Practical Security
Website, DNS & cloud security without the theatre
Free, practical checklists, baselines, and tools for hardening websites, DNS, cloud accounts, and WordPress — built for small technical teams that need to reduce real risk without an enterprise programme. Start with a checklist, run a tool, and read what's actually happening in security.
Built by Myles Agnew · 18+ years in tech · Cloudflare, AWS, Azure, GCP · Sydney, AU
Free security checklists
Practical, task-first checklists you can run against your own sites and accounts today.
Website Security Baseline →What a full website, DNS, Cloudflare and WordPress baseline checks, the evidence you receive, and what it is not.
Cloudflare + Website Baseline →Review DNS, Cloudflare, WordPress, security headers, backups, and admin exposure in one practical pass.
DNS Backup & Recovery →Make DNS records versioned, recoverable, and auditable before a bad change or account issue causes downtime.
AI Agent Prompt Security →Review AI-agent prompts, tool access, risky instructions, and CI-friendly prompt checks.
Tools & triage
Post-Quantum Tester →Check whether a site supports quantum-safe TLS key exchange against “harvest-now, decrypt-later” risk.
Redirect Tracer →See where a short, tracking or suspicious link really lands — every redirect hop, header and TLS certificate — without clicking it.
Phishing Email Analyser →Triage a suspicious email for phishing and BEC warning signs with a transparent, rule-by-rule score — analysed locally, never uploaded.
Network Traffic Triage Tool →Turn a Wireshark CSV into an explainable triage report: which hosts deserve a closer look, why, and what else it could be — analysed locally, never uploaded.
Windows Event Log Triage Tool →Correlate Windows logons, account creations and group changes into explainable findings — password guessing, new admins, cleared logs — analysed locally, never uploaded.
Passive OSINT Triage →A task-first page for passive domain, URL, exposure, archive, breach-context, and evidence-preservation workflows.
Sample Baseline Report →See what a client-ready website security baseline report actually looks like.
Security areas covered
- Cloud security baselines across AWS, Azure, and GCP
- Web & WordPress hardening — headers, backups, plugin risk
- DNS backup, recovery, and change auditing
- Incident readiness — logging, endpoint visibility, first-hour response
- Security evidence packs and client-ready reporting
- OSINT & exposure triage from public sources
Related focus areas
Stay in the loop
Practical security updates, no fluff
Get practical security checklists, workflows and new free tools for website, DNS, cloud, and automation hardening.