coverage score plus a broker-ready gap list.

Generate a structured crisis communication plan covering spokesperson role, notification chain, holding statements, and stakeholder order.

Track vendor contracts with renewal dates and cancellation notice periods — the tool flags contracts entering their notice window, sorted by urgency.

A weighted 13-point checklist for EU AI Act Article 50 transparency obligations — AI interaction disclosure, deepfake labeling, and machine-readable content marking — enforceable since August 2, 2026.

A weighted 12-point checklist to identify gaps in your cyber insurance coverage for AI-related incidents — employee misuse, your own AI systems, and third-party AI vendor risk.

Track every vendor breach notification your organization receives — status, days since notification, and which ones are still open past a reasonable response window.

Generate a clear, distributable AI tool usage policy for your organization — approved tools, forbidden data categories, and consequences — in under a minute.

A weighted 12-point checklist scoring your organization's actual readiness for a 2026 cyber insurance application or renewal — MFA, tested backups, EDR, and documented incident response.

Build a running inventory of your organization's data processing activities — data types, purpose/legal basis, and third-party involvement — the record GDPR Article 30 and similar laws require.

Enter your key security metrics — MFA coverage, patch status, phishing test results — and generate a structured, board-ready cyber risk report with automatic risk-level flagging and recommended actions.

Map every vendor by data/system access level, business criticality, and security assessment recency — with automatic risk scoring to see your real supply chain exposure at a glance.

A weighted 12-point checklist for securely onboarding remote employees — covering the identity verification, device management, and access provisioning steps that used to happen naturally in an office.

Calculate the estimated financial impact of transitioning to a 4-day workweek — compressed (same hours, 4 days) or reduced-hours (same pay, fewer hours) — based on your team size and expected productivity retention.

A 10-point weighted checklist scoring your organization's actual governance around autonomous AI agents — access scoping, human approval gates for irreversible actions, audit trails, and a tested kill switch — not just whether you've deployed one.

A 10-point weighted checklist scoring the specific SLA and reliability terms an AI vendor contract should carry — model-change notice, data retention and training-use terms, subprocessor disclosure, and exit/data-portability terms — beyond the uptime percentage most reviews stop at.

A 10-point weighted checklist scoring your organization's actual employee awareness and reporting readiness for 'task scams' — fake side-gig offers delivered via SMS and messaging apps that ask for upfront payment or crypto deposits.

A 10-point weighted checklist scoring a retirement plan sponsor's actual fiduciary due diligence around offering a crypto investment option — documented decision process, custodian review, fee transparency, allocation caps, and ongoing monitoring.

Enter your organization's deployed AI agents and generate a real, structured board briefing document on memory-poisoning risk — the specific attack pattern, board-level questions for management, and concrete recommended next steps, ready to review and distribute.