Independent security and privacy tools
Tools that help you understand your infrastructure. Built with evidence, restraint and respect for your data.
Explore our work01 / Products & services
Products and services with a clear purpose. Choose the one that fits the work.
A clear view of your TLS, web and mail configuration, and the evidence behind every finding. Run it yourself, or watch it work here on our own domain.
Infrastructure checksA self-hosted workspace for certificates, keys and machine identities — your own root of trust. The first part inspects, matches and converts what you already hold, on your own machine. Private material is never uploaded to us.
Certificates and keysA possible future service for privileged access management. Its scope is not defined yet.
Privileged accessAnything not marked available is work in progress or work being considered. They are not available, and no date is promised.
02 / The standard we build to
01
Show what was observed, cite the rule behind a conclusion, and say plainly what was not measured.
02
Built to be run on your own machine. What is kept and what is contacted are stated, and nothing is collected by us.
03
Purposeful instruments with explicit boundaries: a check reads what a server already serves, and does nothing more.
03 / Independent security & privacy team
We are an independent team building security and privacy tools. denyfirst is the home for that work: the products, the reasoning behind them, and the responsibility for both. Everything we ship is open source, with no third-party dependencies, so it can be checked rather than trusted.
See the sourceDocumentation
How to read a report, what a check sends, how to run your own copy, and how to reach us.