Security tools
you actually use.
Fast, no-login utilities and concise operational guides for blue teams, SOC analysts, sysadmins and security engineers. No account. No clutter. Just the answer.
Useful in the middle of real work
No account. No clutter. Just the answer.
CIDR Checker
Check whether an IPv4 or IPv6 address belongs to a CIDR network.
→CIDR / Subnet Calculator
Expand a CIDR block: network, mask, broadcast, hosts and the first addresses.
→IOC Extractor
Paste logs or text and instantly extract IPs, hashes, domains, emails and URLs.
→IOC Deduplicator
Deduplicate and count a pasted list of indicators before importing into a SIEM.
→Hash Identifier
Identify common MD5, SHA-1, SHA-256 and SHA-512 values by length and syntax.
→Defang / Refang
Safely transform URLs and indicators for tickets, reports and chats.
→Timestamp Converter
Convert between epoch seconds/milliseconds and human-readable UTC/local time.
→IPv6 Subnet Calculator
Expand an IPv6 block: prefix, mask, first and last address, and total size.
→Base64 / Hex Converter
Decode or encode Base64 and hexadecimal payloads found in logs and samples.
→IOC Regex Tester
Extract IPs, hashes, domains and URLs from text with ready-made or custom regexes.
→Operational notes
Short enough to use during an incident.
How to Check If an IP Address Belongs to a CIDR Range
A practical guide for defenders who need to verify whether an IPv4 or IPv6 address belongs to a CIDR network.
→MISP Warninglists: Why Defenders Should Use Them Before Blocking IOCs
How warninglists reduce false positives when operationalizing threat intelligence.
→How to Validate an IOC Before Blocking It on a Firewall
A defender-focused checklist for reducing false positives before automated firewall enforcement.
→How to Deduplicate IOCs Before Importing Them into a SIEM
A short workflow for cleaning indicator lists so ingestion stays fast and queries stay accurate.
→Defanging Indicators: Why and How
The right way to make URLs and IPs safe to paste into reports, chats and tickets.
→New tools are landing around threat intel, network analysis and defensive operations — watch this space.
What matters right now
High-signal advisories ranked for practical defensive work. Refreshed every hour from authoritative feeds.
Build a practical security lab
VPS, Wazuh and MISP