50+ modules for auditing, firewall management, VPN, SSL, DNS and network scanning. Runs entirely on your hardware. No cloud. No telemetry.
SSL/TLS, HTTP headers, cookies, CORS, CSP, methods, technology stack, mail, ports. Weighted score with radar chart and PDF report.
Parser, builder and exporter. 18 audit checks with findings and guided fixes. Rule conflict detection, simulator, diff.
Configuration generator and auditor. Multi-client, mesh topology, DDNS integration via BIND9 event hooks.
Multi-resolver queries, DNSSEC, AXFR, reverse lookup, subdomain discovery. BIND9 config generator with RPZ blocklists.
LAN and remote subnet scanning with topology map. SNMP audit, NetBIOS hostname discovery, gateway detection.
Detects ARP Poisoning, DHCP Rogue, DNS Spoofing, SYN Flood, port scan activity, Stratum mining connections.
Protocol support, cipher suites, certificate chain, OCSP stapling, HSTS preload, CT logs, forward secrecy. Grade A–F.
SPF, automatic DKIM selector discovery, DMARC policy, RBL on 10 blacklists, STARTTLS, MX fingerprint.
Technology stack detection, WAF identification, CVE lookup from NVD, sensitive path probing, hardening findings.