Vigilbase Tools

Free security tools for your Cloudflare account, website and email. Start with a full checkup, or use a focused checker for one record, header or setting.

19 free tools
5 free scans a day, 50 with a free Vigilbase account
Reports by email

Recommended

Start with a full checkup

Two free scans cover most of what attackers look at first: your Cloudflare account and your public website.

Cloudflare Checkup

A read-only review of your Cloudflare account and every zone it can see, with an A to F grade and the fixes that matter most listed first.

Account governance and MFA
DNS, DNSSEC and SSL/TLS on each zone
WAF, managed rules and legacy rules
Cloudflare One: Access, Gateway and Tunnels

Ways to run it: Continue with CloudflareVigilbase CLIAPI token
What you get: A free grade and prioritized findings. Deeper account and zone findings are an optional upgrade.

Run the Cloudflare Checkup

Vigilbase is not affiliated with or endorsed by Cloudflare, Inc. Cloudflare and the Cloudflare logo are trademarks of Cloudflare, Inc.

Website Security

A 28-point scan of a live site you own or may test: TLS and certificates, security headers, exposed files, server information leaks and public vulnerability signals.

TLS, certificate and HSTS configuration
Security headers, including CSP
Exposed files such as .env and .git
React2Shell and other public vulnerability signals

How it runs: Verify your work email, then scan. The scan sends active requests, so only scan sites you own or may test.
What you get: An A to F grade with a fix for each finding, emailed to you with a shareable link.

Scan your website

All free tools

Focused checks for one record, header or setting. Most need no signup.

Website and headers

Grade a site's security headers, build and evaluate a Content-Security-Policy, and check HSTS.

Email Security

Look up and build the SPF, DKIM, DMARC, BIMI and MTA-STS records for your domain

DNS & Cloudflare

See whether a site is on Cloudflare, check IPs against Cloudflare's ranges and check whether DNS answers are signed

Vulnerability exposure

Check authorized apps and company domains for known exposures.

How it works

Simple & Free

1
Enter a domain or URL
Most tools need nothing else. Scans that send active requests verify your work email first, and the Cloudflare Checkup asks for read-only access to your account.
2
Get a graded result
Each check explains what it found, why it matters and how to fix it, with an A+ to F grade where one applies.
3
Get the report by email
Send yourself the full report with a link you can share, or talk to an engineer about fixing what it found.

Vigilbase OS

Security operations, 24/7, without hiring a SOC.

Connect the security tools you already pay for. Our AI agent reviews every alert, day and night, and only the ones that need a person reach your team, with a fix ready to approve.

Get started Explore the platform

os.vigilbase.com/acme.exampleSample data

Overview

Needs you

Approval queue1 awaiting your decision

Priority cases3 open

Signals · last 24 hours

40,017events+6.2%vs previous period

High/critical findings21 still open