Free Zero Trust & Security Tools

Visual multi-host SSH config generator with bastion chains, wildcard patterns, and best-practice defaults. Download ready-to-use config.

Like Mozilla SSL Config but for sshd_config. Select OS, version, and security profile. Get a production-ready hardened config with explanations.

Generate connection strings and code snippets for PostgreSQL, MySQL, MongoDB, Redis, SQL Server. All languages, all SSL modes.

Generate idempotent Linux user setup scripts with SSH keys, sudo policies, group membership, and rollback scripts.

Define access policies and export as iptables, nftables, ufw, or cloud Terraform rules (AWS SG, Azure NSG, GCP Firewall).

Define users, resources, and access mappings. Get automated findings and export audit-ready quarterly review reports.

Paste SSH public keys and get a full audit: algorithm strength, bit length, duplicates, missing comments, and rotation recommendations.

Cross-reference access control requirements across SOC 2, HIPAA, PCI-DSS, ISO 27001, and NIST 800-53. Track implementation and export.

Select a security scenario (compromised key, unauthorized access, privilege escalation) and get a step-by-step response playbook.

Input your exposed services and get risk-scored findings with a prioritized hardening roadmap. Identify vulnerabilities before attackers do.

Generate PowerShell scripts to list Active Directory users active within the last 15, 30, 60, or 90 days. Optional group membership filter and CSV/HTML export.

Generate PowerShell scripts to bulk-reset passwords for AD users active within 15–90 days. Filter by group, enforce complexity, export CSV audit logs.

Generate PowerShell scripts to list all authentication events for an AD user within 15, 30, 60, or 90 days. Query Security Event Logs across Domain Controllers.

Generate PowerShell scripts to create complete Active Directory users with all attributes — identity, password, organization, groups, profile paths, and bulk CSV import.

Generate comprehensive PowerShell scripts to audit AD hardening — password policies, Kerberos security, privileged access, stale objects, GPO settings, LDAP security, and DC health. CIS & NIST aligned.

Complete production guide to centralize SSH authentication with LDAP using SSSD, PAM, and public key lookup. Covers OpenLDAP and Active Directory on Ubuntu and RHEL.

Define roles, permissions, and resource access rules. Export role-based access control policies as JSON, YAML, or formatted policy documents for your access review.

Evaluate your organization's Zero Trust readiness across identity, network, device, and data pillars. Get a scored report with actionable next steps.

Create legal warning banners for SSH login. Generate /etc/issue, /etc/motd, and sshd_config Banner content with compliance-ready templates for SOC 2, HIPAA, and PCI DSS.

Build network access control lists for iptables, AWS Security Groups, Azure NSG, and GCP firewall rules. Define ingress and egress rules with CIDR notation and export.

Create enterprise password policies with complexity requirements, rotation schedules, and compliance mappings. Export as policy documents or PAM configuration.

Evaluate your organization's readiness for multi-factor authentication. Get recommendations for MFA methods, rollout strategy, and user communication plans.