Open-Source Security Tools

Practical security tools you can run yourself

Free, open-source tools and calculators for DNS backup, GitHub backup, AI-prompt security, post-quantum TLS testing, and cloud cost estimation. Built to make useful security work repeatable, recoverable, and easy to operate.

Get tool updates → Browse on GitHub ↗

Built by Myles Agnew · Cloudflare, AWS, Azure, GCP, WordPress · Sydney, AU

Tools you can run in the browser

No install required — open, enter your details, and run.

Post-Quantum Tester →Run a real post-quantum TLS handshake against any site to check for quantum-safe key exchange (X25519MLKEM768 / ML-KEM).

Next step Use this result as one input to your TLS review—not a verdict on the security of the whole website. Explore the website baseline →

Redirect Tracer →Trace every hop a link takes — 301/302/307/308, meta refresh and JavaScript redirects — with status codes, headers, timings and TLS details.

Next step Unexpected redirects or HTTPS behaviour? Keep the trace as evidence alongside your wider website security checks. See the sample evidence report →

Phishing Email Analyser →Paste a suspicious email and see every warning sign — urgency, credential and MFA-code requests, lookalike links, risky attachments, SPF/DKIM/DMARC failures — with an explainable 0–100 risk score. Runs 100% in your browser; nothing is uploaded. Network Traffic Triage Tool →Upload a Wireshark CSV export and learn to triage it like a SOC analyst — busy hosts, possible scanning, ICMP, DNS and SYN activity, each alert explained with benign alternatives. Runs 100% in your browser; nothing is uploaded. Windows Event Log Triage Tool →Upload a Windows Security log CSV and learn to triage it like a SOC analyst — failed logons, password guessing, new accounts, privilege changes and cleared logs, each finding explained with benign alternatives. Runs 100% in your browser; nothing is uploaded.
S3 + CloudFront Cost Calculator →Estimate monthly cost for static hosting, download assets, CDN traffic, cache misses, and invalidations before you quote.

Next step Planning static hosting? Review DNS, security headers and recovery assumptions alongside the cost. Review the website baseline →

Cloudflare DNS Backup →How to keep every Cloudflare zone versioned, exportable to BIND, and recoverable before a bad change causes downtime.

For client work Managing client domains? Make DNS backup and recovery part of a repeatable security evidence workflow. See the agency workflow →

Automation scripts & deployments

Open-source scripts and workflows to automate the security work you'd otherwise do by hand.

github-backup →Bash scripts that snapshot every GitHub repository an account owns — off-platform backup for your whole GitHub presence.

Next step A successful automation run is only part of the story. Keep evidence of what ran, what changed and how recovery works. Explore the baseline evidence workflow →

AI Agent System Prompts →Ten copy-ready system prompts for AI business agents — receptionist, sales, customer success, CRM, bookkeeping and more — each with guardrails and human sign-off rules.

Next step Before agents get production tool access, review prompt boundaries, approvals and the controls that still need human verification. Get practical AI security updates →

promptgenie →Prompt linting, static risk scanning, testing, and CI workflows for safer AI-agent prompt pipelines.

Next step Before agents get production tool access, review prompt boundaries, approvals and the controls that still need human verification. Get practical AI security updates →

cloudflare-backup ↗Automated Cloudflare DNS record backup script. Version and recover DNS configs before migrations or account changes.

For client work Managing client domains? Make DNS backup and recovery part of a repeatable security evidence workflow. See the agency workflow →

n8n-json ↗Ready-to-import n8n automation workflows for security alerts, notifications, and operational pipelines.

Next step A successful automation run is only part of the story. Keep evidence of what ran, what changed and how recovery works. Explore the baseline evidence workflow →

dns-blocklists ↗Curated DNS blocklists for Pi-hole and similar resolvers — block ads, trackers, and malicious domains at the network level. poc_opencti ↗Complete Docker deployment for OpenCTI — spin up a full threat-intelligence platform for a home lab or evaluation.

Explore by focus area

Security →Checklists, baselines, OSINT triage, and post-quantum testing. Automation →Scripts and workflows that make security work repeatable. AI Security →Prompt linting, agent safety, and CI prompt checks. For Agencies →Repeatable website, DNS & Cloudflare baselines for client work.
Follow the Tools

Get new tools and updates

Practical security tools, checklists, and workflows for website, DNS, cloud, and automation hardening. No enterprise theatre, no fluff.

Join the list → Search the site ↓