BREACH:// / free.tools

// free.tools

Client-side security tools — no accounts, no data collected, no paywalls

Every tool on this page runs entirely in your browser. No data is sent to our servers. Each tool links out to its own page.
// HIPAA Readiness Check HIPAA NEW ★ FEATURED

15-question self-assessment across all five HIPAA Security Rule domains. Get a risk score, per-domain gap breakdown with CFR citations, and an estimated regulatory exposure range — all in about 5 minutes. Includes a Security Risk Analysis readiness flag and CTA routing to the right compliance resources for your practice type.

Audience: Dental, family medicine, mental health, and other small healthcare practices handling ePHI.

✓ 100% client-side — answers never leave your browser [ Launch → ]
// Phishing Awareness Quiz PHISHING

Four-lesson interactive module covering sender spoofing, URL tricks, urgency tactics, and Business Email Compromise. Followed by a 6-question quiz using realistic phishing emails — can you spot the fakes?

Audience: Any employee who uses email. Ideal for SMB security awareness training.

✓ 100% client-side — no data collected [ Launch → ]
// Security Toolkit NETWORK

Three tools in one: live external port scan + geolocation + blacklist check on your public IP; HTTP security headers grader for any domain; and a client-side phishing URL analyzer.

Audience: IT staff, MSPs, and small business owners who want to see their external exposure.

✓ Read-only scan — no agents installed, no data stored [ Launch → ]
// Password & Passphrase Checker PASSWORDS

Live password strength analysis powered by zxcvbn: score (0–4), entropy estimate, realistic crack-time for offline fast hashing and online throttled attacks, pattern warnings (dictionary words, keyboard walks, dates, l33t substitutions), and a flag when your password appears in common or breached password lists. Includes a cryptographically secure diceware-style passphrase generator using window.crypto.getRandomValues() — so you can see what a strong credential actually looks like.

Audience: Healthcare practices building or auditing their HIPAA password management procedure (§164.308(a)(5)(ii)(D)).

✓ 100% client-side — password never leaves your browser [ Launch → ]