Pentest scope builder
Define in 2 minutes what your penetration test must cover. The result is the scope any serious vendor would ask for; we quote from it.
Your pentest scope
What you would get
- Executive and technical report in English or Spanish, with CVSS 3.1 severity and a proof of concept for every finding
- Closing meeting with your team and a prioritized remediation plan
- Retest of fixed findings (if included)
- Attestation letter of tests performed, useful for customers and audits
The estimate is indicative and depends on real complexity; the quote is confirmed after a 20-minute call. No automatic pricing.
🔒 Everything runs in your browser or is discarded after the response. We do not store what you type.
Want a full review of your company?
These tools show what is visible from the outside. A T.I. RESCUE pentest or audit covers the rest: systems, people and processes.
Talk to a specialist See our penetration testing service →More tools
Password generator and strength checker
Generate a strong password in one click, or type yours to see how long it would hold. Nothing leaves your browser.
Try it →Was I hacked? Guided check
Tick what is happening to you. At the end you get the risk level and the steps in order, based on your answers.
Try it →Domain security checker
Passive checks only (DNS, TLS and HTTP headers), the same ones any mail server or browser performs. Graded A to F.
Try it →What is my IP?
This is the address your connection uses on the internet, and what a site sees when you visit.
Try it →ISO 27001 self-assessment
Answer about what exists and works today, not what is planned. It is the short version of the GAP assessment we run with our clients.
Try it →ISO 42001 self-assessment (AI governance)
ISO/IEC 42001 is the certifiable standard for managing artificial intelligence. Answer about what exists and works in your company today.
Try it →Shadow AI checklist
Shadow AI is the AI your team uses without the company knowing or controlling it. Measure how much there is and where the risk is.
Try it →AI system risk classifier
Pick what you use AI for and where you operate. We show the risk level and the obligations that would apply. Guidance only, not legal advice.
Try it →AI acceptable use policy generator
Fill in the details and get an AI acceptable use policy ready to review with your legal team. It is built in your browser.
Try it →Ransomware readiness assessment
Answer about what exists and is tested today. If you get encrypted tomorrow, do you recover or pay?
Try it →DMARC, SPF and DKIM checker
Without SPF, DKIM and DMARC anyone can send email in your company's name. Check all three records for your domain.
Try it →DMARC and SPF record generator
Build the SPF with your email providers and the DMARC with the policy you want, then publish them in your DNS.
Try it →HTTP security headers checker
Security headers protect your site's visitors. See which ones you send and which are missing.
Try it →Password policy generator
Fill in the details and get a password policy ready to review and publish. It is built in your browser.
Try it →Information security policy generator
The policy management signs and every other policy hangs from. Pick your sector and controls and get it ready to review.
Try it →Security culture assessment
Technology stops most attacks; the rest are stopped (or let through) by your people. Measure where you stand.
Try it →Microsoft 365 security assessment
Microsoft 365 ships the controls; almost nobody turns them all on. Answer about your tenant and see what is missing.
Try it →SLA uptime calculator
A '99.9%' sounds nearly perfect. See how much downtime it allows and compare levels before signing or promising an SLA.
Try it →RTO, RPO and downtime cost calculator
Enter your numbers: the result is the cost of your last outage and the targets a continuity plan should set.
Try it →Help desk cost per ticket
With five numbers you already have, you will know whether your support is expensive, overloaded or both.
Try it →CVSS 3.1 calculator
Pick each metric and see the score instantly. The same formula we use in our pentest reports.
Try it →IPv4 subnet calculator
Enter an IP and its prefix. You can also split the network into equal subnets for VLANs or segmentation.
Try it →Cloud speed test
Not your ISP's test: it measures the real path to a server in Europe, like when you use Microsoft 365, a VPN or a cloud system. Close downloads and video calls before measuring.
Try it →Email header analyzer
Ideal for that email “from the boss” or “from the bank” that doesn't add up. Everything is analyzed in your browser.
Try it →Phishing simulator: would you have fallen for it?
Attacks on companies almost always start with a message like these. Two minutes, no sign-up.
Try it →DNS, MX and blacklist lookup
The tool we use when “the email never arrives”: it shows what other servers see of your domain and why they might reject it.
Try it →SSL/TLS certificate checker
An expired certificate takes down your website, email and your customers' trust the same day. Check it in seconds.
Try it →