NetRisk · Security Tools
Security tools for NetRisk and SafeCadence Command
Focused tools for firewall, SD-WAN, routing, wireless, exposure, best-practice checks, and the DSAT Command demo. Free to use, nothing to install for the web checks, and your security data stays local-first by design.
SafeCadence Network Risk — the platform
The local-first alternative to AlgoSec, Tufin, Drata, and Saviynt — combined. One declared policy becomes correct configuration for every vendor (Cisco IOS/NX-OS/ASA · Arista · Juniper · Fortinet · Palo Alto · Aruba · AWS · Azure · GCP · Okta · ISE · ClearPass · AD · Entra). 45 adapters · 22 controls · 16 multi-vendor translators · attack-path graph · identity write-back · Tier-3 SSH execution behind a triple-gate · full compliance suite (NIST · CIS · PCI · HIPAA · ISO 27001 · SOC 2). v16 adds five AI agents: red+blue paired analysis (only disagreements surface), proactive nudge inbox with persistent memory, drift explainer routing back to your approval chain, regulatory drift watcher polling CISA KEV locally. 100% local. BYO-AI keys never leave your machine. ~2,230 tests.
pip install 'safecadence-netrisk[server]' · safecadence demo · safecadence ui
NetRisk Exposure Scan
We scan your domain from the outside using public data only — non-intrusive, nothing authenticated against, legal to run on any domain — and send back a scored report (0–100). NetRisk finds exposure that traditional scanners miss, including AI and agent attack surface signals, alongside classic external risk.
NetRisk security tools
Anonymous, no sign-up, browser-based. Use them for one-off audits, then move into NetRisk or DSAT Command when you need continuous posture, evidence, maps, workflows, and reports.
External Exposure Scan
Free external scan of your domain — public attack surface, email hygiene, exposed systems, and prioritized next steps.
🛡️ Firewall Analyzer
Paste a Palo Alto / Cisco Firepower / Fortinet / SonicWall config — get prioritized cleanup recommendations.
🌐 SD-WAN Analyzer
Cisco SD-WAN, VeloCloud, Fortinet Secure SD-WAN, Prisma SD-WAN, Versa, Aruba EdgeConnect.
🔀 Routing & Switching Analyzer
Cisco IOS, Juniper, Arista, Aruba CX, Mikrotik, FortiSwitch — security posture audit.
📡 Wireless / Wi-Fi Analyzer
Cisco / Meraki / Aruba / Mist / Ubiquiti / FortiAP — SSID security audit.
📚 Config Templates Library
Curated best-practice snippets per vendor. Copy + paste, or run through the matching analyzer.
✅ Best-practice checker
Score your firewall config against vendor + NIST + CISA hardening guidance.
Public Safety Command Demo
Sample command center for public safety operations, incidents, investigations, sensors, evidence, and RFP proof.