Cyber Security Calculators
Cryptography, passwords, IAM, network and cloud security, vulnerability management, SOC operations, GRC and forensics.
Security arithmetic: password and key entropy, brute-force time, CVSS scoring, risk and exposure scoring and similar calculations used in assessments and audits. Each page shows its scoring method so a result can be reproduced and challenged.
Scores summarise the inputs you give; they are not a security assessment of a real system. Use them to compare options and explain risk, and rely on testing and qualified review for decisions that protect real data.
415 of 415 available now
Cloud Security
All 30 Cloud Security calculators →- Cloud IAM Risk CalculatorScore cloud IAM risk from administrator ratio, wildcard policies, stale principals, ageing access keys, MFA coverage and cross-account trust.
- S3 Bucket Exposure CalculatorScore an S3 bucket's public exposure across Block Public Access, bucket policy, object ACLs, website endpoints, pre-signed URLs and encryption.
- Azure Storage Exposure CalculatorScore an Azure storage account's exposure from public network access, anonymous blob access, Shared Key auth, TLS floor and SAS token lifetime.
- GCP Bucket Exposure CalculatorScore a Cloud Storage bucket's exposure from public access prevention, allUsers IAM bindings, uniform access, signed URLs, CMEK and audit logging.
- Cloud Security Group CalculatorCheck security group rule usage against AWS quotas and score the risk from 0.0.0.0/0 sources, exposed admin ports and unattached groups.
- Cloud Firewall Rule CalculatorMeasure cloud firewall policy hygiene: quota headroom, shadowed and duplicate rules, any-any exposure and effective rule count per policy.
- Cloud WAF Capacity CalculatorSize an AWS WAF web ACL against the 1500 WCU budget and price web ACLs, rules and inspected requests per month.
- Cloud Key Management CalculatorPrice a KMS estate at $1 per key per month plus request charges, and show what envelope-encryption data key caching saves.
- Secrets Rotation CalculatorWork out rotation window risk as exposure days over rotation period, plus manual rotation effort, storage cost and a recommended period.
- Secrets Exposure CalculatorQuantify hardcoded secret exposure across repositories: scan coverage, finding precision, unrotated live secrets and total exposure days.
- Cloud Compliance CalculatorTurn CIS benchmark control results into a severity-weighted 0-100 compliance score and show how many critical controls close the gap to target.
- Cloud Misconfiguration CalculatorConvert CSPM findings into a 0-100 posture score by weighting critical, high, medium and low findings and normalising per 100 cloud resources.
Compliance & GRC
All 30 Compliance & GRC calculators →- ISO 27001 Compliance CalculatorScore ISMS readiness against the 93 Annex A controls in their four themes plus clauses 4–10, and size the remaining certification gap.
- NIST CSF Maturity CalculatorScore the six NIST CSF 2.0 functions on the 1–4 implementation tier scale, find the weakest function and the gap to your target tier.
- PCI DSS Compliance CalculatorTrack PCI DSS v4.0 readiness across the 12 requirements and roughly 277 sub-requirements, with compensating controls and ASV scans counted.
- HIPAA Compliance CalculatorScore HIPAA Security Rule posture across the administrative, physical and technical safeguards plus required and addressable specifications.
- GDPR Compliance CalculatorScore GDPR accountability across records of processing, lawful basis, DSAR and 72-hour breach timelines, with Article 83 fine ceilings.
- SOC 2 Readiness CalculatorAssess SOC 2 readiness across the CC1–CC9 common criteria, your control matrix, the observation window and known exceptions.
- CIS Controls Coverage CalculatorMeasure CIS Controls v8 coverage across the 153 safeguards and 18 controls, scored against your IG1, IG2 or IG3 target.
- Risk Register CalculatorRoll a risk register up into one health score: severity mix, treatment backlog, accepted risks and how much sits above appetite.
- Business Impact Analysis CalculatorCost an outage for a BIA: lost margin, idle staff, penalties, recovery and reputational uplift, tested against the MTPD and the proposed RTO.
- Risk Appetite CalculatorTurn a risk appetite statement into numbers: appetite and tolerance thresholds, current utilisation, headroom and worst-case survivability.
- Residual Risk CalculatorWork out residual risk from inherent risk and layered control effectiveness, on both the 25-point scale and in annualised loss expectancy.
- Inherent Risk CalculatorScore inherent risk before any control credit from threat, exposure and vulnerability against asset value, data sensitivity and regulatory reach.
Cryptography
All 30 Cryptography calculators →- AES Key Strength CalculatorCompare AES-128, AES-192 and AES-256 by round count, effective security bits and brute-force time, with a Grover option.
- RSA Key Size CalculatorMap an RSA modulus size to its NIST SP 800-57 equivalent security strength, ECC equivalent and signature size.
- ECC Security Level CalculatorConvert an elliptic-curve field size into security bits, the RSA modulus that matches it, and key and signature sizes.
- SHA Hash Length CalculatorGet digest length, hex and Base64 output size, block size and collision resistance for any SHA-1, SHA-2 or SHA-3 variant.
- HMAC Output CalculatorSize an HMAC tag, check how your key is padded or hashed, and count the compression calls a verification costs.
- PBKDF2 Iteration CalculatorPick a PBKDF2 iteration count from a target login delay, then check it against the OWASP floor and an attacker's GPU rig.
- bcrypt Cost CalculatorTurn a bcrypt cost factor into hash time, server throughput and offline crack time, benchmarked against OWASP guidance.
- Argon2 Memory CalculatorSize the Argon2 memory parameter in KiB blocks, validate it against the lane minimum and project peak server RAM.
- Argon2 Time Cost CalculatorEstimate Argon2 hashing time from memory, passes and memory bandwidth, and get the pass count that hits your target.
- Argon2 Parallelism CalculatorChoose the Argon2 lane count for your CPU, and check the minimum memory and per-lane allocation it forces.
- Encryption Overhead CalculatorBreak down the extra bytes an AEAD or CBC mode adds — nonce, padding and auth tag — and the cost across your message volume.
- Cipher Block Size CalculatorWork out block count, padded length and the birthday-bound data limit per key for AES, 3DES and stream ciphers.
Forensics & Emerging Threats
All 45 Forensics & Emerging Threats calculators →- Disk Imaging Time CalculatorEstimate forensic disk acquisition time from capacity, sustained read rate, write-blocker overhead, compression and hash verification.
- Hash Verification CalculatorWork out how long hashing an evidence set takes from algorithm throughput, core count, storage read rate and per-file overhead.
- Memory Dump Size CalculatorSize a RAM capture including page and swap files, compression and the working space a volatile-memory analysis actually needs.
- Forensic Evidence Storage CalculatorSize a forensic evidence store across images, working copies, derived artefacts, offsite retention and monthly cost.
- Evidence Transfer Time CalculatorCompare shipping evidence over the network against physical courier, including protocol efficiency and hash re-verification.
- Timeline Analysis CalculatorEstimate super-timeline effort from source count, event volume, deduplication, noise filtering and analyst review rate.
- Malware Spread CalculatorModel worm or malware propagation with an SIR epidemic model: R0, doubling time, projected infections and containment threshold.
- Ransomware Impact CalculatorTotal the cost of a ransomware event: downtime, lost work in the RPO window, response, notification and insurance retention.
- Backup Recovery CalculatorCheck whether a restore meets its RTO: backup chain length, restore throughput, parallel streams, verification and infrastructure rebuild.
- Recovery Time CalculatorBuild an end-to-end RTO from detection, decision, mobilisation, restore throughput, validation and cutover for a tiered estate.
- Sandbox Resource CalculatorSize a malware analysis sandbox farm: concurrent VMs, CPU, RAM, storage and daily sample throughput per node.
- Behavior Analysis Coverage CalculatorScore behavioural detection coverage across process, file, registry, network and memory telemetry with evasion-resistance weighting.
Identity & Access Management
All 25 Identity & Access Management calculators →- IAM Policy Size CalculatorSize an IAM policy document against its character limit and see how many statements still fit before you must split it.
- RBAC Role Count CalculatorCompare direct user-to-permission grants against role-based assignment to size your role model and spot role explosion.
- Least Privilege CalculatorScore how close an identity is to least privilege by comparing permissions granted against permissions actually used.
- Permission Coverage CalculatorCheck whether assigned roles cover every permission a job actually needs, and how much extra access comes along for the ride.
- Privilege Escalation Risk CalculatorScore privilege-escalation exposure from PassRole wildcards, policy-write holders and role-chaining depth.
- AWS IAM Policy CalculatorMeasure a role against the default AWS IAM quotas: policy characters, 10 managed attachments, and account role and policy limits.
- Azure RBAC CalculatorTrack Azure role assignments against the 4000-per-subscription limit and custom roles against 500 per tenant.
- GCP IAM CalculatorSize a Google Cloud allow policy against the 1500-principal cap, the 250-group sub-limit and 300 custom roles per project.
- LDAP Capacity CalculatorSize an LDAP directory: database and index footprint, entry cache required, and search throughput against demand.
- Active Directory Replication Load CalculatorEstimate Active Directory replication traffic, per-cycle payload and convergence time for a given DC topology.
- Kerberos Ticket Lifetime CalculatorWork out TGT renewals per session, the 7-day renewal ceiling and KDC request load from your Kerberos policy.
- OAuth Token Lifetime CalculatorBalance OAuth access and refresh token lifetimes against token endpoint load and the revocation delay they create.
Network Security
All 30 Network Security calculators →- Firewall Rule Count CalculatorPredict how many firewall rules a zone-based policy needs, and how fast the rule base grows with each new security zone.
- Firewall Capacity CalculatorDerate a firewall's datasheet throughput by inspection profile and size its session table memory against your peak load.
- NAT Session CalculatorWork out NAT and CGNAT port utilisation, the public IP pool size you need, and how close you are to port exhaustion.
- ACL Rule CalculatorCount the access control entries a router or switch ACL will expand to and check it against the platform's TCAM budget.
- IPS Throughput CalculatorBlend plaintext and TLS-inspected traffic to find the real throughput an IPS delivers, in both bits and packets per second.
- IDS Capacity CalculatorSize passive IDS sensors from mirrored traffic: packet rate, sensors required and full-packet-capture storage.
- DDoS Capacity CalculatorCompare scrubbing capacity against a modelled attack volume to see whether your DDoS headroom ratio actually holds.
- DDoS Mitigation CalculatorAdd up detection, diversion and ramp time to find your true time to mitigate, and the traffic lost before it engages.
- VPN Capacity CalculatorSize a VPN concentrator against aggregate encrypted bandwidth, tunnel count limits and the gateway count you need.
- IPSec Overhead CalculatorBreak down ESP tunnel overhead byte by byte, find the encapsulated packet size and the largest inner MTU that fits.
- SSL VPN Capacity CalculatorSize an SSL VPN gateway for reconnect storms, TLS throughput and session memory, and see which limit binds first.
- Zero Trust Readiness CalculatorScore your zero trust maturity across identity, device, network, application, data, visibility and automation pillars.
Password Security
All 57 Password Security calculators →- Password Entropy Score CalculatorScore password entropy in bits from its length and character set, with the full keyspace and a strength band.
- Password Strength Score CalculatorTurn length, character classes, breach status and dictionary content into a single 0–100 password strength score.
- Password Crack Time CalculatorEstimate how long an offline attack needs to crack a password, using real GPU hash rates for MD5, bcrypt and Argon2id.
- Brute Force Attack Time CalculatorWork out worst-case and average brute-force time for any keyspace at an attack rate you set yourself.
- Dictionary Attack Probability CalculatorEstimate the chance a dictionary and rule-mangling attack finds a password, and how long exhausting the wordlist takes.
- Password Complexity CalculatorTurn a composition policy into the character set, combination count and entropy it actually produces.
- Passphrase Strength CalculatorScore a diceware passphrase in bits, using the EFF 7776-word list at 12.925 bits per word, and see its crack time.
- Minimum Password Length CalculatorFind the shortest password that reaches a target entropy in bits, or that survives a target number of years of attack.
- Password Reuse Risk CalculatorQuantify the blast radius of password reuse: accounts per password, reuse rate and the odds one of them is breached this year.
- Password Rotation CalculatorPrice a forced password rotation policy: resets per year, helpdesk hours, annual cost and the average exposure window.
- Password Expiry CalculatorTrack how many days remain before a password expires, when the warning window opens, and whether a change is allowed yet.
- MFA Security CalculatorModel how much account takeover multi-factor authentication actually prevents, given the method and your enrolment rate.
SIEM & SOC
All 30 SIEM & SOC calculators →- SIEM EPS CalculatorConvert events per day into average, peak and licensable EPS, with headroom and a twelve-month growth projection.
- SIEM Log Ingestion CalculatorTurn an EPS figure and a source mix into GB per day, wire bandwidth and annual raw volume using real average event sizes.
- SIEM Log Retention CalculatorWork out how many days of logs a given storage budget actually buys, and whether it clears your compliance retention floor.
- SIEM Storage Requirement CalculatorSize hot, warm and cold SIEM tiers from EPS, event size and retention, then price the whole estate per month.
- Detection Rule Coverage CalculatorScore how much of your detection content is actually enabled, fed with telemetry, tuned and tested — not just written.
- MITRE ATT&CK Coverage CalculatorMeasure ATT&CK Enterprise coverage across tactics, techniques and sub-techniques, weighted by detection confidence.
- Alert Volume CalculatorProject daily SOC alert volume from event rate and rule fire rate, after deduplication, suppression and correlation.
- Alert Fatigue CalculatorQuantify analyst alert fatigue from queue depth, false-positive rate and shift utilisation, and estimate alerts left untouched.
- Alert False Positive Rate CalculatorCompute false-positive rate, false discovery rate and precision from triage outcomes, then price the wasted analyst time.
- True Positive Rate CalculatorDerive recall, precision, F1, specificity and balanced accuracy from a detection confusion matrix.
- MTTD CalculatorBreak mean time to detect into dwell, telemetry lag, rule interval, queue delay and analyst confirmation, and find the bottleneck.
- Security MTTR CalculatorCompute security mean time to respond across detect, triage, contain, eradicate and recover phases, with automation savings.
Security, Cryptography & Risk
All 83 Security, Cryptography & Risk calculators →- Brute Force Attempts CalculatorWork out brute force attempts instantly with clear inputs, formula shown and shareable results.
- Keyspace Size CalculatorWork out keyspace size instantly with clear inputs, formula shown and shareable results.
- Birthday Attack Probability CalculatorWork out birthday attack probability instantly with clear inputs, formula shown and shareable results.
- Rainbow Table Size CalculatorWork out rainbow table size instantly with clear inputs, formula shown and shareable results.
- Salt Length Requirement CalculatorWork out salt length requirement instantly with clear inputs, formula shown and shareable results.
- PBKDF2 Iteration Count CalculatorWork out pbkdf2 iteration count instantly with clear inputs, formula shown and shareable results.
- Bcrypt Cost Factor CalculatorWork out bcrypt cost factor instantly with clear inputs, formula shown and shareable results.
- Argon2 Parameters CalculatorWork out argon2 parameters instantly with clear inputs, formula shown and shareable results.
- Key Length Equivalence CalculatorWork out key length equivalence instantly with clear inputs, formula shown and shareable results.
- RSA Key Strength CalculatorWork out rsa key strength instantly with clear inputs, formula shown and shareable results.
- ECC Key Strength CalculatorWork out ecc key strength instantly with clear inputs, formula shown and shareable results.
- Symmetric vs Asymmetric Strength CalculatorWork out symmetric vs asymmetric strength instantly with clear inputs, formula shown and shareable results.
Vulnerability Management
All 25 Vulnerability Management calculators →- CVSS v3 Score CalculatorCompute a CVSS v3.1 base score from the eight base metrics, with the impact and exploitability sub-scores, vector string and severity rating.
- CVSS v4 Score CalculatorDerive the CVSS 4.0 macro-vector from the base, threat and requirement metrics and turn it into a severity score and vector string.
- CVE Severity CalculatorAdjust a published CVSS base score for EPSS probability, KEV listing, exposure, data sensitivity and compensating controls.
- Patch Priority CalculatorRank a vulnerability for patching from EPSS probability, KEV listing, exploit maturity, asset criticality and exposure.
- Patch Window CalculatorSize a maintenance window: waves, patch and reboot time, validation, expected rollbacks and whether the work fits the outage you were given.
- Exploit Probability CalculatorConvert an EPSS 30-day score into the probability of exploitation over any horizon, adjusted for KEV listing and public exploit code.
- Risk Matrix CalculatorScore a 5×5 likelihood-versus-impact risk matrix, apply control effectiveness for residual risk and test it against your risk appetite.
- Exposure Window CalculatorMeasure the days between disclosure and deployment, the asset-days at risk and the cumulative chance of exploitation in that window.
- Mean Time to Patch CalculatorWork out MTTP overall and per severity from your closed findings, and compare each figure against its remediation SLA.
- Vulnerability Density CalculatorNormalise vulnerability counts per asset and per thousand lines of code, with a severity-weighted density for fair comparison.
- Asset Criticality CalculatorScore an asset 0–100 for criticality from CIA requirements, user population, revenue dependency, regulation and exposure, then tier it.
- Asset Exposure CalculatorScore how exposed one asset is: reachability, open services, admin access, authentication strength, segmentation and its worst open finding.
Web & API Security
All 30 Web & API Security calculators →- OWASP Risk CalculatorScore a vulnerability with the full OWASP Risk Rating Methodology: eight likelihood factors, eight impact factors, one severity.
- SQL Injection Risk CalculatorRate SQL injection exposure from query construction, validation, database privileges and the data reachable behind the query.
- Cross-Site Scripting (XSS) Risk CalculatorScore reflected, stored and DOM XSS risk from output encoding, sanitiser quality, CSP strength and the privilege of the likely victim.
- CSRF Risk CalculatorRate cross-site request forgery exposure from token design, SameSite cookies, request shape and the value of the forged action.
- SSRF Risk CalculatorScore server-side request forgery risk from URL handling, redirect and DNS behaviour, egress controls and cloud metadata reachability.
- Command Injection Risk CalculatorScore OS command injection risk from how the command is invoked, the argument validation, process privileges and runtime isolation.
- Remote Code Execution Risk CalculatorPrioritise an RCE finding from exploit maturity, authentication needed, network exposure, patch status and lateral movement potential.
- File Upload Risk CalculatorWeight the ten controls that stop a malicious upload becoming a web shell and get a coverage score plus the residual risk.
- Path Traversal Risk CalculatorRate directory traversal risk from how file paths are built and canonicalised, and what the process can read or overwrite.
- Clickjacking Risk CalculatorScore UI redressing risk from framing controls, confirmation design and cookie policy, and estimate how many users a campaign would catch.
- CSP Effectiveness CalculatorScore a Content Security Policy directive by directive and see whether it would actually stop an injected script.
- CORS Policy CalculatorTest a CORS configuration for the combinations that leak data cross-origin, and score the residual risk against your data sensitivity.