Free IT Tools
Free tools that give you an honest answer
We built these because the same questions came up on every first call: are we exposed, is this machine worth keeping, what is downtime actually costing us. They are free, they take a couple of minutes, and none of them require you to become a client to see the result.
All Tools
Nineteen free tools, no signup required
Security checks, readiness assessments, network testers and financial calculators. Open any of them in a new tab.
What They Do
Four families of tools, four different questions
They are not nineteen versions of the same thing. Each family answers a different question a business owner has actually asked us out loud.
We built these over the years because the opening minutes of a new client conversation kept covering identical ground. Someone would ask whether their email was secure, or whether the eight-year-old machine in accounting was worth fixing, and the honest answer required data neither of us had yet. Rather than guessing on a phone call, we made the checks self-service. Every one of them is free, and none of them hold the result hostage behind a signup form.
Exposure and security checks
This is the largest group, and the most eye-opening for most people. The dark web scan and breach check tell you whether credentials tied to your domain are already circulating from someone else's breach, which is how the majority of account takeovers begin. The email security check examines your SPF, DKIM and DMARC records, the three DNS entries that determine whether a stranger can send mail that appears to come from your company. Most small business domains fail at least one of them.
The email header analyzer takes the raw headers from a suspicious message and shows you the real sending path, which settles the is-this-real argument in about ten seconds. Scam check does the same job for the message body and the request itself. Lookalike domain finder surfaces registered domains designed to be mistaken for yours, a swapped letter, an added hyphen, which are the raw material for invoice fraud. And phishing test lets you see how your own team responds to a simulated lure before a real one arrives.
Readiness and compliance assessments
These are structured self-assessments rather than scans. IT risk score gives you a single posture number across backup, patching, identity and access. Ransomware readiness asks the only question that matters in an incident: could you restore and keep trading without paying anyone? Cyber insurance check mirrors the control questions carriers now put on renewal applications, which have become far stricter than most business owners expect. HIPAA readiness walks the technical safeguards specifically, and is the one our medical and dental clients use most.
Network, hardware and financial tools
The practical group. Speed test shows what your circuit actually delivers, which is frequently not what the bill says. Uptime checker confirms whether a site or service is genuinely down or just down for you. Windows 11 readiness checks TPM, Secure Boot and CPU generation so you know which machines can move and which need replacing, a live question now that Windows 10 support has ended. Fix or replace weighs a repair against the cost of new hardware. Downtime cost calculator converts an outage into dollars per hour, which is usually the number that ends an internal debate about backup spending. And IT cost calculator compares in-house support against managed coverage honestly, including the costs people forget.
Two more are simply useful day to day. Our secure password generator page explains the strategy behind strong credentials and links to the live generator, and signature generator builds clean, consistent email signatures for a whole team without anyone having to fight with HTML.
Run whichever applies and act on the result. If a tool tells you something worrying and you are not sure what to do about it, send us the output. We will tell you what it means in plain English, and what we would fix first if it were our business. That conversation is free, and it comes with no obligation, details on how we quote are on our estimates page.
A number beats an opinion. Run the check before you argue about the budget.Orca IT, Gilbert AZ
Start Here
If you only run three of them
For a typical small business with fewer than fifty staff, these three tell you the most in the least time.
Email security check
SPF, DKIM and DMARC are the difference between a spoofed invoice reaching your customers and being rejected at the door. It takes under a minute and it is the most common gap we find.
Dark web and breach check
If a staff password from an old breach still works on your Microsoft 365 tenant, everything else you spent money on is irrelevant. Check, then force resets and MFA.
Ransomware readiness
Not whether you have backups, whether you have tested restores, offline copies and a recovery order. That distinction is what determines your worst week.
Then: Windows 11 readiness
With Windows 10 support ended, unsupported machines stop receiving security patches. This tells you the size of the problem before it becomes urgent.
Then: downtime cost
Putting a dollar figure on an hour of outage is the fastest way to make sensible decisions about redundancy and backup investment.
Then: IT risk score
A broader posture check that pulls the individual findings into one picture, useful for showing leadership where the gaps actually are.
About these tools
Are these actually free?
Yes. No credit card, no trial period, no signup wall in front of the result. We built them as a genuinely useful front door to our business, and plenty of people run them and never contact us. That is fine.
Do you keep the data I enter?
The tools are designed to give you an answer, not to build a marketing list. Where a tool asks for a domain or an email to check, that input is used to produce your result. We do not sell or share what you enter with anyone.
How accurate is the dark web and breach check?
It checks against known, publicly documented breach datasets. It is genuinely useful for the credentials that have surfaced, but no tool can see everything. Treat a clean result as good news rather than proof, and enable MFA regardless of the outcome.
Is the phishing test safe to run on my staff?
Yes. It is a controlled simulation, and the purpose is to find out where training is needed rather than to catch anyone out. We recommend telling your team afterward, not before, and framing the result as a gap in the process rather than a personal failure.
The Windows 11 tool says my machine is not eligible. Now what?
It usually comes down to TPM 2.0, Secure Boot or the CPU generation. Some machines just need those enabled in firmware. Genuinely older hardware needs replacing, and our fix or replace calculator will help you decide whether that machine is worth any further spend.
My speed test result is far below what I pay for. Is that your tool?
Possibly, but usually not. The common culprits are wireless interference, an aging router, a saturated uplink or an oversubscribed circuit. Test wired first, then wireless, then call your provider with both numbers. We can also look at it directly if you would like.
Can you help me act on a bad result?
Yes, and there is no charge to discuss it. Send the output through the contact form, or call (602) 677-0779. We will tell you what matters, what does not, and what we would fix first. Whether you hire us after that is entirely up to you.
Do the tools work outside Arizona?
Completely. They are not location-specific, and we support businesses remotely in all 50 states. Onsite work is limited to the Phoenix metro and East Valley, but everything on this page is open to anyone.
Run the check, then call us
We will read the result with you and tell you honestly whether it needs action. (602) 677-0779.
Talk to Your Pod
Got a result you do not like?
Send us the output and we will tell you what it actually means for your business and what we would fix first. No obligation attached to asking.
(602) 677-0779Family owned in Gilbert, AZ since 2015 · onsite across the Phoenix metro · remote support nationwide · never outsourced
Get your free IT consultation
A few details and your pod gets right back to you, usually the same business day.