Cyber Security Calculators
Cryptography, passwords, IAM, network and cloud security, vulnerability management, SOC operations, GRC and forensics.
415 of 415 available now
Cloud Security
All 30 Cloud Security calculators →- Cloud IAM Risk CalculatorScore cloud IAM risk from administrator ratio, wildcard policies, stale principals, ageing access keys, MFA coverage and cross-account trust.
- S3 Bucket Exposure CalculatorScore an S3 bucket's public exposure across Block Public Access, bucket policy, object ACLs, website endpoints, pre-signed URLs and encryption.
- Azure Storage Exposure CalculatorScore an Azure storage account's exposure from public network access, anonymous blob access, Shared Key auth, TLS floor and SAS token lifetime.
- GCP Bucket Exposure CalculatorScore a Cloud Storage bucket's exposure from public access prevention, allUsers IAM bindings, uniform access, signed URLs, CMEK and audit logging.
- Cloud Security Group CalculatorCheck security group rule usage against AWS quotas and score the risk from 0.0.0.0/0 sources, exposed admin ports and unattached groups.
- Cloud Firewall Rule CalculatorMeasure cloud firewall policy hygiene: quota headroom, shadowed and duplicate rules, any-any exposure and effective rule count per policy.
- Cloud WAF Capacity CalculatorSize an AWS WAF web ACL against the 1500 WCU budget and price web ACLs, rules and inspected requests per month.
- Cloud Key Management CalculatorPrice a KMS estate at $1 per key per month plus request charges, and show what envelope-encryption data key caching saves.
- Secrets Rotation CalculatorWork out rotation window risk as exposure days over rotation period, plus manual rotation effort, storage cost and a recommended period.
- Secrets Exposure CalculatorQuantify hardcoded secret exposure across repositories: scan coverage, finding precision, unrotated live secrets and total exposure days.
- Cloud Compliance CalculatorTurn CIS benchmark control results into a severity-weighted 0-100 compliance score and show how many critical controls close the gap to target.
- Cloud Misconfiguration CalculatorConvert CSPM findings into a 0-100 posture score by weighting critical, high, medium and low findings and normalising per 100 cloud resources.
Compliance & GRC
All 30 Compliance & GRC calculators →- ISO 27001 Compliance CalculatorScore ISMS readiness against the 93 Annex A controls in their four themes plus clauses 4–10, and size the remaining certification gap.
- NIST CSF Maturity CalculatorScore the six NIST CSF 2.0 functions on the 1–4 implementation tier scale, find the weakest function and the gap to your target tier.
- PCI DSS Compliance CalculatorTrack PCI DSS v4.0 readiness across the 12 requirements and roughly 277 sub-requirements, with compensating controls and ASV scans counted.
- HIPAA Compliance CalculatorScore HIPAA Security Rule posture across the administrative, physical and technical safeguards plus required and addressable specifications.
- GDPR Compliance CalculatorScore GDPR accountability across records of processing, lawful basis, DSAR and 72-hour breach timelines, with Article 83 fine ceilings.
- SOC 2 Readiness CalculatorAssess SOC 2 readiness across the CC1–CC9 common criteria, your control matrix, the observation window and known exceptions.
- CIS Controls Coverage CalculatorMeasure CIS Controls v8 coverage across the 153 safeguards and 18 controls, scored against your IG1, IG2 or IG3 target.
- Risk Register CalculatorRoll a risk register up into one health score: severity mix, treatment backlog, accepted risks and how much sits above appetite.
- Business Impact Analysis CalculatorCost an outage for a BIA: lost margin, idle staff, penalties, recovery and reputational uplift, tested against the MTPD and the proposed RTO.
- Risk Appetite CalculatorTurn a risk appetite statement into numbers: appetite and tolerance thresholds, current utilisation, headroom and worst-case survivability.
- Residual Risk CalculatorWork out residual risk from inherent risk and layered control effectiveness, on both the 25-point scale and in annualised loss expectancy.
- Inherent Risk CalculatorScore inherent risk before any control credit from threat, exposure and vulnerability against asset value, data sensitivity and regulatory reach.
Cryptography
All 30 Cryptography calculators →- AES Key Strength CalculatorCompare AES-128, AES-192 and AES-256 by round count, effective security bits and brute-force time, with a Grover option.
- RSA Key Size CalculatorMap an RSA modulus size to its NIST SP 800-57 equivalent security strength, ECC equivalent and signature size.
- ECC Security Level CalculatorConvert an elliptic-curve field size into security bits, the RSA modulus that matches it, and key and signature sizes.
- SHA Hash Length CalculatorGet digest length, hex and Base64 output size, block size and collision resistance for any SHA-1, SHA-2 or SHA-3 variant.
- HMAC Output CalculatorSize an HMAC tag, check how your key is padded or hashed, and count the compression calls a verification costs.
- PBKDF2 Iteration CalculatorPick a PBKDF2 iteration count from a target login delay, then check it against the OWASP floor and an attacker's GPU rig.
- bcrypt Cost CalculatorTurn a bcrypt cost factor into hash time, server throughput and offline crack time, benchmarked against OWASP guidance.
- Argon2 Memory CalculatorSize the Argon2 memory parameter in KiB blocks, validate it against the lane minimum and project peak server RAM.
- Argon2 Time Cost CalculatorEstimate Argon2 hashing time from memory, passes and memory bandwidth, and get the pass count that hits your target.
- Argon2 Parallelism CalculatorChoose the Argon2 lane count for your CPU, and check the minimum memory and per-lane allocation it forces.
- Encryption Overhead CalculatorBreak down the extra bytes an AEAD or CBC mode adds — nonce, padding and auth tag — and the cost across your message volume.
- Cipher Block Size CalculatorWork out block count, padded length and the birthday-bound data limit per key for AES, 3DES and stream ciphers.
Forensics & Emerging Threats
All 45 Forensics & Emerging Threats calculators →- Disk Imaging Time CalculatorEstimate forensic disk acquisition time from capacity, sustained read rate, write-blocker overhead, compression and hash verification.
- Hash Verification CalculatorWork out how long hashing an evidence set takes from algorithm throughput, core count, storage read rate and per-file overhead.
- Memory Dump Size CalculatorSize a RAM capture including page and swap files, compression and the working space a volatile-memory analysis actually needs.
- Forensic Evidence Storage CalculatorSize a forensic evidence store across images, working copies, derived artefacts, offsite retention and monthly cost.
- Evidence Transfer Time CalculatorCompare shipping evidence over the network against physical courier, including protocol efficiency and hash re-verification.
- Timeline Analysis CalculatorEstimate super-timeline effort from source count, event volume, deduplication, noise filtering and analyst review rate.
- Malware Spread CalculatorModel worm or malware propagation with an SIR epidemic model: R0, doubling time, projected infections and containment threshold.
- Ransomware Impact CalculatorTotal the cost of a ransomware event: downtime, lost work in the RPO window, response, notification and insurance retention.
- Backup Recovery CalculatorCheck whether a restore meets its RTO: backup chain length, restore throughput, parallel streams, verification and infrastructure rebuild.
- Recovery Time CalculatorBuild an end-to-end RTO from detection, decision, mobilisation, restore throughput, validation and cutover for a tiered estate.
- Sandbox Resource CalculatorSize a malware analysis sandbox farm: concurrent VMs, CPU, RAM, storage and daily sample throughput per node.
- Behavior Analysis Coverage CalculatorScore behavioural detection coverage across process, file, registry, network and memory telemetry with evasion-resistance weighting.
Identity & Access Management
All 25 Identity & Access Management calculators →- IAM Policy Size CalculatorSize an IAM policy document against its character limit and see how many statements still fit before you must split it.
- RBAC Role Count CalculatorCompare direct user-to-permission grants against role-based assignment to size your role model and spot role explosion.
- Least Privilege CalculatorScore how close an identity is to least privilege by comparing permissions granted against permissions actually used.
- Permission Coverage CalculatorCheck whether assigned roles cover every permission a job actually needs, and how much extra access comes along for the ride.
- Privilege Escalation Risk CalculatorScore privilege-escalation exposure from PassRole wildcards, policy-write holders and role-chaining depth.
- AWS IAM Policy CalculatorMeasure a role against the default AWS IAM quotas: policy characters, 10 managed attachments, and account role and policy limits.
- Azure RBAC CalculatorTrack Azure role assignments against the 4000-per-subscription limit and custom roles against 500 per tenant.
- GCP IAM CalculatorSize a Google Cloud allow policy against the 1500-principal cap, the 250-group sub-limit and 300 custom roles per project.
- LDAP Capacity CalculatorSize an LDAP directory: database and index footprint, entry cache required, and search throughput against demand.
- Active Directory Replication Load CalculatorEstimate Active Directory replication traffic, per-cycle payload and convergence time for a given DC topology.
- Kerberos Ticket Lifetime CalculatorWork out TGT renewals per session, the 7-day renewal ceiling and KDC request load from your Kerberos policy.
- OAuth Token Lifetime CalculatorBalance OAuth access and refresh token lifetimes against token endpoint load and the revocation delay they create.
Network Security
All 30 Network Security calculators →- Firewall Rule Count CalculatorPredict how many firewall rules a zone-based policy needs, and how fast the rule base grows with each new security zone.
- Firewall Capacity CalculatorDerate a firewall's datasheet throughput by inspection profile and size its session table memory against your peak load.
- NAT Session CalculatorWork out NAT and CGNAT port utilisation, the public IP pool size you need, and how close you are to port exhaustion.
- ACL Rule CalculatorCount the access control entries a router or switch ACL will expand to and check it against the platform's TCAM budget.
- IPS Throughput CalculatorBlend plaintext and TLS-inspected traffic to find the real throughput an IPS delivers, in both bits and packets per second.
- IDS Capacity CalculatorSize passive IDS sensors from mirrored traffic: packet rate, sensors required and full-packet-capture storage.
- DDoS Capacity CalculatorCompare scrubbing capacity against a modelled attack volume to see whether your DDoS headroom ratio actually holds.
- DDoS Mitigation CalculatorAdd up detection, diversion and ramp time to find your true time to mitigate, and the traffic lost before it engages.
- VPN Capacity CalculatorSize a VPN concentrator against aggregate encrypted bandwidth, tunnel count limits and the gateway count you need.
- IPSec Overhead CalculatorBreak down ESP tunnel overhead byte by byte, find the encapsulated packet size and the largest inner MTU that fits.
- SSL VPN Capacity CalculatorSize an SSL VPN gateway for reconnect storms, TLS throughput and session memory, and see which limit binds first.
- Zero Trust Readiness CalculatorScore your zero trust maturity across identity, device, network, application, data, visibility and automation pillars.
Password Security
All 57 Password Security calculators →- Password Entropy Score CalculatorScore password entropy in bits from its length and character set, with the full keyspace and a strength band.
- Password Strength Score CalculatorTurn length, character classes, breach status and dictionary content into a single 0–100 password strength score.
- Password Crack Time CalculatorEstimate how long an offline attack needs to crack a password, using real GPU hash rates for MD5, bcrypt and Argon2id.
- Brute Force Attack Time CalculatorWork out worst-case and average brute-force time for any keyspace at an attack rate you set yourself.
- Dictionary Attack Probability CalculatorEstimate the chance a dictionary and rule-mangling attack finds a password, and how long exhausting the wordlist takes.
- Password Complexity CalculatorTurn a composition policy into the character set, combination count and entropy it actually produces.
- Passphrase Strength CalculatorScore a diceware passphrase in bits, using the EFF 7776-word list at 12.925 bits per word, and see its crack time.
- Minimum Password Length CalculatorFind the shortest password that reaches a target entropy in bits, or that survives a target number of years of attack.
- Password Reuse Risk CalculatorQuantify the blast radius of password reuse: accounts per password, reuse rate and the odds one of them is breached this year.
- Password Rotation CalculatorPrice a forced password rotation policy: resets per year, helpdesk hours, annual cost and the average exposure window.
- Password Expiry CalculatorTrack how many days remain before a password expires, when the warning window opens, and whether a change is allowed yet.
- MFA Security CalculatorModel how much account takeover multi-factor authentication actually prevents, given the method and your enrolment rate.
SIEM & SOC
All 30 SIEM & SOC calculators →- SIEM EPS CalculatorConvert events per day into average, peak and licensable EPS, with headroom and a twelve-month growth projection.
- SIEM Log Ingestion CalculatorTurn an EPS figure and a source mix into GB per day, wire bandwidth and annual raw volume using real average event sizes.
- SIEM Log Retention CalculatorWork out how many days of logs a given storage budget actually buys, and whether it clears your compliance retention floor.
- SIEM Storage Requirement CalculatorSize hot, warm and cold SIEM tiers from EPS, event size and retention, then price the whole estate per month.
- Detection Rule Coverage CalculatorScore how much of your detection content is actually enabled, fed with telemetry, tuned and tested — not just written.
- MITRE ATT&CK Coverage CalculatorMeasure ATT&CK Enterprise coverage across tactics, techniques and sub-techniques, weighted by detection confidence.
- Alert Volume CalculatorProject daily SOC alert volume from event rate and rule fire rate, after deduplication, suppression and correlation.
- Alert Fatigue CalculatorQuantify analyst alert fatigue from queue depth, false-positive rate and shift utilisation, and estimate alerts left untouched.
- Alert False Positive Rate CalculatorCompute false-positive rate, false discovery rate and precision from triage outcomes, then price the wasted analyst time.
- True Positive Rate CalculatorDerive recall, precision, F1, specificity and balanced accuracy from a detection confusion matrix.
- MTTD CalculatorBreak mean time to detect into dwell, telemetry lag, rule interval, queue delay and analyst confirmation, and find the bottleneck.
- Security MTTR CalculatorCompute security mean time to respond across detect, triage, contain, eradicate and recover phases, with automation savings.
Security, Cryptography & Risk
All 83 Security, Cryptography & Risk calculators →- Brute Force Attempts CalculatorWork out brute force attempts instantly with clear inputs, formula shown and shareable results.
- Keyspace Size CalculatorWork out keyspace size instantly with clear inputs, formula shown and shareable results.
- Birthday Attack Probability CalculatorWork out birthday attack probability instantly with clear inputs, formula shown and shareable results.
- Rainbow Table Size CalculatorWork out rainbow table size instantly with clear inputs, formula shown and shareable results.
- Salt Length Requirement CalculatorWork out salt length requirement instantly with clear inputs, formula shown and shareable results.
- PBKDF2 Iteration Count CalculatorWork out pbkdf2 iteration count instantly with clear inputs, formula shown and shareable results.
- Bcrypt Cost Factor CalculatorWork out bcrypt cost factor instantly with clear inputs, formula shown and shareable results.
- Argon2 Parameters CalculatorWork out argon2 parameters instantly with clear inputs, formula shown and shareable results.
- Key Length Equivalence CalculatorWork out key length equivalence instantly with clear inputs, formula shown and shareable results.
- RSA Key Strength CalculatorWork out rsa key strength instantly with clear inputs, formula shown and shareable results.
- ECC Key Strength CalculatorWork out ecc key strength instantly with clear inputs, formula shown and shareable results.
- Symmetric vs Asymmetric Strength CalculatorWork out symmetric vs asymmetric strength instantly with clear inputs, formula shown and shareable results.
Vulnerability Management
All 25 Vulnerability Management calculators →- CVSS v3 Score CalculatorCompute a CVSS v3.1 base score from the eight base metrics, with the impact and exploitability sub-scores, vector string and severity rating.
- CVSS v4 Score CalculatorDerive the CVSS 4.0 macro-vector from the base, threat and requirement metrics and turn it into a severity score and vector string.
- CVE Severity CalculatorAdjust a published CVSS base score for EPSS probability, KEV listing, exposure, data sensitivity and compensating controls.
- Patch Priority CalculatorRank a vulnerability for patching from EPSS probability, KEV listing, exploit maturity, asset criticality and exposure.
- Patch Window CalculatorSize a maintenance window: waves, patch and reboot time, validation, expected rollbacks and whether the work fits the outage you were given.
- Exploit Probability CalculatorConvert an EPSS 30-day score into the probability of exploitation over any horizon, adjusted for KEV listing and public exploit code.
- Risk Matrix CalculatorScore a 5×5 likelihood-versus-impact risk matrix, apply control effectiveness for residual risk and test it against your risk appetite.
- Exposure Window CalculatorMeasure the days between disclosure and deployment, the asset-days at risk and the cumulative chance of exploitation in that window.
- Mean Time to Patch CalculatorWork out MTTP overall and per severity from your closed findings, and compare each figure against its remediation SLA.
- Vulnerability Density CalculatorNormalise vulnerability counts per asset and per thousand lines of code, with a severity-weighted density for fair comparison.
- Asset Criticality CalculatorScore an asset 0–100 for criticality from CIA requirements, user population, revenue dependency, regulation and exposure, then tier it.
- Asset Exposure CalculatorScore how exposed one asset is: reachability, open services, admin access, authentication strength, segmentation and its worst open finding.
Web & API Security
All 30 Web & API Security calculators →- OWASP Risk CalculatorScore a vulnerability with the full OWASP Risk Rating Methodology: eight likelihood factors, eight impact factors, one severity.
- SQL Injection Risk CalculatorRate SQL injection exposure from query construction, validation, database privileges and the data reachable behind the query.
- Cross-Site Scripting (XSS) Risk CalculatorScore reflected, stored and DOM XSS risk from output encoding, sanitiser quality, CSP strength and the privilege of the likely victim.
- CSRF Risk CalculatorRate cross-site request forgery exposure from token design, SameSite cookies, request shape and the value of the forged action.
- SSRF Risk CalculatorScore server-side request forgery risk from URL handling, redirect and DNS behaviour, egress controls and cloud metadata reachability.
- Command Injection Risk CalculatorScore OS command injection risk from how the command is invoked, the argument validation, process privileges and runtime isolation.
- Remote Code Execution Risk CalculatorPrioritise an RCE finding from exploit maturity, authentication needed, network exposure, patch status and lateral movement potential.
- File Upload Risk CalculatorWeight the ten controls that stop a malicious upload becoming a web shell and get a coverage score plus the residual risk.
- Path Traversal Risk CalculatorRate directory traversal risk from how file paths are built and canonicalised, and what the process can read or overwrite.
- Clickjacking Risk CalculatorScore UI redressing risk from framing controls, confirmation design and cookie policy, and estimate how many users a campaign would catch.
- CSP Effectiveness CalculatorScore a Content Security Policy directive by directive and see whether it would actually stop an injected script.
- CORS Policy CalculatorTest a CORS configuration for the combinations that leak data cross-origin, and score the residual risk against your data sensitivity.