Practical Security

Website, DNS & cloud security without the theatre

Free, practical checklists, baselines, and tools for hardening websites, DNS, cloud accounts, and WordPress — built for small technical teams that need to reduce real risk without an enterprise programme. Start with a checklist, run a tool, and read what's actually happening in security.

Get the website security checklist → Subscribe for updates ↓

Built by Myles Agnew · 18+ years in tech · Cloudflare, AWS, Azure, GCP · Sydney, AU

Free security checklists

Practical, task-first checklists you can run against your own sites and accounts today.

Website Security Baseline →What a full website, DNS, Cloudflare and WordPress baseline checks, the evidence you receive, and what it is not.

Cloudflare + Website Baseline →Review DNS, Cloudflare, WordPress, security headers, backups, and admin exposure in one practical pass.

Found a gap? Found gaps across DNS, Cloudflare, WordPress or backups? Use the baseline workflow to prioritise fixes and capture evidence. Explore the full baseline →

DNS Backup & Recovery →Make DNS records versioned, recoverable, and auditable before a bad change or account issue causes downtime.

For client work Managing client domains? Make DNS backup and recovery part of a repeatable security evidence workflow. See the agency workflow →

AI Agent Prompt Security →Review AI-agent prompts, tool access, risky instructions, and CI-friendly prompt checks.

Tools & triage

Post-Quantum Tester →Check whether a site supports quantum-safe TLS key exchange against “harvest-now, decrypt-later” risk.

Next step Use this result as one input to your TLS review—not a verdict on the security of the whole website. Explore the website baseline →

Redirect Tracer →See where a short, tracking or suspicious link really lands — every redirect hop, header and TLS certificate — without clicking it.

Next step Unexpected redirects or HTTPS behaviour? Keep the trace as evidence alongside your wider website security checks. See the sample evidence report →

Phishing Email Analyser →Triage a suspicious email for phishing and BEC warning signs with a transparent, rule-by-rule score — analysed locally, never uploaded. Network Traffic Triage Tool →Turn a Wireshark CSV into an explainable triage report: which hosts deserve a closer look, why, and what else it could be — analysed locally, never uploaded. Windows Event Log Triage Tool →Correlate Windows logons, account creations and group changes into explainable findings — password guessing, new admins, cleared logs — analysed locally, never uploaded. Passive OSINT Triage →A task-first page for passive domain, URL, exposure, archive, breach-context, and evidence-preservation workflows. Sample Baseline Report →See what a client-ready website security baseline report actually looks like.

Security areas covered

Cloud security baselines across AWS, Azure, and GCP
Web & WordPress hardening — headers, backups, plugin risk
DNS backup, recovery, and change auditing
Incident readiness — logging, endpoint visibility, first-hour response
Security evidence packs and client-ready reporting
OSINT & exposure triage from public sources

Read the latest security news posts →

Related focus areas

Security Tools →Open-source tools and calculators you can run yourself. Automation →Turn manual security work into repeatable scripts and workflows. AI Security →Prompt linting, agent safety, and CI prompt checks.

Stay in the loop

Practical security updates, no fluff

Get practical security checklists, workflows and new free tools for website, DNS, cloud, and automation hardening.

Subscribe for updates → Get the checklist ↓