Elevated Actively exploited flaws are being added every week. Threat Watch →
The High Tech Solution The High Tech Solution 256-529-4720

Free tools

Free security tools for your team

See whether criminals can fake email from your business, score your security in two minutes, find out if a password has been leaked, see what IT downtime really costs, check whether your systems are still supported, check a suspicious attachment before anyone opens it, give everyone a desk card that tells them what to do when something looks wrong, and learn to spot this month’s phishing trick. Free, no sign-up.

Email security check ↓Security self-assessment ↓Leaked password check ↓Downtime calculator ↓Still supported? ↓Attachment checker ↓Survival Card ↓Phish of the Month ↓Book a free IT checkup

Can criminals fake your email?

Type your business email or domain. In seconds you get a grade on the three settings that stop criminals from sending email that looks like it came from you.

Nothing is stored or sent to us. Your browser reads your domain's public settings, the same ones every mail server checks. We never see your email.
SPF

The list of services allowed to send email as you.

DKIM

A tamper-proof signature on every message you send.

DMARC

Tells other mail servers what to do with fakes: deliver, junk or reject.

Your grade shows here A · B · C · D · F

How secure is your business? Two-minute self-assessment

Ten yes-or-no questions about the protections that stop most attacks on small businesses. Answer honestly. "Not sure" is a useful answer too.

    0 of 10 answered

    Has my password been leaked?

    Check a password against more than a billion passwords exposed in real data breaches. Criminals try these first, so a leaked password should never be used again, even if it looks strong.

    Your password never leaves this page. Your browser turns it into a scrambled fingerprint and sends only the first 5 characters of that fingerprint to the free Have I Been Pwned service. The match happens here, on your screen. Nothing is stored.
    Your result shows here LEAKED · NOT FOUND

    What does downtime cost you?

    When the network, email or a key system goes down, payroll keeps running. Adjust the numbers to match your office and see what IT problems really cost each year.

    Estimated cost per year $0
    Per hour of downtime$0
    Per outage$0
    One lost workday (8 hrs)$0
    Per employee, per year$0

    This counts only lost work time and revenue. It leaves out overtime to catch up, missed deadlines, unhappy customers and the cost of a fix, so the real number is usually higher.

    Most outages come from problems that monitoring and patching catch early. A free checkup shows where yours are likely to come from.Find my weak spots →

    Is it still supported?

    Once a product reaches end of life, the maker stops fixing security holes in it, and attackers know it. Pick what you run to see whether it still gets security updates.

    Support dates show here SUPPORTED · ENDING SOON · ENDED

    Dates come live from the community-maintained endoflife.date database, which tracks each maker's published lifecycle.

    Is this attachment safe?

    Check a file against dozens of antivirus engines on VirusTotal before you open it.

    Your file never leaves your computer. We create a digital fingerprint of it right here in your browser and look up only that fingerprint. Nobody sees the contents.

    Any engine flags it

    Don't open it. Delete the email and call us. Already opened it? Unplug from the network first.

    "Item not found"

    Nobody has uploaded this exact file before. Upload it for a fresh scan if it isn't confidential, or forward the email to us.

    Seen, 0 detections

    The file is probably fine. Still watch for links inside it and any page asking you to sign in.

    The Workday Survival Card

    A two-sided 4×6 cheat sheet your team will actually keep on their desk.

    Front of the card: Windows, Outlook and Teams keyboard shortcuts Back of the card: phishing warning signs and what to do in a security emergency
    • Work faster: the Windows, Outlook and Teams shortcuts people don't know
    • Spot a phish in five seconds
    • Know what to do after a bad click, a ransom pop-up or a lost laptop
    Download the free PDF ↓

    Want laminated copies for your office? Call 256-529-4720.

    Phish of the Month · November 2026

    The “documents awaiting signature” QR code

    A real-world style of attack we’re seeing right now, cleaned up so it’s safe to study. Tap a number to see each warning sign.

    FromMicrosoft 365 Admin <no-reply@m365-secure-docs.com>
    Toyou@yourcompany.com
    SubjectACTION REQUIRED: 2 documents awaiting your signature – expires today

    Hello,

    You have (2) pending documents shared with you via SharePoint:
    Q4 Payroll Adjustment.pdf

    For your security, scan the code below with your mobile device to review and sign.

    Example only. Not a real code.

    Access expires in 24 hours. Unreviewed documents may result in mailbox suspension.

    Thank you,
    IT Security Team

    1. The sender isn’t Microsoft. Real Microsoft mail comes from microsoft.com. “m365-secure-docs.com” is a lookalike anyone can register.
    2. Manufactured urgency. “Expires today” is there to rush you past thinking.
    3. No name. A real document share says who sent it and greets you by name.
    4. Tempting bait. “Payroll” makes almost anyone curious. Nobody told you to expect it.
    5. The QR code is the trap. It moves you to your phone, outside your company’s email filters, and hides the real web address. It leads to a fake Microsoft sign-in page.
    6. A threat. Real IT doesn’t suspend mailboxes over unread documents.
    7. A vague signature. No name, no phone number, no way to check.
    What to do
    • Don’t scan it. Use your mail’s Report button, or forward it to your IT provider.
    • Expecting a document? Open SharePoint or OneDrive yourself instead of using the email.
    • Already scanned it and typed your password? Change it right away and call us. Every minute counts.
    Want your team to spot these on their own? Short, regular phishing training is part of what we set up.Book a free checkup →