Free tools
Free to download, free to use, free to change.
These tools are published as open source under permissive licenses. There is no signup, no email wall, and no trial period. Take them, adapt them, and ship them.
Why they are free
Useful work should not sit behind a form.
Each of these came out of a real operating problem, then got cleaned up enough to hand to someone else. They carry the same habits as the consulting work: dry runs before changes, records that explain what happened, and a way back when something goes wrong.
They are maintained because they are still in use. If one of them solves part of your problem and you want the rest handled, the service lines are where that conversation starts.
On GitHub
Seven tools you can use today.
Ops Toolkit
Hardened automation for Active Directory, Azure, IIS, Microsoft 365, and Windows operations. Dry runs, plan records, and rollback reporting are built in rather than added later.
Security Program Templates
The documents a security program actually runs on: an opinionated risk register, a quarterly board update, a blameless incident postmortem, and a control framework mapping pattern. Each one ends with its common failure modes.
Email Evidence Tools
Utilities for extracting, reducing, scanning, and labeling mbox and IMAP archives for security operations triage, incident response, and evidence review. Runs are checkpointed, so an interrupted job resumes exactly where it stopped.
Medical Bill Dispute Kit
An instruction toolkit for reading US medical bills, removing duplicate follow-up statements, and running a dispute that lasts months. The ruleset is built from the No Surprises Act, ERISA appeal rights, and state consumer protection law.
Security Lab Notes
A working notebook from hands-on security training covering scanning, controlled lab access, post-exploitation concepts, and OSCP preparation. Published as reference material rather than a finished tool.
Landing Gear
A free, step-by-step manual for running a job search, from deciding what you are going for through profiles, resumes, ATS keywords, applications, recruiters, interviewing, and offers. Twelve chapters of markdown to read, not code to run. The guide is written for two situations, someone out of work with time but no structure, and someone searching quietly while employed with about forty minutes an evening; the steps are the same, but the sequencing and pace differ.
Legal Self-Help Kit
An instruction toolkit for someone disputing a fee, a communication failure, or a withheld file with their own lawyer. It helps organize the facts, pick the right forum, and draft the letters. All fifty states and the District of Columbia, each with its own sourced pack. Getting money back and getting the conduct on the record are different forums with different odds, so the toolkit keeps them separate.
When a template is not enough
Check whether the records exist.
The Security Program Templates show the shape of useful records. The Evidence Readiness Baseline checks one defined part of your program against the records you actually have, without turning the result into a maturity score.
Want this run in your environment?
