Is the live UK domain scanner really free?

Yes. The DNS, DMARC, SPF, MTA-STS, TLS-RPT and CAA audit runs directly in your browser against Cloudflare 1.1.1.1 DNS-over-HTTPS with zero sign-up or telemetry.

What is inside the £24 UK Remediation Pack (or £39 Complete 4-Pack Compliance & Web Shield Bundle)?

An instant 11-file ZIP containing our 10-page UK Cyber Essentials v3.3 (Danzell) & NCSC Remediation Handbook (PDF), standalone Python 3 CLI domain & header auditor (faultypacket_uk_auditor.py), read-only Linux/macOS PHP2Shell forensic triage script (php2shell_local_triage.sh), 6 production server & DNS templates (Cloudflare, Nginx, Apache, IIS, php.ini, MTA-STS), and a sample board HTML audit report.

How are purchases delivered?

Instantly. Completing PayPal checkout redirects you straight back to the Unlock Vault on this page with your direct ZIP download or Pro extension activation key.

Why can't your browser scanner inspect HTTP headers or PHP2Shell directly from this web page?

Browser CORS security policies block web pages from reading raw HTTP response headers of third-party domains. Our Chrome extension (FaultyPacket Security, DNS & PHP2Shell Inspector) runs with activeTab privileges to inspect live HTTP headers, HSTS, CSP and X-Powered-By PHP versions in 1 click, while our Python CLI tool audits multiple domains offline.

Why do IT & SecOps teams use the ARIA Grid & CSV Exporter extension?

Modern admin portals (Entra ID, Intune, Defender, ServiceNow, Jira) render virtualized ARIA data grids ([role="grid"]) with no HTML tag and often lack native CSV export buttons, while raw log exports can contain OWASP CSV Formula Injection (=cmd|...) payloads. The extension extracts virtualized DOM grids cleanly and neutralises formula injection before opening in Excel.

👋 Built by Adam Tucker · 23+ Yrs UK & European IT

Free live scanners & £12–£39 fix blueprints—no agency retainers

I've spent 23+ years in UK infrastructure, software development (9 yrs), and regional IT leadership across 6 countries (UK, Ireland, Denmark, Finland, Norway & Sweden) running M365, Azure, Entra ID, Intune, Palo Alto & cyber audits. I built FaultyPacket so you can test your domain 100% free below—and fix verified gaps in 20 minutes with a £12–£39 pack or 24-hr Fiverr delivery (from US$15).

🛡️ 100% Money-Back Guarantee if a blueprint doesn't fix your verified issue 🇬🇧 Verified UK PayPal Checkout (Adam Tucker · 3LSX4FKDHHJJA)

Global SecOps & Infrastructure Hardening · NIST · ISO 27001 · Cyber Essentials v3.3 ("Danzell")

Find the flaw for free. Deploy the fix in minutes.

Run a live DMARC, SPF, MTA-STS, TLS-RPT and CAA posture audit on any domain worldwide (.com, .io, .org, .co.uk, .de, .au) in seconds, or check your PHP runtime exposure against October 2026 RCE advisories (CVE-2026-109618). Free browser diagnostics; practitioner-grade remediation packs ready to download immediately after checkout.

✓ Live 1.1.1.1 DoH Audit ✓ Zero Sign-Up / Telemetry ✓ NIST / ISO / CE v3.3 ("Danzell") ✓ Instant ZIP Delivery

⚡ LIVE UK 24H DNS & WP TELEMETRY PULSE (43 Sector + CT Domains): 56.2% lack DMARC p=reject · 78.1% lack _mta-sts · 59.4% have SPF SoftFail/PermError risk.

🇬🇧 UK Sector Benchmarks →🛠️ Live Community Fixes →

// START HERE · CHOOSE YOUR PROBLEM FOR AN INSTANT FREE DIAGNOSTIC & DROP-IN FIX 100% Free Browser Scanners · Zero Login Required

1. ✉️ Emails Bouncing (550-5.7.26) or Spoofable Domain?Free Scanner ↓

Test live SPF, DMARC p=reject, MTA-STS & TLS-RPT records below, or grab the £24 DMARC, SPF, MTA-STS & PHP2Shell Remediation Pack.

2. ⚡ WordPress / WooCommerce Email Drops or Security Flaws?WP Flaw Finder →

Audit wp_mail(), /wp-json/wp/v2/users, xmlrpc.php & PCI-DSS v4.0.1 with zero wp-admin login (£12 WP Shield Pack).

3. 🛡️ Facing a UK Cyber Essentials v3.3 ("Danzell") Audit?CE v3.3 Scorer →

Score all 6 mandatory NCSC/IASME April 2026 pillars in your browser and prepare structured evidence before assessment (£29 CE v3.3 Pack).

4. 🌍 Need EU NIS2 Art. 21 or DORA Supplier Compliance Evidence?NIS2 Batch Tool →

Batch-audit 5 supplier domains live in your browser (or 1,000+ offline with our £19 NIS2/DORA Bulk Auditor Pack).

// FREE DIAGNOSTIC 01 · LIVE DNS AUDIT

Live Global Domain, DMARC, SPF & MTA-STS Scanner

Queries public DNS over HTTPS for strict SPF (-all), DMARC enforcement (p=reject), MX gateway resilience, MTA-STS TLS enforcement, TLS-RPT reporting and CAA certificate locks.

⚖️ Authorised Use & Point-in-Time Diagnostic Notice: Only scan domains or systems you own or have explicit authorisation to test (UK Computer Misuse Act 1990). Results & templates are provided strictly "AS IS" as informational engineering aids (not formal certification or legal advice). You are 100% responsible for backing up and testing DNS/server/Entra changes in staging (p=none / report-only) before production rollout. See ICO/GDPR Privacy Notice, Reg. 37 Digital Terms & Liability Cap (£0–£39).

// FREE DIAGNOSTIC 02 · PHP2SHELL RCE TRIAGE

Interactive PHP2Shell RCE & Perimeter Exposure Matrix

Disclosed in October 2026, PHP2Shell (CVE-2026-109618 & CVE-2026-109619) allows unauthenticated remote code execution via crafted CGI/FastCGI stream parameters on unpatched PHP runtimes. Tap your server's PHP branch and perimeter gateway below to verify patch status and required lockdown templates:

1. Select Installed PHP Runtime

2. Select Web Server / Perimeter Gateway

// ZERO SUBSCRIPTION BLOAT · FREE EXTENSIONS + IMPULSE-PRICED COMPLIANCE PACKS

Why Are Our Prices 90% Lower? (Our Zero-SaaS Economics)

We give away both of our daily-use Chrome MV3 security extensions and all 6 live browser diagnostics 100% Free Forever to build practitioner trust, and price our offline Compliance, Web & WordPress ZIP Packs at £12–£29 (or £39 for all four — Save £45) so any sysadmin, MSP, or IT Director can expense them instantly without a PO.

Why Our Prices Are 90% Lower Than Legacy Security Vendors (2026 Economics) Strictly Under £50 / $65 Corporate Expense Card Limit

1. £0 Cloud Hosting Bloat 100% Local Run

Legacy SaaS charges £600–£12,000/yr to run basic DNS/Graph checks on AWS. Our Python, PowerShell & DoH tools run locally on your machine at £0 cloud overhead.

2. £0 SDR & Demo Bloat Live Proof First

Enterprise vendors spend high enterprise sales overhead. Our free live scanners and Dummy-Data Output Previews prove engineering quality in 10 seconds.

3. No Recurring SaaS Lock-In One-Off Purchase

Instead of tying your budget to recurring monthly monitoring portals or multi-day consultancy retainers, you get permanent offline scripts and templates for a single fixed fee.

FaultyPacket Model £0 Ext · £12–£39 Packs

Built once by practitioners, sold at scale. 100% Free Chrome MV3 extensions; £12–£29 standalone compliance packs or £39 for all 4 packs (Save £45 vs buying all 4 separately).

// SEE PROOF BEFORE YOU BUY · LIVE DUMMY-DATA OUTPUT INSPECTOR

Don't Trust Claims Blindly — Inspect Real Outputs From Our Packs (Dummy Tenant: Acme UK Ltd)

Tap any tab below to inspect the exact Executive Board HTML Report, PowerShell/Python CLI terminal output, Auditor CSV columns, and production Nginx/IASME templates before spending a penny:

★ BEST VALUE · COMPLETE 4-PACK COMPLIANCE & WEB SHIELD BUNDLE (SAVE £45 — ALL 4 PACKS INCLUDED)

Strictly Under £50 / $65 Corporate Card Limit

Complete 4-Pack Compliance & Web Shield Bundle (Save £45 — All 4 Packs Included)

£39 GBP (£) · one-off · ~~£84 Separate~~ (Save £45)

Includes all 4 full offline ZIP packs in one instant download: (1) £29 CE v3.3 ("Danzell") & Entra ID Pack + (2) £24 DMARC/SPF/MTA-STS & PHP2Shell Pack + (3) £19 NIS2/DORA Supplier Bulk Auditor Pack + (4) £12 WordPress & WooCommerce Drop-In Security & Email Shield Pack. SHA-256 verified (745.7 KB).

Buy Complete 4-Pack Compliance & Web Shield Bundle — £39 (Save £45 vs buying all 4 separately) Preview Full Sample Board HTML Report →

// STANDALONE COMPLIANCE, EMAIL & WORDPRESS ZIP PACKS (OR GET ALL 4 FOR £39 ABOVE — SAVE £45)

Pack 01 · NCSC / IASME April 2026

Cyber Essentials v3.3 ("Danzell") & Entra ID Evidence Pack

£29 GBP (£) · ~~Was £49~~

GBP (£) Direct Download · Download after payment confirmation · 100% Money-Back Guarantee

Graph PowerShell Collector: Read-only 180-line script auditing Admin separation, MFA, Legacy Auth, >30d dormancy & Intune 14-day patch complianceInvoke-FaultyPacketCEv33Audit.ps1
Offline Python Evaluator: Generates board-ready HTML scorecards & blocker CSVsevaluate_ce_v33_posture.py --demo
IASME v3.3 Editable Response Guidance & Templates & SOPs: Copy-paste answers, Cloud Scope Register CSV, 1-Day Leaver SOP & PDF Handbook

Buy CE v3.3 Pack — £29 Try Free CE v3.3 Readiness Scorer →

Pack 02 · RFC 7489 & CVE-2026-109618

Domain, Email Auth (DMARC/SPF/MTA-STS) & PHP2Shell Pack

£24 GBP (£) · ~~Was £49~~

Less than 2 weeks of a £50/mo DMARC SaaS subscription

10-Page 2026 PDF Handbook: Zero-downtime DMARC p=none → p=reject rollout, SPF flattening, 2048-bit DKIM & MTA-STS
Python 3 CLI Domain Auditor: Generates board-ready HTML reports offlinetools/faultypacket_uk_auditor.py
PHP2Shell Forensic Triage + 6 Configs: Bash IOC hunter + Cloudflare, Nginx, Apache, IIS, php.ini & MTA-STS templates

Buy DMARC, SPF, MTA-STS & PHP2Shell Remediation Pack — £24 Read DMARC & SPF Blueprint →

Pack 03 · EU NIS2 Art. 21 & DORA Art. 28

NIS2, DORA & ISO 27001 Supplier Posture Bulk Auditor Pack

£19 GBP Checkout · ~~Was £39~~

Audit 1,000+ suppliers offline vs. $15,000/yr BitSight/UpGuard

Unlimited Python 3 Bulk Scanner: Batch-audits SPF, DMARC, MX, MTA-STS, TLS-RPT, CAA & security.txt (0–100 Grade A–F)nis2_supplier_auditor.py --demo
Art. 21 / Art. 28 ICT Register CSV: Ready for NIS2, DORA & ISO 27001 A.5.19–5.22 external audits
30-Day Vendor Remediation Notices: Copy-paste supplier outreach templates & PDF Handbook

Buy NIS2 Supplier Pack — £19 Try Free 5-Domain Live Auditor →

Pack 04 · WordPress, WooCommerce & PCI-DSS v4.0.1

WordPress & WooCommerce Drop-In Security & Email Rescue Pack

£12 GBP Checkout · ~~Was £29~~ · Zero wp-admin Login Needed

Cure WooCommerce & Contact Form 7 550-5.7.26 drops + lock down WP in 3 mins

Drop-In MU-Plugin Shield: Blocks /wp-json/wp/v2/users enumeration, disables xmlrpc.php, strips ?ver= leaks & adds PCI-DSS v4.0.1 checkout CSP headersmu-plugins/faultypacket-wp-shield.php
WooCommerce & wp_mail SMTP Rescue: Enforces STARTTLS, Return-Path alignment & matching Message-ID domainsmu-plugins/faultypacket-wp-mail-dkim-smtp.php
Edge & Server Configs: Apache/LiteSpeed .htaccess, Nginx FastCGI rules, Stripe/PayPal-safe Cloudflare WAF rules & verify-wp-posture.sh

Buy WP & WooCommerce Pack — £12 Open Free Live WP & Email Flaw Finder →

// 100% FREE FOREVER COMMUNITY EXTENSIONS · ZERO PAYWALL · ZERO TELEMETRY

Free Magnet 01 · Chrome MV3 + Web Workbench

100% FREE FOREVER (£0)

FaultyPacket Table & ARIA Grid CSV Exporter

£0 100% Free Forever · Unlimited CSV & Clipboard Exports · Zero Paywall

Extracts both standard HTML tables and virtualized ARIA data grids ([role="grid"]) from Microsoft Entra ID, Intune, Defender, ServiceNow & Jira. Automatically neutralises OWASP CSV Formula Injection (=cmd|...), preserves UK 07... leading zeros, and batch-exports all grids for free.

⬇ Direct Download Free MV3 (.zip · 27.9 KB) Open On-Page ARIA/CSV Workbench → ⏳ Chrome Web Store (Pending Review — Use Free ZIP)

Free Magnet 02 · Chrome MV3 Active-Tab Inspector

100% FREE FOREVER (£0)

FaultyPacket Security, DNS & PHP2Shell Inspector

£0 100% Free Forever · Full DoH, Header & CVE Triage + HTML Report Export

1-click active-tab inspection of live HTTP security headers (HSTS, CSP, X-Frame-Options), live DoH SPF/DMARC status, and exposed X-Powered-By: PHP banners vulnerable to CVE-2026-109618 — including unlocked client HTML security report export at £0.

⬇ Direct Download Free MV3 (.zip · 28.9 KB) Read PHP2Shell Advisory → ⏳ Chrome Web Store (Pending Review — Use Free ZIP)

// DONE-FOR-YOU 100% ASYNC AUDITS & FIX PACKS · DIRECT OR VIA FIVERR (@faultypacket)

Zero Calls · Zero Server Logins · 24h Delivery

Compare Instant Self-Serve Website ZIPs (£12–£39) vs. Custom “Done-For-You” 24h Engineering on Fiverr (@faultypacket · $15–$175)

Whether you want an Instant 0-Second Self-Serve Template ZIP (£12–£39 via PayPal on this website) where you fill in your own domain, or a Custom “Done-For-You” 24h Engineering Engagement ($15–$175 on fiverr.com/faultypacket) where our engineers probe your live domain(s) and custom-write every record and scorecard for you:

// WHY TWO BUYING OPTIONS? · WEBSITE SELF-SERVE ZIP (£12–£39) VS. FIVERR DONE-FOR-YOU ($15–$175) 100% Transparent Pricing · Zero Calls Required

⚡ Option 1: Buy on This Website via PayPal (£12–£29 Single Pack · £39 Complete 4-Pack Compliance & Web Shield Bundle)

Instant 0-Second Self-Serve Template ZIP. You immediately download our unencrypted production scripts, MU-plugins, server configs, and templates, and you fill in your own domain name using our 3-minute Quick-Start guide. Lowest flat price because no custom engineer time is required.

🛠️ Option 2: Order on Fiverr ($15–$175 · Basic / Standard / Premium Tiers)

Custom “Done-For-You” 24h Engineering. Why Fiverr costs more: our engineers run a deep external server & DNS probe on your live domain(s) and custom-write every record and config file specifically for your domain, IPs, and mail/payment stack—ready to paste with zero editing. Includes a custom 0–100 Executive HTML Scorecard written for your company, multi-domain tiers (1–5 domains or 25–250 suppliers), live post-fix verification, and all 4 Packs (£84 value) free on Premium.

Gig #1 · Domain DMARC, SPF, DKIM & MTA-STS Audit + DNS Fix Pack£24 Self-Serve ZIP · US$25 / US$35 / US$50 Fiverr

Full RFC 7489/7208/8461 external audit (SPF, DMARC, DKIM, MTA-STS, TLS-RPT, CAA) + Cloudflare/BIND/M365 DNS Fix ZIP (incl. Google/Yahoo 550 5.7.26 bulk-sender compliance).

⚡ £24 Website ZIP (Self-Serve): Instant download of generic DNS templates, 10-page PDF handbook & Python CLI scanner (you plug in your domain).

🛠️ US$25 / US$35 / US$50 Fiverr (Done-For-You): We audit 1 domain ($25), 3 domains + MTA-STS ($35), or 5 domains + Live Post-Fix Re-Scan + All 4 Packs ($50) & write your exact DNS records + custom Executive HTML Scorecard.

🛠️ Order Done-For-You Custom Audit on Fiverr (US$25 / US$35 / US$50) → ⚡ Or Buy Self-Serve Template ZIP — £24 (Instant PayPal Download)

Gig #2 · WordPress, WooCommerce & PHP2Shell Web Server Hardening£12 WP / £24 PHP ZIP · US$15 / US$30 / US$55 Fiverr

Zero-login WordPress/WooCommerce /wp-json/wp/v2/users, xmlrpc.php, PCI-DSS v4.0.1 CSP & wp_mail() 550-5.7.26 rescue + PHP2Shell (CVE-2026-109618) FastCGI/CGI lockdown, MU-plugins & Cloudflare WAF ZIP.

⚡ £12 WP Pack (or £24 PHP Pack) on Website (Self-Serve): Instant 11-file drop-in MU-plugin, Nginx/Apache, Cloudflare WAF & SMTP rescue ZIP (you drop onto your server).

🛠️ US$15 / US$30 / US$55 Fiverr (Done-For-You): We run a live external HTTP/DNS probe on your site, pre-fill your domain’s exact configs & custom Scorecard ($15 1-Site WP/Email · $30 Full WP + PHP2Shell Lockdown · $55 3-Site + Re-Scan + All 4 Packs).

🛠️ Order Done-For-You Custom Fix on Fiverr (US$15 / US$30 / US$55) → ⚡ Or Buy Self-Serve WP Shield ZIP — £12 (Instant PayPal Download)

Gig #3 · Cyber Essentials v3.3 (“Danzell”) & Entra ID Pre-Audit£29 Self-Serve ZIP · US$35 / US$55 / US$85 Fiverr

Mandatory April 2026 NCSC/IASME v3.3 gap analysis (cloud MFA anti-spoofing, passwordless readiness, 1-day leaver SLA, Device Code block) + offline Graph PowerShell collector & IASME model answers.

⚡ £29 Website ZIP (Self-Serve): Instant download of our offline Graph PowerShell collector, IASME v3.3 Editable Response Guidance & Templates & 1-Day Leaver SOP.

🛠️ US$35 / US$55 / US$85 Fiverr (Done-For-You): We run your external v3.3 boundary pre-audit ($35 1-Domain · $55 3-Domain + Custom Entra/MFA Plan · $85 5-Domain + Assessor Sign-Off Dossier + All 4 Packs) & write your custom Gap Report.

🛠️ Order Done-For-You Pre-Audit on Fiverr (US$35 / US$55 / US$85) → ⚡ Or Buy Self-Serve CE v3.3 Pack ZIP — £29 (Instant PayPal Download)

Gig #4 · NIS2 Art. 21 & DORA 25–250 Supplier Bulk Security Audit£19 Self-Serve CLI · US$50 / US$95 / US$175 Fiverr

Automated non-intrusive posture audit of up to 25, 100, or 250 vendor domains + board-ready HTML Executive Dossier, risk-scored CSV register, 30-day vendor remediation notices & Python CLI scanner.

⚡ £19 Website ZIP (Self-Serve CLI): Instant download of our Python 3 Bulk Supplier CLI Scanner & CSV templates to run vendor scans yourself on your own machine.

🛠️ US$50 / US$95 / US$175 Fiverr (Done-For-You Managed Batch Audit): Send us your vendor list—we scan 25 ($50), 100 ($95), or 250 ($175) supplier domains for you & deliver a finished Art. 21/28 Board HTML Dossier, Risk-Scored CSV + All 4 Packs included.

🛠️ Order Done-For-You 25–250 Vendor Audit on Fiverr (US$50 / US$95 / US$175) → ⚡ Or Buy Self-Serve Bulk CLI Pack — £19 (Instant PayPal Download)

⚡ Specialist Bench Services Also Available Direct or on Request: (#5) Cloudflare WAF Rules, CSP, HSTS & Grade A+ Security Headers ($25/$40/$60) · (#6) Google & Yahoo Bulk Sender DMARC/SPF/DKIM 24h Rejections Fix (US$25 / US$35 / US$50) · (#7) Entra ID Conditional Access & Intune Hardening Policy Pack (US$35 / US$55 / US$85).

⚡ 100% Asynchronous Delivery (Zero Meetings Required): All Fiverr gigs and compliance packs are delivered as self-contained, board-ready HTML executive reports + copy-paste DNS/server configs via Fiverr or [email protected]—no sales calls or calendar bloat.

// INDEPENDENT LAB FUND · 100% FREE EXTENSIONS & DIAGNOSTICS · ZERO TELEMETRY

Did a Free Extension or Diagnostic Just Save You a Ticket Escalation, a £320 Retest, or an Hour in PowerShell?

Why is this tip jar here? Because we made both of our Chrome MV3 extensions (Table & Grid Exporter and Security, DNS & PHP2Shell Inspector) plus all 5 live browser diagnostics 100% Free Forever instead of charging $12/mo SaaS fees or harvesting your email into a CRM. If our free tools saved you time today, fuel independent zero-telemetry engineering:

☕ Fuel the Lab with £5.00 via PayPal →

// INSTANT SELF-SERVICE DELIVERY · SHA-256 VERIFIED ARCHIVES

Instant Delivery Vault & Free Extension Downloads

Completed a PayPal checkout? PayPal returns you here automatically to download your ZIP archive. You can also enter the 17-character Transaction ID from your PayPal receipt (or the redemption key we emailed you) below at any time. Both of our Chrome MV3 extensions are unlocked below 100% Free Forever.

💡 Paid via PayPal? You're redirected here automatically after checkout—or enter the Transaction ID from your PayPal receipt (or your emailed redemption key) ([email protected]) to unlock anytime.

Archive / Deliverable	Tier & Price	Size	SHA-256 Checksum & Action
faultypacket-table-exporter-mv3.zip	100% FREE	27.9 KB	`cad1bf69a70580cd…` · Download Free ZIP
faultypacket-security-inspector-mv3.zip	100% FREE	28.9 KB	`a3f813c635baf9df…` · Download Free ZIP
faultypacket-complete-3pack-compliance-bundle-v1.zip	£39 BUNDLE	745.7 KB	`1699f1e3ea29eaf7…` · Unlock (£39 Save £45 vs buying all 4 separately)
faultypacket-cyber-essentials-v33-pack-v1.zip	£29 PACK	169.4 KB	`706c8be1d9ce82f5…` · Unlock (£29)
fp-vault-9f4c8a2e71b305d6-uk-remediation-pack-2026-v1.zip	£24 PACK	388.6 KB	`23db63af91ce9a67…` · Unlock (£24)
faultypacket-nis2-dora-supplier-pack-v1.zip	£19 PACK	161.3 KB	`5adc39644c82e34e…` · Unlock (£19)
faultypacket-wordpress-woocommerce-shield-pack-v1.zip	£12 PACK	19.9 KB	`3dbb265dc3247735…` · Unlock (£12)

// PRACTITIONER KNOWLEDGE BASE · 6 FREE INTERACTIVE DIAGNOSTICS, FLAW FINDERS & BLUEPRINTS

Deep-Dive Advisories & Live Browser Diagnostics

Step-by-step engineering guides and free browser tools for SecOps teams, sysadmins and MSPs across the UK, Europe, North America and APAC.

Live Flaw Finder · WordPress, WooCommerce & PCI-DSS v4.0.1

WordPress, WooCommerce & Web Flaw Finder + wp_mail Rescue

"I built this after seeing countless UK SMEs lose customer receipts and contact-form enquiries to Gmail/M365 550-5.7.26 rejections while leaving /wp-json and xmlrpc.php wide open." — Adam

Diagnose WooCommerce & Contact Form 7 550-5.7.26 email drops, /wp-json/wp/v2/users enumeration, xmlrpc.php amplification, and PCI-DSS v4.0.1 checkout CSP headers with zero wp-admin access.

Launch WP & WooCommerce Flaw Finder →

Interactive Scorer · NCSC / IASME Apr 2026

Cyber Essentials v3.3 ("Danzell") Pre-Audit Blocker Scorer

"Born directly from preparing multi-site UK & European Microsoft 365 / Intune estates for cyber-security audits without paying external pre-assessors." — Adam

Score your tenant across all 6 mandatory v3.3 pillars (Cloud Scope, Admin MFA, 14-Day Patching, 1-Day Leaver Revocation, Admin Separation & Host Firewalls) and export a free pre-audit CSV.

Launch CE v3.3 Readiness Scorer →

Live 5-Domain DoH Tool · EU NIS2 & DORA

NIS2 & DORA Third-Party Supplier Posture Batch Auditor

"Managing IT across the UK, Ireland, and 4 Nordic countries meant needing fast, verifiable supplier DNS/TLS posture evidence without enterprise portal bloat." — Adam

Audit up to 5 supplier domains concurrently in your browser via Cloudflare 1.1.1.1 DoH for SPF, DMARC, MX, MTA-STS & CAA and export a free Article 21/28 CSV register.

Launch 5-Domain Supplier Auditor →

Advisory · CVE-2026-109618 & CVE-2026-109619

PHP2Shell RCE Triage & Server Lockdown Guide

How crafted CGI/FastCGI stream parameters trigger unauthenticated RCE on PHP < 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, exact access-log IOC grep patterns, and Nginx/Apache/IIS perimeter rules.

Read PHP2Shell Remediation Guide →

Blueprint · RFC 7489 / NIST SP 800-177 / CE v3.3

Zero-Downtime DMARC p=reject, SPF & MTA-STS Rollout

How to transition from p=none to strict p=reject across Microsoft 365, Google Workspace, SendGrid & HubSpot without blocking legitimate mail, plus fixing the SPF 10-lookup limit.

Read DMARC & SPF Engineering Guide →

Interactive Workbench · OWASP CWE-1236

Exporting Virtualized ARIA Grids & Blocking CSV Injection

"I wrote this Chrome extension after Microsoft Entra ID and Intune virtualised grids kept truncating row exports when pulling audit evidence." — Adam

Paste raw HTML, virtualized [role="grid"] DOM snippets, or JSON logs into our free on-page workbench to strip =cmd|... payloads and download our 100% Free Chrome MV3 Exporter.

Open ARIA Grid & CSV Workbench →

// TRANSPARENT FINDING-TO-PACK & EVIDENCE SCOPE MAPPER · DIY FREE VS. £12–£39 PACKS VS. 24H FIVERR

Scanner Finding → Free DIY Fix → Paid Pack or 24h Done-For-You Mapping

Every FaultyPacket diagnostic separates what was observed publicly, the free DIY remediation step you can apply yourself immediately, the matching self-serve ZIP pack (£12–£39) or 24h Fiverr Done-For-You gig ($15–$175), and the exact evidence scope & exclusions. Looking for how we handle DNS transport failures? Open the Interactive Evidence Comparison Lab → or view our Sample Audit Report →.

1. Missing DMARC / SoftFail SPF / No MTA-STSEMAIL AUTH

Why It Matters: Unauthenticated senders can spoof executive domains or downgrade SMTP TLS.

Free DIY Fix: Publish _dmarc TXT "v=DMARC1; p=quarantine; rua=..." and flatten SPF to ≤10 lookups ending in -all.

Paid Pack / 24h DFY: £24 DMARC, SPF, MTA-STS & PHP2Shell Remediation Pack (or $25–$95 Fiverr DMARC Gig).

Scope & Exclusions: Public DNS/TXT/MX & MTA-STS records only; excludes internal Exchange/Workspace tenant admin access.

2. WordPress `wp_mail` / REST / XML-RPC ExposureWP & WOO

Why It Matters: Unauthenticated user enumeration, XML-RPC brute-force amplifiers, and WooCommerce receipts landing in spam.

Free DIY Fix: Disable xmlrpc.php, filter /wp-json/wp/v2/users, and align SMTP DKIM/SPF headers.

Paid Pack / 24h DFY: £12 WP & WooCommerce Shield Pack (faultypacket-wp-shield.php MU-plugin) or $15–$55 Fiverr 24h Fix.

Scope & Exclusions: Zero wp-admin credentials required; drop-in MU-plugin + DNS records.

3. PHP2Shell (`CVE-2026-109618` & Sibling `CVE-2026-109619`)RUNTIME / WAF

Why It Matters: Exposed PHP runtime banners, FastCGI/PHP-FPM env injection (CVE-2026-109618 & sibling CVE-2026-109619), and missing HSTS/CSP.

Free DIY Fix: Patch PHP runtime, set expose_php = Off, and lock FastCGI SCRIPT_FILENAME boundaries.

Paid Pack / 24h DFY: £24 DMARC, SPF, MTA-STS & PHP2Shell Remediation Pack (Nginx/Apache/IIS/Cloudflare rules + IOC script) or $30–$110 Fiverr Gig.

Scope & Exclusions: Edge WAF/server config & passive header/IOC verification; non-intrusive (zero exploitation).

4. NIS2 Art. 21 / DORA & CE v3.3 ("Danzell") GapsGOVERNANCE

Why It Matters: Supply-chain DNS email posture blind spots and IASME Cyber Essentials v3.3 ("Danzell") assessment failures.

Free DIY Fix: Use our free browser NIS2 25-domain auditor & CE v3.3 readiness scorer with evidence-aware DoH checks.

Paid Pack / 24h DFY: £19 NIS2 Bulk Pack / £29 CE v3.3 Pack / £39 Complete 4-Pack Compliance & Web Shield Bundle (or $35–$175 Fiverr).

Scope & Exclusions: Public DNS posture score (0–100) & self-assessment templates; not an accredited certification body.

🔄 Opt-In Domain & WordPress Drift MonitoringDNS TXT VERIFIED

Want continuous checks after fixing your records? Pack and Fiverr buyers can enrol domains in our Opt-In Drift Monitor by publishing a read-only _faultypacket-verify.<domain> DNS TXT ownership token.

Zero-Spam Guarantee: Outbound drift alerts ([email protected]) are disabled by default and only fire when both explicit consent and _faultypacket-verify TXT ownership are verified and a baseline SPF/DMARC/MTA-STS/WP header drifts.

🏢 For Web Agencies & MSPs: Multi-Domain & White-Label ScorecardsMSP & AGENCY READY

Managing 10–250 client WordPress sites or Microsoft 365 domains? Our £39 Complete 4-Pack Compliance & Web Shield Bundle and Fiverr Pro Tiers include multi-domain batch auditing and White-Label Executive HTML Scorecards (--agency-name / --white-label) ready to hand directly to your clients.

Email [email protected] or order via Fiverr (@faultypacket) with your agency name and domain list.

UK PRINCIPAL IT LEADER • 23+ YEARS HANDS-ON INFRASTRUCTURE & CYBER GOVERNANCE

Built by Adam Tucker — 23+ Years Leading IT & Security Across the UK, Ireland & 4 Nordic Countries

Every scanner, drop-in remediation script, and compliance evidence pack is engineered from real enterprise experience managing Microsoft 365, Azure, Entra ID, Intune, Windows Autopilot, Palo Alto security, and multi-country cyber-security audits across 6 countries (UK, Ireland, Denmark, Finland, Norway & Sweden), backed by 9 years of commercial software development and 3rd-line infrastructure engineering—built to replace overpriced £1,000+ consultancy retainers with fixed-price £12–£39 fixes.

Verified UK Sole-Trader Checkout

Website GBP checkouts process via our verified UK PayPal Business account (Adam Tucker / FaultyPacket, Merchant ID 3LSX4FKDHHJJA) with a 100% Money-Back Guarantee if our fixes do not resolve your verified issue.