Cyber Security Calculators
Cryptography, passwords, IAM, network and cloud security, vulnerability management, SOC operations, GRC and forensics.
300 of 300 available now
Cryptography
AES Key Strength CalculatorCompare AES-128, AES-192 and AES-256 by round count, effective security bits and brute-force time, with a Grover option.RSA Key Size CalculatorMap an RSA modulus size to its NIST SP 800-57 equivalent security strength, ECC equivalent and signature size.ECC Security Level CalculatorConvert an elliptic-curve field size into security bits, the RSA modulus that matches it, and key and signature sizes.SHA Hash Length CalculatorGet digest length, hex and Base64 output size, block size and collision resistance for any SHA-1, SHA-2 or SHA-3 variant.HMAC Output CalculatorSize an HMAC tag, check how your key is padded or hashed, and count the compression calls a verification costs.PBKDF2 Iteration CalculatorPick a PBKDF2 iteration count from a target login delay, then check it against the OWASP floor and an attacker's GPU rig.bcrypt Cost CalculatorTurn a bcrypt cost factor into hash time, server throughput and offline crack time, benchmarked against OWASP guidance.Argon2 Memory CalculatorSize the Argon2 memory parameter in KiB blocks, validate it against the lane minimum and project peak server RAM.Argon2 Time Cost CalculatorEstimate Argon2 hashing time from memory, passes and memory bandwidth, and get the pass count that hits your target.Argon2 Parallelism CalculatorChoose the Argon2 lane count for your CPU, and check the minimum memory and per-lane allocation it forces.Encryption Overhead CalculatorBreak down the extra bytes an AEAD or CBC mode adds — nonce, padding and auth tag — and the cost across your message volume.Cipher Block Size CalculatorWork out block count, padded length and the birthday-bound data limit per key for AES, 3DES and stream ciphers.Initialization Vector (IV) CalculatorGet the correct IV length and uniqueness rule for CBC, CTR, GCM or XTS, plus the random-IV collision risk at your volume.Nonce Length CalculatorCompare random and counter nonce strategies for AEAD: message limits, collision probability and rekey thresholds.Key Rotation Interval CalculatorFind the rotation interval where cryptographic usage limits and your compliance policy meet, and count rotations per year.Key Lifetime CalculatorDerive the NIST SP 800-57 cryptoperiod for a key type, add the retention tail and check the strength holds that long.Digital Signature Size CalculatorCompare signature and public-key sizes across RSA, ECDSA, Ed25519 and ML-DSA in raw, DER or Base64 encoding.Certificate Chain Size CalculatorAdd up a TLS certificate chain in bytes, count the records it spans and see the handshake bandwidth it costs at scale.CSR Size CalculatorEstimate the DER and PEM size of a certificate signing request from its key algorithm, subject and SAN count.Certificate Expiry CalculatorTrack how much of a certificate's validity is spent, when renewal must start and how urgent the current state is.TLS Session Key CalculatorCount the key material a TLS 1.3 handshake derives — traffic secrets, AEAD keys and IVs — including KeyUpdate rekeys.TLS Handshake Time CalculatorEstimate TLS setup latency from round-trip time, protocol version and resumption mode, split into network and crypto cost.SSL Certificate Validity CalculatorCheck a requested certificate lifetime against CA/Browser Forum limits and see the renewal cadence it commits you to.Perfect Forward Secrecy CalculatorScore your forward-secrecy posture from the key exchange, ticket lifetime and ticket-key rotation, and size the exposure window.Quantum Security Readiness CalculatorApply Mosca's theorem to your data retention and migration timeline, and score how exposed you are to harvest-now attacks.Post-Quantum Key Size CalculatorCompare FIPS 203/204 key, ciphertext and signature sizes against X25519 and Ed25519, and size the bandwidth impact.Randomness Entropy CalculatorCompute Shannon entropy for a random string or passphrase from its alphabet and length, plus the offline crack time.Random Number Quality CalculatorRun the NIST SP 800-22 monobit frequency test on a bitstream sample and estimate its min-entropy per bit.Hash Collision Probability CalculatorApply the birthday bound to any digest length: collision probability at your item count and the safe volume per digest.Cryptography Health Score CalculatorScore your cryptographic estate across cipher strength, TLS version, certificate hygiene, key rotation and quantum readiness.
Password Security
Password Entropy Score CalculatorScore password entropy in bits from its length and character set, with the full keyspace and a strength band.Password Strength Score CalculatorTurn length, character classes, breach status and dictionary content into a single 0–100 password strength score.Password Crack Time CalculatorEstimate how long an offline attack needs to crack a password, using real GPU hash rates for MD5, bcrypt and Argon2id.Brute Force Attack Time CalculatorWork out worst-case and average brute-force time for any keyspace at an attack rate you set yourself.Dictionary Attack Probability CalculatorEstimate the chance a dictionary and rule-mangling attack finds a password, and how long exhausting the wordlist takes.Password Complexity CalculatorTurn a composition policy into the character set, combination count and entropy it actually produces.Passphrase Strength CalculatorScore a diceware passphrase in bits, using the EFF 7776-word list at 12.925 bits per word, and see its crack time.Minimum Password Length CalculatorFind the shortest password that reaches a target entropy in bits, or that survives a target number of years of attack.Password Reuse Risk CalculatorQuantify the blast radius of password reuse: accounts per password, reuse rate and the odds one of them is breached this year.Password Rotation CalculatorPrice a forced password rotation policy: resets per year, helpdesk hours, annual cost and the average exposure window.Password Expiry CalculatorTrack how many days remain before a password expires, when the warning window opens, and whether a change is allowed yet.MFA Security CalculatorModel how much account takeover multi-factor authentication actually prevents, given the method and your enrolment rate.OTP Lifetime CalculatorBalance one-time-passcode length, validity window and attempt limits against the odds an attacker guesses the code.TOTP Validity CalculatorSize the RFC 6238 TOTP acceptance window from the time step and drift tolerance, and see the clock skew it forgives.HOTP Counter CalculatorCheck RFC 4226 HOTP counter drift against the look-ahead window and price the false-accept risk that window creates.PIN Strength CalculatorScore a numeric PIN against both blind guessing and an attacker who tries the most common PINs first.Security Question Strength CalculatorMeasure how weak knowledge-based answers really are, combining guessability with the chance the answer is public.Credential Stuffing Risk CalculatorSize a credential stuffing campaign: how many stolen pairs authenticate, how many MFA stops, and the loss that remains.Identity Theft Risk CalculatorEstimate your annual and five-year identity theft risk from breach exposure, credential reuse and the controls you have.Authentication Success Rate CalculatorMeasure login health: success and failure rates, MFA completion, attempts per successful login and lockout rate.Account Lockout Threshold CalculatorTrade a lockout threshold against helpdesk cost and how much of a common-password list an attacker can still test.Password Manager Coverage CalculatorMeasure real password manager coverage across licences, active users and the share of credentials actually vaulted.Password Hygiene Score CalculatorRoll uniqueness, MFA coverage, length, breach exposure and manager use into one 0–100 password hygiene score.Credential Exposure CalculatorTurn dark-web credential findings into the accounts genuinely at risk after cracking, reuse and MFA are accounted for.Authentication Health Score CalculatorScore the whole authentication estate — MFA, phishing resistance, SSO, policy, stale accounts — and get the top gap.
Identity & Access Management
IAM Policy Size CalculatorSize an IAM policy document against its character limit and see how many statements still fit before you must split it.RBAC Role Count CalculatorCompare direct user-to-permission grants against role-based assignment to size your role model and spot role explosion.Least Privilege CalculatorScore how close an identity is to least privilege by comparing permissions granted against permissions actually used.Permission Coverage CalculatorCheck whether assigned roles cover every permission a job actually needs, and how much extra access comes along for the ride.Privilege Escalation Risk CalculatorScore privilege-escalation exposure from PassRole wildcards, policy-write holders and role-chaining depth.AWS IAM Policy CalculatorMeasure a role against the default AWS IAM quotas: policy characters, 10 managed attachments, and account role and policy limits.Azure RBAC CalculatorTrack Azure role assignments against the 4000-per-subscription limit and custom roles against 500 per tenant.GCP IAM CalculatorSize a Google Cloud allow policy against the 1500-principal cap, the 250-group sub-limit and 300 custom roles per project.LDAP Capacity CalculatorSize an LDAP directory: database and index footprint, entry cache required, and search throughput against demand.Active Directory Replication Load CalculatorEstimate Active Directory replication traffic, per-cycle payload and convergence time for a given DC topology.Kerberos Ticket Lifetime CalculatorWork out TGT renewals per session, the 7-day renewal ceiling and KDC request load from your Kerberos policy.OAuth Token Lifetime CalculatorBalance OAuth access and refresh token lifetimes against token endpoint load and the revocation delay they create.JWT Expiry CalculatorPick a JWT exp claim: validity window with clock skew, when to refresh early, and how long a revoked token stays accepted.JWT Payload Size CalculatorCompute encoded JWT size from claims, roles and signature algorithm, then check it against cookie and HTTP header limits.SAML Assertion Size CalculatorEstimate SAML assertion size with attributes, signature and certificate, then test it against POST and Redirect binding limits.OIDC Session CalculatorSize an OpenID Connect deployment: ID token renewals, session-check polling load, session store memory and per-node request rate.Federation Trust CalculatorCompare full-mesh federation against a hub broker: trusts to maintain, certificate rotations and metadata refresh load.Access Review CalculatorSize an access certification campaign: decisions to make, reviewer hours, elapsed days and the annual effort across campaigns.User Provisioning CalculatorSize joiner-mover-leaver provisioning: account operations per year, manual hours left after automation and the FTE it needs.Identity Lifecycle CalculatorScore identity lifecycle hygiene from deprovisioning delay, orphan accounts and dormant identities across your estate.Session Timeout CalculatorChoose idle and absolute session timeouts, and see the re-authentication rate, hijack window and PCI or NIST compliance they give you.Single Sign-On Coverage CalculatorMeasure SSO coverage across your application estate and the password resets and helpdesk hours the gap is costing you.Identity Risk CalculatorScore identity risk across MFA gaps, privileged density, stale and shared accounts, breached credentials and service accounts.Access Governance Score CalculatorScore access governance maturity from review completion, certification coverage, SoD violations, orphans and exceptions.IAM Health Score CalculatorRoll MFA, SSO, PAM, least privilege, automation, review cadence and stale accounts into one IAM programme health score.
Network Security
Firewall Rule Count CalculatorPredict how many firewall rules a zone-based policy needs, and how fast the rule base grows with each new security zone.Firewall Capacity CalculatorDerate a firewall's datasheet throughput by inspection profile and size its session table memory against your peak load.NAT Session CalculatorWork out NAT and CGNAT port utilisation, the public IP pool size you need, and how close you are to port exhaustion.ACL Rule CalculatorCount the access control entries a router or switch ACL will expand to and check it against the platform's TCAM budget.IPS Throughput CalculatorBlend plaintext and TLS-inspected traffic to find the real throughput an IPS delivers, in both bits and packets per second.IDS Capacity CalculatorSize passive IDS sensors from mirrored traffic: packet rate, sensors required and full-packet-capture storage.DDoS Capacity CalculatorCompare scrubbing capacity against a modelled attack volume to see whether your DDoS headroom ratio actually holds.DDoS Mitigation CalculatorAdd up detection, diversion and ramp time to find your true time to mitigate, and the traffic lost before it engages.VPN Capacity CalculatorSize a VPN concentrator against aggregate encrypted bandwidth, tunnel count limits and the gateway count you need.IPSec Overhead CalculatorBreak down ESP tunnel overhead byte by byte, find the encapsulated packet size and the largest inner MTU that fits.SSL VPN Capacity CalculatorSize an SSL VPN gateway for reconnect storms, TLS throughput and session memory, and see which limit binds first.Zero Trust Readiness CalculatorScore your zero trust maturity across identity, device, network, application, data, visibility and automation pillars.Micro-Segmentation CalculatorCompare the worst-case n-squared policy count against your observed flows to size a micro-segmentation rollout.Security Group Coverage CalculatorAudit cloud security group hygiene: resource coverage, internet-open ingress rules, unused groups and a hygiene grade.Network Segmentation CalculatorDerive the number of network segments a design needs from trust levels, environments, tiers and host-count limits.DMZ Capacity CalculatorPlan a DMZ: server count, addresses needed against the subnet size, VIP density per public IP and firewall rule load.Proxy Throughput CalculatorTurn user counts into forward-proxy request rate, throughput, upstream bandwidth saved by caching and concurrent connections.Web Proxy Capacity CalculatorSize a secure web gateway cluster: appliances required with N+1 sparing, users per node and access-log storage.Reverse Proxy Security CalculatorModel WAF load on a reverse proxy: rule evaluations, CPU cores, TLS handshake utilisation, blocked traffic and false positives.DNS Security CalculatorQuantify malicious DNS query volume, how much your RPZ feeds block, resolver headroom and amplification exposure.DNSSEC CalculatorCalculate how much RRSIG and DNSKEY records inflate a DNS response, and whether it still fits UDP, EDNS0 or needs TCP.ARP Spoofing Risk CalculatorScore ARP poisoning exposure in a VLAN from host count, dynamic ARP inspection coverage, port security and cache timeout.MAC Spoofing Risk CalculatorAssess MAC spoofing and CAM table flooding exposure from port security coverage, 802.1X adoption and MAC table headroom.Port Scan Coverage CalculatorWork out how long a port scan takes at a given probe rate, and how much of the target range a scan window actually covers.Threat Detection Rate CalculatorApply Bayes to detection rates: turn true and false positive rates plus base rate into real alert precision and analyst load.Packet Inspection Capacity CalculatorSize deep packet inspection in packets per second: per-packet CPU cycle budget, cores required and nanoseconds per packet.SSL Inspection CalculatorSize TLS interception: how much traffic you actually decrypt after bypass, and whether the device's derated capacity covers it.East-West Security CalculatorMeasure lateral movement exposure inside a data centre: uninspected east-west traffic, exposed paths and agents still to deploy.North-South Security CalculatorDerate a perimeter inspection stack stage by stage to find real capacity, added latency and unmonitored public endpoints.Network Security Score CalculatorRoll segmentation, firewall hygiene, inspection, DDoS, VPN, DNS and monitoring into one weighted network security score.
Web & API Security
OWASP Risk CalculatorScore a vulnerability with the full OWASP Risk Rating Methodology: eight likelihood factors, eight impact factors, one severity.SQL Injection Risk CalculatorRate SQL injection exposure from query construction, validation, database privileges and the data reachable behind the query.Cross-Site Scripting (XSS) Risk CalculatorScore reflected, stored and DOM XSS risk from output encoding, sanitiser quality, CSP strength and the privilege of the likely victim.CSRF Risk CalculatorRate cross-site request forgery exposure from token design, SameSite cookies, request shape and the value of the forged action.SSRF Risk CalculatorScore server-side request forgery risk from URL handling, redirect and DNS behaviour, egress controls and cloud metadata reachability.Command Injection Risk CalculatorScore OS command injection risk from how the command is invoked, the argument validation, process privileges and runtime isolation.Remote Code Execution Risk CalculatorPrioritise an RCE finding from exploit maturity, authentication needed, network exposure, patch status and lateral movement potential.File Upload Risk CalculatorWeight the ten controls that stop a malicious upload becoming a web shell and get a coverage score plus the residual risk.Path Traversal Risk CalculatorRate directory traversal risk from how file paths are built and canonicalised, and what the process can read or overwrite.Clickjacking Risk CalculatorScore UI redressing risk from framing controls, confirmation design and cookie policy, and estimate how many users a campaign would catch.CSP Effectiveness CalculatorScore a Content Security Policy directive by directive and see whether it would actually stop an injected script.CORS Policy CalculatorTest a CORS configuration for the combinations that leak data cross-origin, and score the residual risk against your data sensitivity.Cookie Security CalculatorScore a session cookie on Secure, HttpOnly, SameSite, prefix, scope, lifetime and rotation, and list the flags you are missing.Session Fixation Risk CalculatorRate session fixation and hijacking risk from identifier regeneration, entropy, transport acceptance, binding and timeout policy.JWT Security CalculatorScore a JWT deployment on algorithm, claim validation, token lifetime, rotation, revocation and browser storage.API Rate Limiting Security CalculatorModel a token-bucket rate limit against a distributed attacker and check whether it still protects the backend.API Abuse CalculatorWork out how long and how cheaply an attacker could scrape an enumerable endpoint, and whether the economics favour them.API Authentication Strength CalculatorScore API authentication on mechanism, credential entropy, rotation, replay protection, secret storage, MFA and lockout.API Gateway Security CalculatorScore the controls at your API gateway and the share of published routes covered by authentication, schema validation and rate limits.GraphQL Query Complexity CalculatorCompute the depth × breadth cost of a GraphQL query, the resolver load it implies and whether your cost limit would reject it.REST API Security CalculatorScore a REST API against the ten OWASP API Security risks and see which category is dragging the result down.Webhook Verification CalculatorScore webhook authenticity controls — signature algorithm, secret entropy, timestamp tolerance, replay cache and constant-time compare.Webhook Retry CalculatorSize an exponential backoff schedule with jitter: total retry window, delivery probability and the retry storm your consumer will see.Input Validation Coverage CalculatorMeasure weighted input validation coverage across your parameters and estimate the injection findings still waiting in the gaps.Output Encoding CalculatorScore context-aware output encoding across HTML, attribute, JavaScript, URL and CSS sinks, weighted by how dangerous each context is.Security Header Score CalculatorGrade your HTTP security headers with weighted scoring, including whether HSTS max-age clears the one-year preload bar.HTTP Security Score CalculatorCombine transport, headers, cookies and configuration hygiene into one HTTP security score and find the weakest pillar.TLS Configuration Score CalculatorGrade a TLS endpoint the way SSL Labs does: 30% protocol, 30% key exchange, 40% cipher strength, then apply the grade caps.Web Application Security Score CalculatorRoll eight security pillars and your open finding counts into one application security score with a deduction for live risk.API Security Score CalculatorScore your API estate across authorisation, authentication, rate limiting, schema validation, transport and monitoring, minus shadow APIs.
Cloud Security
Cloud IAM Risk CalculatorScore cloud IAM risk from administrator ratio, wildcard policies, stale principals, ageing access keys, MFA coverage and cross-account trust.S3 Bucket Exposure CalculatorScore an S3 bucket's public exposure across Block Public Access, bucket policy, object ACLs, website endpoints, pre-signed URLs and encryption.Azure Storage Exposure CalculatorScore an Azure storage account's exposure from public network access, anonymous blob access, Shared Key auth, TLS floor and SAS token lifetime.GCP Bucket Exposure CalculatorScore a Cloud Storage bucket's exposure from public access prevention, allUsers IAM bindings, uniform access, signed URLs, CMEK and audit logging.Cloud Security Group CalculatorCheck security group rule usage against AWS quotas and score the risk from 0.0.0.0/0 sources, exposed admin ports and unattached groups.Cloud Firewall Rule CalculatorMeasure cloud firewall policy hygiene: quota headroom, shadowed and duplicate rules, any-any exposure and effective rule count per policy.Cloud WAF Capacity CalculatorSize an AWS WAF web ACL against the 1500 WCU budget and price web ACLs, rules and inspected requests per month.Cloud Key Management CalculatorPrice a KMS estate at $1 per key per month plus request charges, and show what envelope-encryption data key caching saves.Secrets Rotation CalculatorWork out rotation window risk as exposure days over rotation period, plus manual rotation effort, storage cost and a recommended period.Secrets Exposure CalculatorQuantify hardcoded secret exposure across repositories: scan coverage, finding precision, unrotated live secrets and total exposure days.Cloud Compliance CalculatorTurn CIS benchmark control results into a severity-weighted 0-100 compliance score and show how many critical controls close the gap to target.Cloud Misconfiguration CalculatorConvert CSPM findings into a 0-100 posture score by weighting critical, high, medium and low findings and normalising per 100 cloud resources.Public IP Exposure CalculatorScore internet exposure from public IP count, open admin ports, unpatched public hosts and WAF coverage, and price public IPv4 at $0.005 per hour.Security Hub Score CalculatorReproduce the AWS Security Hub score: passed controls over enabled controls per standard, averaged, with a severity-weighted view of the failures.Azure Secure Score CalculatorModel Microsoft Defender for Cloud secure score: achieved points over maximum points, with partial credit from healthy resource ratios.GCP Security Command Center CalculatorScore GCP posture from Security Command Center findings, per-project density, attack exposure score and CIS Google Cloud benchmark pass rate.CloudTrail Coverage CalculatorMeasure CloudTrail coverage across accounts and regions, and size management versus data event volume in GB per day with its monthly cost.Cloud Logging Coverage CalculatorScore security log coverage from onboarded sources, critical source coverage and retention against requirement, with ingest and storage cost.Cloud Threat Detection CalculatorScore cloud threat detection from account coverage, detection latency and alert precision, and price GuardDuty-style flow, trail and data event analysis.Container Image Vulnerability CalculatorScore container image risk from CVE counts by severity and show how many fleet-wide criticals a single base image bump removes.Kubernetes RBAC Risk CalculatorScore Kubernetes RBAC risk from cluster-admin bindings, wildcard verbs and resources, escalate and bind rights and privileged service accounts.Pod Security Risk CalculatorScore pods against the Pod Security Standards using privileged, hostPath, hostNetwork, runAsRoot and capability findings plus the admission mode.Admission Controller Coverage CalculatorScore admission control coverage from namespaces under policy, enforce versus audit mode, exemptions, webhook failure policy and latency budget.Runtime Security CalculatorScore runtime security from node and workload sensor coverage, detection latency, alert precision and the CPU overhead the sensors cost.Container Escape Risk CalculatorScore container escape risk from privileged containers, mounted runtime sockets, host namespaces, capabilities, runtime class and kernel patch age.Supply Chain Security CalculatorScore software supply chain maturity from SLSA build level, signed artefact share, SBOM coverage, dependency pinning and deploy-time verification.Infrastructure as Code Risk CalculatorScore infrastructure-as-code risk from scan coverage, weighted template findings, hardcoded secrets, configuration drift and pre-merge gating.Cloud Attack Surface CalculatorSize and score a cloud attack surface from public endpoints, exposed management ports, public data stores, unauthenticated APIs and known exploited CVEs.Cloud Security Maturity CalculatorRate cloud security maturity across seven domains on a 1-5 scale, weight them into a single level and show the gap and effort to your target.Cloud Security Health Score CalculatorRoll seven cloud security pillar scores into one weighted health score, penalise open critical findings and name the weakest pillar.
Vulnerability Management
CVSS v3 Score CalculatorCompute a CVSS v3.1 base score from the eight base metrics, with the impact and exploitability sub-scores, vector string and severity rating.CVSS v4 Score CalculatorDerive the CVSS 4.0 macro-vector from the base, threat and requirement metrics and turn it into a severity score and vector string.CVE Severity CalculatorAdjust a published CVSS base score for EPSS probability, KEV listing, exposure, data sensitivity and compensating controls.Patch Priority CalculatorRank a vulnerability for patching from EPSS probability, KEV listing, exploit maturity, asset criticality and exposure.Patch Window CalculatorSize a maintenance window: waves, patch and reboot time, validation, expected rollbacks and whether the work fits the outage you were given.Exploit Probability CalculatorConvert an EPSS 30-day score into the probability of exploitation over any horizon, adjusted for KEV listing and public exploit code.Risk Matrix CalculatorScore a 5×5 likelihood-versus-impact risk matrix, apply control effectiveness for residual risk and test it against your risk appetite.Exposure Window CalculatorMeasure the days between disclosure and deployment, the asset-days at risk and the cumulative chance of exploitation in that window.Mean Time to Patch CalculatorWork out MTTP overall and per severity from your closed findings, and compare each figure against its remediation SLA.Vulnerability Density CalculatorNormalise vulnerability counts per asset and per thousand lines of code, with a severity-weighted density for fair comparison.Asset Criticality CalculatorScore an asset 0–100 for criticality from CIA requirements, user population, revenue dependency, regulation and exposure, then tier it.Asset Exposure CalculatorScore how exposed one asset is: reachability, open services, admin access, authentication strength, segmentation and its worst open finding.Patch Compliance CalculatorMeasure the share of findings remediated inside SLA overall and per severity, and how many more fixes you need to hit your target.Scanner Coverage CalculatorWork out real scan coverage from inventory gaps, authenticated scan depth and scan freshness, and count the assets you never see.Scanner False Positive Rate CalculatorTurn triage outcomes into false-positive rate, precision, recall and F1, plus the hours and money spent chasing noise.Remediation Progress CalculatorTrack backlog burn-down: closure and intake rates, net change, current backlog and how long until you reach your target.Exploitability CalculatorCompute the CVSS exploitability sub-score from AV, AC, PR and UI, normalise it to 0–10 and adjust it for exploit maturity.Attack Surface CalculatorIndex your external attack surface across hosts, services, web apps, API endpoints, remote users, integrations and cloud accounts.Threat Intelligence Coverage CalculatorScore threat-intelligence coverage from ATT&CK technique visibility, indicator freshness, feed breadth and enrichment automation.Risk Reduction CalculatorQuantify the annual loss expectancy removed by a remediation programme and the return on the money it costs.Security Debt CalculatorQuantify unremediated vulnerability debt in weighted units, engineer hours and money, including the interest it accrues each month.Technical Debt Risk CalculatorScore the security risk carried by end-of-life systems, unsupported versions, long-unpatched hosts, legacy code and thin test coverage.Remediation Cost CalculatorCost a remediation campaign: engineering hours with testing overhead, downtime, tooling, cost per finding and FTE months needed.Vulnerability Management Maturity CalculatorRate six vulnerability-management domains 1–5 and get a weighted maturity score, a level, your weakest domain and the next step.Vulnerability Health Score CalculatorRoll MTTP, SLA compliance, scan coverage, open criticals and backlog age into one 0–100 health score with a grade.
SIEM & SOC
SIEM EPS CalculatorConvert events per day into average, peak and licensable EPS, with headroom and a twelve-month growth projection.SIEM Log Ingestion CalculatorTurn an EPS figure and a source mix into GB per day, wire bandwidth and annual raw volume using real average event sizes.SIEM Log Retention CalculatorWork out how many days of logs a given storage budget actually buys, and whether it clears your compliance retention floor.SIEM Storage Requirement CalculatorSize hot, warm and cold SIEM tiers from EPS, event size and retention, then price the whole estate per month.Detection Rule Coverage CalculatorScore how much of your detection content is actually enabled, fed with telemetry, tuned and tested — not just written.MITRE ATT&CK Coverage CalculatorMeasure ATT&CK Enterprise coverage across tactics, techniques and sub-techniques, weighted by detection confidence.Alert Volume CalculatorProject daily SOC alert volume from event rate and rule fire rate, after deduplication, suppression and correlation.Alert Fatigue CalculatorQuantify analyst alert fatigue from queue depth, false-positive rate and shift utilisation, and estimate alerts left untouched.Alert False Positive Rate CalculatorCompute false-positive rate, false discovery rate and precision from triage outcomes, then price the wasted analyst time.True Positive Rate CalculatorDerive recall, precision, F1, specificity and balanced accuracy from a detection confusion matrix.MTTD CalculatorBreak mean time to detect into dwell, telemetry lag, rule interval, queue delay and analyst confirmation, and find the bottleneck.Security MTTR CalculatorCompute security mean time to respond across detect, triage, contain, eradicate and recover phases, with automation savings.Incident Response Time CalculatorModel time-to-respond from paging, acknowledgement and escalation hops, and test it against your severity SLA.Case Load CalculatorCompare incoming SOC case volume with investigative capacity, and see how fast the backlog grows or clears.SOC Staffing CalculatorSize a SOC rota in FTE, including the 4.2–5 FTE per seat that genuine 24×7 coverage requires once shrinkage is funded.Analyst Capacity CalculatorWork out how many alerts one analyst and one shift can genuinely handle from shift hours, utilisation and handling time.Threat Hunting Coverage CalculatorScore a hunting programme on hypothesis execution, technique and data-source coverage, and conversion of findings into detections.IOC Match Rate CalculatorMeasure how much of your threat-intel indicator set ever fires, how precise the matches are, and how much feed decay costs.IOA Detection CalculatorEstimate the chance of catching an attack chain from behavioural detections, using per-step probability across the chain.YARA Rule Coverage CalculatorAssess YARA coverage across malware families and check whether your scan throughput can keep up with daily file volume.Sigma Rule Coverage CalculatorTrack a Sigma rule set from applicable to converted to deployed, and find where field mapping loses your detections.SOAR Automation Coverage CalculatorMeasure how much of the triage workflow SOAR really automates, the hours it returns and the payback on the platform.Playbook Efficiency CalculatorCompare manual and automated playbook execution, allowing for failures that fall back to manual, and find the break-even run count.Forensic Storage CalculatorSize evidence storage for disk images, memory captures and triage packages, with working copies and retention costs.Evidence Integrity CalculatorTime a SHA-256 verification pass over an evidence set and check the hash algorithm still offers real collision resistance.Chain of Custody CalculatorScore the completeness of an evidence custody record — documentation, signatures, hash verification and unexplained gaps.Incident Cost CalculatorTotal the cost of one security incident: response labour, downtime, third-party support, remediation and overtime.Breach Cost CalculatorEstimate data breach cost per record with lifecycle and control adjustments, following the published cost-of-a-breach structure.SOC Maturity CalculatorScore SOC maturity across business alignment, people, process, technology and services on a five-level capability scale.SOC Health Score CalculatorRoll MTTD, MTTR, false-positive rate, ATT&CK coverage, staffing and automation into one weighted SOC health score.
Compliance & GRC
ISO 27001 Compliance CalculatorScore ISMS readiness against the 93 Annex A controls in their four themes plus clauses 4–10, and size the remaining certification gap.NIST CSF Maturity CalculatorScore the six NIST CSF 2.0 functions on the 1–4 implementation tier scale, find the weakest function and the gap to your target tier.PCI DSS Compliance CalculatorTrack PCI DSS v4.0 readiness across the 12 requirements and roughly 277 sub-requirements, with compensating controls and ASV scans counted.HIPAA Compliance CalculatorScore HIPAA Security Rule posture across the administrative, physical and technical safeguards plus required and addressable specifications.GDPR Compliance CalculatorScore GDPR accountability across records of processing, lawful basis, DSAR and 72-hour breach timelines, with Article 83 fine ceilings.SOC 2 Readiness CalculatorAssess SOC 2 readiness across the CC1–CC9 common criteria, your control matrix, the observation window and known exceptions.CIS Controls Coverage CalculatorMeasure CIS Controls v8 coverage across the 153 safeguards and 18 controls, scored against your IG1, IG2 or IG3 target.Risk Register CalculatorRoll a risk register up into one health score: severity mix, treatment backlog, accepted risks and how much sits above appetite.Business Impact Analysis CalculatorCost an outage for a BIA: lost margin, idle staff, penalties, recovery and reputational uplift, tested against the MTPD and the proposed RTO.Risk Appetite CalculatorTurn a risk appetite statement into numbers: appetite and tolerance thresholds, current utilisation, headroom and worst-case survivability.Residual Risk CalculatorWork out residual risk from inherent risk and layered control effectiveness, on both the 25-point scale and in annualised loss expectancy.Inherent Risk CalculatorScore inherent risk before any control credit from threat, exposure and vulnerability against asset value, data sensitivity and regulatory reach.Risk Heatmap CalculatorPlace a risk on a 3×3, 4×4 or 5×5 heatmap with multiplicative or additive scoring, and see the zone, quadrant and appetite verdict.Risk Priority Number CalculatorCompute an FMEA risk priority number from severity, occurrence and detection on the 1–10 scales, with criticality and an action priority.Control Effectiveness CalculatorRate a control on design, operating effectiveness, sample deviations, population coverage and automation, and get an audit-style conclusion.Audit Coverage CalculatorTest an audit plan for coverage and feasibility: annual and cycle coverage, high-risk coverage, auditor-day capacity and finding closure.Audit Finding Severity CalculatorRate an audit finding on control importance, pervasiveness, exposure, regulatory impact and recurrence, with an SLA and escalation route.Exception Risk CalculatorScore a policy exception or risk acceptance: control bypassed, exposure window, blast radius and compensating controls, with an approval level.Vendor Risk CalculatorTier a single vendor on data, access, criticality and spend, weigh the assurance evidence, and get residual risk plus a reassessment interval.Third-Party Risk CalculatorScore a whole third-party risk programme: assessment coverage, provider concentration, fourth-party visibility, audit rights and remediation speed.Business Continuity CalculatorScore a business continuity programme on plan coverage, exercising, achievable recovery against the MTPD, alternate capacity and supplier contingency.Disaster Recovery RTO CalculatorTest an RTO against reality: detection, decision and provisioning time plus the restore time your data volume and throughput actually allow.Disaster Recovery RPO CalculatorDerive the RPO your replication mode and backup interval actually deliver, the data at risk in the worst case, and the interval a target demands.Control Gap CalculatorSize a control gap against any framework: weighted gap, coverage, maturity shortfall and the effort and cost to close it.Security Investment ROI CalculatorBuild a ROSI case for a control: ALE before and after, total annual cost, net benefit, payback, discounted NPV and the break-even mitigation rate.Compliance Cost CalculatorTotal the annual cost of a compliance programme across audit fees, consultancy, internal effort, tooling and evidence, per employee and per framework.Governance Maturity CalculatorScore security governance maturity across eight dimensions on a 1–5 CMMI-style scale, with the weakest dimension and a roadmap estimate.Enterprise Risk Score CalculatorCombine cyber, operational, compliance, third-party, financial and strategic risk into one weighted enterprise score against your stated appetite.Cyber Resilience CalculatorScore cyber resilience across anticipate, withstand, detect, respond and recover, using MTTD, MTTR, segmentation and proven immutable restores.GRC Health Score CalculatorRoll nine GRC signals into one health score: policy currency, control testing, finding closure, register freshness, exceptions, training and coverage.
Forensics & Emerging Threats
Disk Imaging Time CalculatorEstimate forensic disk acquisition time from capacity, sustained read rate, write-blocker overhead, compression and hash verification.Hash Verification CalculatorWork out how long hashing an evidence set takes from algorithm throughput, core count, storage read rate and per-file overhead.Memory Dump Size CalculatorSize a RAM capture including page and swap files, compression and the working space a volatile-memory analysis actually needs.Forensic Evidence Storage CalculatorSize a forensic evidence store across images, working copies, derived artefacts, offsite retention and monthly cost.Evidence Transfer Time CalculatorCompare shipping evidence over the network against physical courier, including protocol efficiency and hash re-verification.Timeline Analysis CalculatorEstimate super-timeline effort from source count, event volume, deduplication, noise filtering and analyst review rate.Malware Spread CalculatorModel worm or malware propagation with an SIR epidemic model: R0, doubling time, projected infections and containment threshold.Ransomware Impact CalculatorTotal the cost of a ransomware event: downtime, lost work in the RPO window, response, notification and insurance retention.Backup Recovery CalculatorCheck whether a restore meets its RTO: backup chain length, restore throughput, parallel streams, verification and infrastructure rebuild.Recovery Time CalculatorBuild an end-to-end RTO from detection, decision, mobilisation, restore throughput, validation and cutover for a tiered estate.Sandbox Resource CalculatorSize a malware analysis sandbox farm: concurrent VMs, CPU, RAM, storage and daily sample throughput per node.Behavior Analysis Coverage CalculatorScore behavioural detection coverage across process, file, registry, network and memory telemetry with evasion-resistance weighting.Threat Modeling CalculatorScore a threat with DREAD and a STRIDE category, and get a CVSS-comparable severity plus a remediation window.Attack Tree Complexity CalculatorMeasure attack-tree complexity: distinct paths to the goal, cheapest path cost, weakest-link exposure and defensive return.Kill Chain Coverage CalculatorScore detection and prevention coverage across the seven Lockheed Martin kill chain stages and find the earliest reliable break.Purple Team Effectiveness CalculatorMeasure purple team value: detections built per technique tested, gaps closed, time to new detection and coverage gained.Red Team Coverage CalculatorScore red team scope coverage across ATT&CK tactics, objectives achieved, detection avoided and estate actually in scope.Blue Team Readiness CalculatorScore defensive readiness from telemetry coverage, detection tuning, response times, staffing cover and exercise cadence.Breach and Attack Simulation Score CalculatorTurn BAS results into a prevented, detected and missed breakdown with a weighted control-efficacy score and drift check.Zero Trust Maturity CalculatorScore zero trust maturity across identity, device, network, application, data, visibility and automation on the CISA model.Insider Threat Risk CalculatorScore insider risk from access breadth, privilege, monitoring, behavioural indicators, departure status and data value.Data Loss Prevention Coverage CalculatorScore DLP coverage across email, web, endpoint, cloud and API egress paths, weighted by enforcement mode and classification quality.Email Security Score CalculatorScore email security from SPF, DKIM and DMARC alignment plus MTA-STS, TLS reporting, filtering and impersonation controls.Phishing Risk CalculatorModel phishing exposure from campaign volume, click and report rates, credential entry, MFA strength and expected compromises.Security Awareness Coverage CalculatorScore awareness programme coverage from completion rates, role-specific training, simulation cadence and behaviour change.Quantum Threat Readiness CalculatorApply Mosca's inequality to post-quantum risk: secrecy lifetime, migration time and years to a quantum-capable adversary.AI Model Security Risk CalculatorScore AI system risk against the OWASP Top 10 for LLM Applications: data exposure, tool access, output handling and guardrails.LLM Prompt Injection Risk CalculatorScore direct and indirect prompt injection risk from untrusted content sources, tool privileges, output sinks and isolation.LLM Data Leakage Risk CalculatorScore sensitive-information disclosure risk in LLM systems: training data, retrieval scope, tenant isolation, logging and memorisation.AI Supply Chain Risk CalculatorScore AI supply chain risk across model weights, datasets, serialisation formats, dependencies and provider concentration.Model Poisoning Risk CalculatorEstimate data poisoning and backdoor risk from contributor trust, sample volume, review coverage and retraining cadence.Deepfake Risk CalculatorScore synthetic media and voice-clone fraud risk from public exposure, verification workflow, channel and transaction value.Synthetic Identity Risk CalculatorEstimate synthetic identity fraud exposure from onboarding volume, verification depth, document checks and portfolio value.Privacy Risk CalculatorScore privacy risk for a processing activity: data categories, volume, lawful basis, transfers, retention and re-identification.PII Exposure CalculatorQuantify PII breach exposure: records at risk, field sensitivity, identity-theft potential, notification cost and regulatory fines.Data Classification CalculatorScore data classification programme coverage and derive the control baseline each tier requires across a data estate.Data Retention Compliance CalculatorCheck retention compliance and over-retention exposure: schedule coverage, deletion success, legal holds and storage cost.Security Budget CalculatorBenchmark security spend against IT budget and revenue, then split it across people, tooling, services and improvement work.Cyber Insurance Coverage CalculatorTest whether a cyber policy covers the modelled loss: limits, sub-limits, retention, waiting period and uninsured residual.Cybersecurity ROI CalculatorCalculate ROSI from ALE before and after a control, including implementation and running cost, payback period and net benefit.Enterprise Security Readiness CalculatorScore enterprise readiness across identity, endpoint, network, cloud, data, detection, response, governance and resilience.Overall Security Posture CalculatorCombine prevention, detection, response and recovery capability with exposure and threat level into one posture score.Cyber Risk Trend CalculatorTrack cyber risk direction over time: period-on-period change, run rate, projected score and time to reach a target.Security KPI Dashboard CalculatorRoll operational security KPIs — MTTD, MTTR, patch SLA, coverage, training and incidents — into one weighted dashboard score.Enterprise Cybersecurity Health Score CalculatorProduce a board-level cybersecurity health score from capability, hygiene, resilience, governance, spend alignment and validation.