Security Guides & Free Tools

Practical security research from masoSec. Guides written by builders, for builders.

Free Tools — no account needed

Free Tool Live
DMARC & Email Security Checker
Check SPF, DKIM, DMARC records for any domain. See exactly what an attacker sees when they try to spoof your email.
Interactive · Instant results
Free Tool Live
SSL/TLS & Website Security Checker
Check your SSL certificate validity, TLS version, security headers, and HTTPS configuration.
Interactive · Instant results
Free Tool Live
Security Headers Checker
Check HSTS, Content-Security-Policy, X-Frame-Options, Referrer-Policy, and Permissions-Policy for any website.
Interactive · Instant results

Guides & Research

Security Research
How Port Scanning Works: A Practical Guide
SYN scans, UDP scanning, OS detection, service fingerprinting — exactly what an attacker sees when they scan your network, and how to defend against it.
May 2026 · 8 min read
Email Security
SPF and DMARC Explained: Why Your Email Domain is Vulnerable
How email spoofing works, what SPF and DMARC actually do, and a step-by-step rollout guide with real DNS record examples.
May 2026 · 7 min read
Website Security
What Does a Website Security Scan Actually Check?
A clear breakdown of SSL/TLS checks, security headers (HSTS, CSP, X-Frame-Options), HTTPS enforcement, and information disclosure — with nginx/Apache config examples.
May 2026 · 6 min read