Free · Web Tools
Free security tools — no signup, no catch
Quick, browser-based tools for one-off jobs: clean up a firewall config, build a quote or SOW, check your config against best practices. Free to use, nothing to install, and your data never leaves the page. Want the full platform that watches everything continuously? That's SafeCadence NetRisk — just below.
SafeCadence Network Risk — the platform
The local-first alternative to AlgoSec, Tufin, Drata, and Saviynt — combined. One declared policy becomes correct configuration for every vendor (Cisco IOS/NX-OS/ASA · Arista · Juniper · Fortinet · Palo Alto · Aruba · AWS · Azure · GCP · Okta · ISE · ClearPass · AD · Entra). 45 adapters · 22 controls · 16 multi-vendor translators · attack-path graph · identity write-back · Tier-3 SSH execution behind a triple-gate · full compliance suite (NIST · CIS · PCI · HIPAA · ISO 27001 · SOC 2). v16 adds five AI agents: red+blue paired analysis (only disagreements surface), proactive nudge inbox with persistent memory, drift explainer routing back to your approval chain, regulatory drift watcher polling CISA KEV locally. 100% local. BYO-AI keys never leave your machine. ~2,230 tests.
pip install 'safecadence-netrisk[server]' · safecadence demo · safecadence ui
SafeCadence Shield — free AI & exposure scan
We scan your domain from the outside using public data only — non-intrusive, nothing authenticated against, legal to run on any domain — and send back a scored report (0–100). Shield finds what traditional scanners miss: the AI & agent attack surface nobody else checks for, alongside classic exposure.
Free companion web tools
Anonymous, no sign-up, browser-based. Use them for one-off audits — paste a config, get a prioritized report. The flagship platform above is what you run continuously across a fleet.
🛰️ AI & Exposure Scan
Free external scan of your domain — AI/agent exposure (MCP, LLM gateways, leaked keys) plus email & subdomain hygiene. We send the scored report.
🛡️ Firewall Analyzer
Paste a Palo Alto / Cisco Firepower / Fortinet / SonicWall config — get prioritized cleanup recommendations.
🌐 SD-WAN Analyzer
Cisco SD-WAN, VeloCloud, Fortinet Secure SD-WAN, Prisma SD-WAN, Versa, Aruba EdgeConnect.
🔀 Routing & Switching Analyzer
Cisco IOS, Juniper, Arista, Aruba CX, Mikrotik, FortiSwitch — security posture audit.
📡 Wireless / Wi-Fi Analyzer
Cisco / Meraki / Aruba / Mist / Ubiquiti / FortiAP — SSID security audit.
📚 Config Templates Library
Curated best-practice snippets per vendor. Copy + paste, or run through the matching analyzer.
✅ Best-practice checker
Score your firewall config against vendor + NIST + CISA hardening guidance.
📄 As-built report
Generate a polished as-built deliverable for your client or audit team. Word / HTML / PDF.
💰 Service Quote + Invoice
Pre-loaded scope scenarios. Build a quote / invoice, download as Word / HTML / PDF.
📝 SOW Builder
Build a Statement of Work step-by-step. Download as Word / HTML / PDF.