# Cactus Security

> Cactus Security (https://cactus.net) is a free, bilingual (English/French) suite of privacy-first online-safety tools and plain-language guides for Canadians. Check suspicious links, texts, emails, QR codes, websites, domains, IPs, file hashes and passwords; learn to spot scams; and see what's circulating in Canada right now. No account, no payment, and checks don't store what you submit.

## Tools: something suspicious
- [Is this link safe?](https://cactus.net/CheckUrl): link / URL safety checker. Phishing, look-alike domains, threat intel, domain age.
- [Is this text a scam?](https://cactus.net/CheckMessage): scam text (SMS/smishing) checker - paste a message to spot scam signs.
- [Is this email really from them?](https://cactus.net/CheckEmail): phishing email checker - analyzes a suspicious email and its links.
- [Where does this QR code go?](https://cactus.net/CheckQr): QR code checker - reads the link hidden in a QR image.
- [Are they rushing you to pay?](https://cactus.net/PaymentCheck): payment safety check - gift card, e-transfer, crypto, wire; which payments can be reversed.
- [Is this file known malware?](https://cactus.net/CheckHash): file hash / malware reputation check (MD5, SHA-1, SHA-256). No file upload.
- [Got a whole list of links?](https://cactus.net/CheckBatch): batch link checker - up to 20 URLs at once.

## Tools: a website you don't trust
- [Is this site's padlock real?](https://cactus.net/CheckTls): SSL/TLS certificate and HTTPS checker, graded A+ to F.
- [How old is this website?](https://cactus.net/CheckWhois): WHOIS / RDAP domain lookup - registration date, owner, registrar, domain age.
- [Is this a copy of a real brand?](https://cactus.net/CheckTyposquat): typosquat / look-alike domain finder.

## Tools: your accounts and privacy
- [Has my password leaked?](https://cactus.net/CheckPassword): password breach check (k-anonymity; checked privately in your browser).
- [Was my email in a leak?](https://cactus.net/CheckEmailBreach): email data-breach lookup.
- [Need a stronger password?](https://cactus.net/GeneratePassword): strong password and passphrase generator.
- [Does my photo show where I live?](https://cactus.net/StripExif): photo metadata (EXIF/GPS) remover - runs on your device.
- [What is my IP?](https://cactus.net/WhatIsMyIp): shows the visitor's own public IP, its network/ISP and country, and what it reveals.

## Tools: your own site or domain
- [Can someone send email as you?](https://cactus.net/CheckEmailAuth): SPF, DKIM and DMARC checker - can a domain's email be spoofed?
- [Stop others sending as you](https://cactus.net/BuildEmailAuth): SPF and DMARC record builder - the DNS records that stop spoofing.
- [Does your site protect visitors?](https://cactus.net/CheckHeaders): HTTP security headers grader (HSTS, CSP and the rest).
- [Which subdomains are exposed?](https://cactus.net/CheckCerts): Certificate Transparency search - subdomains and every certificate issued.
- [Why won't my certificate issue?](https://cactus.net/CheckAcme): Let's Encrypt / ACME issuance debugger - DNS, CAA, port 80, IPv6, rate limits.
- [Where does this domain point?](https://cactus.net/CheckDns): DNS lookup - A, AAAA, MX, NS, TXT, CAA, SOA records.
- [Is this IP address a problem?](https://cactus.net/CheckIp): IP reputation, owner/ASN and DNS blocklists.
- [What's in this IP range?](https://cactus.net/SubnetCalculator): subnet / CIDR calculator for IPv4 and IPv6 - network, broadcast, host range, mask.

## Software we recommend
- [Safe software](https://cactus.net/SafeSoftware): 61 independently chosen picks across 20 categories - password managers, 2FA apps, private browsers, ad blockers, anti-malware, app updaters, encrypted messaging and email, email aliases, encrypted notes, backup, encrypted cloud storage, disk encryption, secure file sharing, official download links for popular apps, remote-help tools, VPNs, secure DNS, private search, and privacy-focused operating systems. Free and open-source options are favoured. Not sponsored and no affiliate links. Tick the ones you want and the page generates a single winget install script for Windows; the remote-access section carries an explicit warning that no legitimate company ever phones you asking you to install it.

## Learn and stay safe
- [Guides](https://cactus.net/Learn): plain-language how-tos for spotting scams and staying safe.
- [Glossary](https://cactus.net/Glossary): security terms explained simply.
- [Scam alerts](https://cactus.net/ScamAlerts): scams circulating in Canada right now.
- [If you've been scammed](https://cactus.net/Scammed): what to do, with Canadian reporting contacts.
- [Quiz](https://cactus.net/Quiz): can you spot a scam?

## About
- [How Cactus works](https://cactus.net/Methodology)
- [Mission](https://cactus.net/Mission)
- [Privacy](https://cactus.net/Privacy)