Password safety checker
Check length, common patterns and whether the password appears in known breach data without sending it to Brightlogic.
Security tools
Browser-based security checks.
Use these short checks to spot common security issues before they become a problem. Brightlogic does not receive, store or log what you enter.
Some checks contact a public third-party service directly from your browser only when you choose to run them. Each tool tells you exactly when that happens.
Choose a toolChoose a security check
Start with the question you need to answer.
These are practical advisory checks, not a replacement for a full security review. Do not paste a live password, secret or unredacted production configuration into any website.
Email-domain protection
Review public SPF, DKIM and DMARC DNS records, then see clear next steps for your business domain.
Account name risk
Check a proposed administrator or shared-account name against a local list of common and default names.
Public security headers
Review a website you own or are authorised to test for visible HTTPS and browser security headers.
Exposed-secret self-check
Scan a sanitised configuration snippet or local file for secret-like names and risky PHP functions.
How the checks handle information
No form submission.
Passwords, account names and pasted snippets are evaluated in your browser and discarded when the tool closes or the page is refreshed. They are never sent to us.
Domain and header checks use public information. They make user-triggered requests from your browser to public DNS or header services, so those services can see the domain you ask about. Never use them for a system you do not own or lack permission to assess.