Free & Self-Serve

Security checks you can run yourself, no proposal required.

A small, growing set of free tools built from the same frameworks used in every paid engagement — NIST CSF 2.0, CIS Controls 8.1, and NIST AI RMF. Run a check in minutes, see exactly what it found, and decide for yourself what's worth a closer look.

Try the Exposure Check → Talk to me instead
Free · No Account
Shadow AI & OAuth App Exposure Check

See which third-party apps and AI tools have been given OAuth access to your Microsoft 365 or Google Workspace tenant, including the ones nobody signed off on. Read-only, nothing is changed, and nothing you don't already control is touched.

  • Microsoft 365
  • Google Workspace
  • NIST CSF · GV.SC
Learn How It Works
In Development
CIS Controls IG1 Quick Self-Score

A short, guided self-assessment against CIS Controls IG1, the baseline safeguards built for small and resource-limited organizations, with a plain-language score and priority list at the end.

  • CIS Controls IG1
  • Small business
Why These Exist

Not a lead form.
An actual answer.

Most people won't book a call before they know if there's a real problem. So look first, then decide.

Read-only, always
Every tool here is built to read, never to change. Revoke access the moment you're done.
Framework-aligned
Results map to NIST CSF, CIS Controls, and NIST AI RMF, so findings mean something beyond a scare score.
No pressure, no spam
Run a check, get your results, and walk away if you want to. No sales sequence on the other end.
Want A Second Opinion

Want a second set of eyes
on the result?

If a check turns up something worth digging into, I can help, starting with a short, no-obligation conversation.

Get in Touch →