Free

Learn for free.

Free live tools, free download tools, free interactive lessons and a free field guide. No sign-up.

Live tools Download tools Lessons Cyber Thriller Field Guide Git Repository

Live

Free live tools.

Use them right here, in your browser. Nothing you paste is uploaded.

Free Obisec tools

JWT decoderRead any token and spot problems. Email header analyserTrace an email and check SPF, DKIM and DMARC. Password generatorRandom passwords and passphrases, with real crack times. Base64, URL and hexEncode, decode and auto-peel layers. CIDR calculatorIPv4 and IPv6 subnets, splits and ranges. Hash and file checkerCheck a download is genuine. MD5 to SHA-512. Timestamp converterUnix, Windows, Chrome and Apple times, any zone. IOC extractor and defangerPull indicators from text and make links safe. Regex testerMatch, replace and explain. Stops runaway patterns. 2FA code testerWatch authenticator codes change. Scan a QR code.

Free Studio tools

Exposure calculatorTrade aperture, shutter and ISO. Includes ND filters. Depth of fieldHow much is sharp, and where to focus. Golden hourGolden and blue hour for any place and date. Field of viewCompare two lenses and see what fits. Photo metadataSee what a photo gives away. Save a clean copy. Image resizerResize and compress for web, social or email. Colour palettePull the main colours from a photo. Crop plannerSee how a frame crops for each ratio. Photo watermarkAdd your name or logo to a photo. Video storageData rates and card space, incl. RED and Nikon ZR.

More live tools are on the way.

Download

Free download tools.

Download, run locally, and learn how MCP tools work.

Free · passive OSINT

DomainTrust MCP

Give it a domain or company website and get a plain-English Website Trust Report with a trust score, a risk rating, a summary and suggested fixes. It only gathers public information.

Domain and DNS. WHOIS age and expiry, nameservers, MX, TXT and CAA records.
Email security. SPF, DMARC and common DKIM selectors.
Website signals. HTTPS, certificate details, redirects, technologies and security headers.
Subdomains. Exposed names found through certificate transparency data.

Free download ›Learn more ›

Free · Python and MCP

PhishCheck MCP

Check a suspicious email before you click anything. Paste a message or header, scan a saved file, or connect it to an MCP-compatible client, and get a Low, Medium or High risk report with plain-English next steps.

Message content. Urgency, pressure, fear and requests for credentials.
Sender and links. Reply-to mismatches, spoofing hints, lookalike names and IP-based links.
Attachments. Risky file types and references.
Authentication. SPF, DKIM and DMARC results from pasted headers.

Free download ›Learn more ›

Both are first-pass aids, not verdicts. Treat the results as guidance.

Lessons

Free lessons to learn and understand.

Short, interactive lessons on ideas people often get wrong.

Lesson · about 7 minutes

Encoding, Encryption & Hashing

How the three differ in purpose and in whether they can be reversed, with examples from Base64, AES, RSA, SHA-256 and SHA-3. Try all three on one input in the Transform Lab, then see what thrillers get wrong.

Read the lesson ›Companion PDF ›

Lesson

MCP: The Missing Link

What the Model Context Protocol is, how a request travels from an AI model through MCP to your files, tools and live systems, why a shared standard matters, and the questions it raises about who controls those connections.

Read the lesson ›

Also free

The Cyber Thriller Field Guide.

A 62-page PDF for writers of cyber thrillers. Learn how to write cyber thrillers that feel real.

Get the Field Guide

Ready for a course?

Certified training, from £39 a month.

Ways to learn See the courses