Security tools
you actually use.
Fast, no-login utilities and concise operational guides for blue teams, SOC analysts, sysadmins and security engineers.
Toolbox
Useful in the middle of real work
No account. No clutter. Just the answer.
Field guides
Operational notes
Short enough to use during an incident.
Network Utilities
How to Check If an IP Address Belongs to a CIDR Range
A practical guide for defenders who need to verify whether an IPv4 or IPv6 address belongs to a CIDR network.
Threat Intelligence
MISP Warninglists: Why Defenders Should Use Them Before Blocking IOCs
How warninglists reduce false positives when operationalizing threat intelligence.
Defensive Operations
How to Validate an IOC Before Blocking It on a Firewall
A defender-focused checklist for reducing false positives before automated firewall enforcement.
CyberKit is growing.
More tools are being added around threat intel, network analysis and defensive operations.
See all toolsMore tools are being added around threat intel, network analysis and defensive operations.
Cybersecurity lab
Build a practical security lab
VPS, Wazuh and MISP
New utilities