Free Security Tools
Four free tools from AMVIA's security team. No accounts, no fabricated results — real DNS lookups, honest self-assessments, and reports you can actually hand to a board or a broker.
Quick answer
AMVIA publishes four free security tools for UK businesses: an external attack surface scan with instant SPF/DKIM/DMARC email checks; a 20-question Cyber Essentials readiness assessment; a cyber insurance readiness check covering the controls insurers ask about; and a guided Microsoft 365 security baseline self-test. There is also a Cyber Essentials certificate checker for vetting suppliers against the official IASME register.
How the tools fit together
See your exposure
Start with the attack surface scan — it shows what an attacker sees from outside, and the email checks run instantly.
Check your controls
The Cyber Essentials, insurance and Microsoft 365 checks measure the controls that decide how incidents end — and what certification or a proposal form will ask.
Close the gaps
Every report maps to remediation AMVIA does as managed work — or take the findings and fix them in-house. The tools are useful either way.
The tools
External Attack Surface Scan
Instant SPF, DKIM and DMARC checks from public DNS, plus a verification-gated full exposure report.
Cyber Essentials Readiness Assessment
Twenty questions against the five certification controls, with a printable per-theme gap report.
Cyber Insurance Readiness Check
Fifteen questions covering the controls UK insurers keep asking about — find proposal-form friction before your broker does.
Microsoft 365 Security Baseline Check
A guided 15-point self-test of your own tenant with where-to-look guidance per check.
Cyber Essentials Certificate Checker
Vet any supplier against the official IASME register in under a minute.
PSTN Readiness Check
Five questions on the 2027 analogue switch-off — the connectivity sibling of the security tools.
Why these tools are free
Two honest reasons. First, they demonstrate how we work: real lookups and conservative scoring rather than scare-graphics, because that's also how our managed services report. Second, they find the businesses we can help — some of the people who run these checks will want the gaps closed by professionals, and that's the work AMVIA does every day. No tool requires payment details, none fabricates findings, and the assessments score entirely in your browser.
Where to start
If you have five minutes: run the attack surface scan — the email-security checks alone catch the SPF and DMARC gaps behind most invoice-fraud attempts. If certification or insurance is on your agenda this quarter, the Cyber Essentials readiness assessment and the insurance readiness check turn vague worry into a to-do list. And if your business runs on Microsoft 365 — most of our customers do — the baseline check is the fastest way to find out whether the tenant's defaults were ever actually reviewed. Vetting a supplier instead? The certificate checker takes you straight to the official register.
The services behind the tools
Managed Cybersecurity
24/7 monitoring, MDR and email security — the operational layer behind every finding these tools surface.
Cyber Essentials guide
The certification the readiness tools prepare you for.
Managed Microsoft 365
The service that keeps a tenant at the standard the baseline check measures.
Prefer the findings handled for you?
Every gap these tools surface is work AMVIA does as a managed service — from email security records to full Cyber Essentials remediation.