Cyber Essentials Assessment
Check identity, devices, patching, malware protection, backups, network exposure and data protection against Cyber Essentials-style controls.
Open Tool
Tools and Platforms
Free public tools, with Aid+ platforms for deeper assessment work.
Use the free public tools to identify gaps, explore options and build plans. Assessment-heavy and managed-review platforms now sit under Aid+, which helps fund the free Security Aid mission for SMBs.
Free Tools
Public tools that remain free.
These tools stay free for public use and are designed to give SMBs practical value without needing a paid engagement.
SIEM Gap Assessment
Map identity, endpoint, cloud, SaaS, network, email, server and detection controls to identify visibility gaps and maturity priorities.
Open ToolSIEM Cost Estimator
Estimate log ingestion, retention strategy and likely monthly or annual cost for Sentinel, Splunk and other SIEM platforms.
Open ToolSIEM Query Translator
Translate common hunting queries between KQL, Splunk, OpenSearch, LogScale, SentinelOne-style syntax and other SIEM query languages.
Open ToolIncident Response Plan Generator
Generate a structured incident response playbook with scenario-specific flow diagrams, procedures and stakeholder templates.
Open ToolMicrosoft Defender Suite Assessment
Assess Defender XDR, Endpoint, ASR, Identity, Office 365, Cloud Apps, Servers, Cloud, IoT, mobile and KQL data coverage.
Open ToolMicrosoft Purview Assessment
Assess Microsoft Purview information protection, sensitivity labels, DLP coverage, alerting and governance controls.
Open ToolZscaler DLP Assessment
Assess Zscaler DLP inspection scope, policy attachment, match quality, incident handling and operational tuning.
Open ToolBeyondTrust PAM Assessment
Assess BeyondTrust Password Safe, endpoint privilege management, session control and PAM governance coverage.
Open ToolSalesforce Containment Check
Review Salesforce containment actions for both single-user and tenant-scale incidents, including bulk user scoping, session revocation, connected apps, OAuth, audit trails, Event Monitoring, jobs and export evidence.
Open ToolOkta Containment Check
Review Okta containment actions for both single-user and mass compromise scenarios, including bulk user scoping, session revocation, MFA, admin role abuse, suspicious apps, OAuth grants, network zones and System Log evidence.
Open ToolAzure and M365 Containment Check
Review Entra ID, Azure and Microsoft 365 containment actions for both targeted and mass compromise scenarios, including bulk user scoping, service principals, consent abuse, legacy auth, mailbox abuse and audit evidence.
Open ToolCyber Sous Chef
Paste encoded payloads, obfuscated code or suspicious snippets and get the best next CyberChef recipe to try without executing the sample.
Open ToolHAR Threat Analysis Tool
Drop in a HAR file to highlight suspicious requests, injected JavaScript patterns, external infrastructure pivots and investigation priorities.
Open ToolCode Reverse Engineering Helper
Paste suspicious or malicious code to auto-detect the language, reconstruct common obfuscation patterns, decode string resolvers and break down functions, strings, IOCs and deobfuscation priorities without executing it.
Open ToolJavaScript Malware Reversing
Paste or upload suspicious JavaScript to statically deobfuscate it, explain what the functions do, identify likely malware behaviour, extract IOCs and enrich domains, URLs and IPs through the backend VirusTotal integration.
Open ToolMalware Secret Scanner Audit Tool
Upload or paste suspicious package malware to recover targeted secret locations, environment variables, file paths, process targets and visible exfiltration indicators without scanning the visitor device.
Open ToolWeb App Database Threat Hunt
Paste or upload WordPress or Magento database exports to identify suspicious snippets, external script injections, admin users, active sessions and recently modified artefacts for web compromise hunting.
Open ToolSupplier Security Assurance Checklist
Generate a practical cyber security questionnaire to send to suppliers, SaaS providers and outsourced IT partners.
Open ToolWebusa
Stream large web access or error logs locally, flag suspicious requests, align activity to likely findings and review the output in filterable tables and timeline views.
Open Tool
Aid+ Platforms
Recommended paid platforms and bolt-on packages.
These are the tools and assessments most suited to Aid+ because they usually involve consultancy-grade review, custom validation, reporting and follow-up work. The first 4 hours of advisory-led services are free; delivery after that funds the free service and managed security mission.
Asset Aid+
Critical external asset discovery for internet-facing domains, infrastructure, exposed admin surfaces and newly discovered public assets.
- Domain and subdomain discovery
- DNS, IP and ASN correlation
- Asset typing for VPNs, admin panels and exposed apps
- Scheduled rescans and new asset change tracking
Paid Aid+ platform. Advisory scoping starts with 4 free hours; ongoing delivery, tuning and reporting are paid. Profit funds free SMB services and the managed service mission.
Open WorkspaceAssessment Aid+
One premium assessment platform where you choose the assessment you need and complete the relevant control review in one Aid+ workspace.
- Cyber Essentials Assessment
- SIEM Gap Assessment
- Microsoft Defender Suite Assessment
- Microsoft Purview Assessment
Paid Aid+ platform. First 4 advisory hours free, then assessment and reporting work is billed at discretionary standard rates.
Open WorkspaceContainment Aid+
Premium containment and mass-compromise review delivery for Azure/M365, Okta and Salesforce environments.
- Azure and M365 Containment Check
- Okta Containment Check
- Salesforce Containment Check
- Mass-compromise workflow design and reporting
Paid Aid+ platform. The first 4 hours are free for triage and scoping; deeper investigation, reporting and workflow design are paid.
Open Workspace