Is FaultyPacket a UK & European GDPR / NIS2 compliant alternative to MxToolBox and DMARCly?

Yes. FaultyPacket is a UK & European sovereign MxToolBox SuperTool and DMARCly alternative built with zero US data retention, zero cookies (PECR Reg. 6), self-hosted DMARC RUA/RUF telemetry templates, and one-off GBP (£5–£39) downloads instead of recurring USD SaaS subscriptions.

Is the live UK domain scanner really free?

Yes. The DNS, DMARC, SPF, MTA-STS, TLS-RPT and CAA audit runs directly in your browser against Cloudflare 1.1.1.1 DNS-over-HTTPS with zero sign-up or telemetry.

What is inside the £24 UK Remediation Pack (or £39 Complete 4-Pack Compliance & Web Shield Bundle)?

An instant 11-file ZIP containing our 10-page UK Cyber Essentials v3.3 (Danzell) & NCSC Remediation Handbook (PDF), standalone Python 3 CLI domain & header auditor (faultypacket_uk_auditor.py), read-only Linux/macOS PHP2Shell forensic triage script (php2shell_local_triage.sh), 6 production server & DNS templates (Cloudflare, Nginx, Apache, IIS, php.ini, MTA-STS), and a sample board HTML audit report.

How are purchases delivered?

Instantly. Completing PayPal checkout redirects you straight back to the Unlock Vault on this page with your direct ZIP download or Pro extension activation key.

Why can't your browser scanner inspect HTTP headers or PHP2Shell directly from this web page?

Browser CORS security policies block web pages from reading raw HTTP response headers of third-party domains. Our Chrome extension (FaultyPacket Security, DNS & PHP2Shell Inspector) runs with activeTab privileges to inspect live HTTP headers, HSTS, CSP and X-Powered-By PHP versions in 1 click, while our Python CLI tool audits multiple domains offline.

Why do IT & SecOps teams use the ARIA Grid & CSV Exporter extension?

Modern admin portals (Entra ID, Intune, Defender, ServiceNow, Jira) render virtualized ARIA data grids ([role="grid"]) with no HTML tag and often lack native CSV export buttons, while raw log exports can contain OWASP CSV Formula Injection (=cmd|...) payloads. The extension extracts virtualized DOM grids cleanly and neutralises formula injection before opening in Excel.

How do UK domains mitigate: CVE-2026-108360: [phpoffice/phpspreadsheet] PhpSpreadsheet:… (GitHub Security Advisories)?

Verified via GitHub Security Advisories (GITHUB GHSA-2phh-27fw-q4gc + CVE-2026-108360 VERIFIED): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify live via https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12 or deploy the £12 WordPress & WooCommerce Security Shield Pack.

How do UK domains mitigate: CVE-2026-108082: [symfony/http-foundation] Symfony: ReDoS in… (GitHub Security Advisories)?

Verified via GitHub Security Advisories (GITHUB GHSA-r925-mgvr-h9cc + CVE-2026-108082 VERIFIED): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify live via https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12 or deploy the £12 WordPress & WooCommerce Security Shield Pack.

How do UK domains mitigate: CVE-2026-109413: [symfony/symfony] Symfony: Unbounded Recursion… (GitHub Security Advisories)?

Verified via GitHub Security Advisories (GITHUB GHSA-2v3c-qxhr-7vpv + CVE-2026-109413 VERIFIED): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify live via https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12 or deploy the £12 WordPress & WooCommerce Security Shield Pack.

How do UK domains mitigate: CVE-2026-116675: [tinymce] TinyMCE Cross-Site Scripting (XSS)… (GitHub Security Advisories)?

Verified via GitHub Security Advisories (GITHUB GHSA-mf2p-h6hf-fcwm + CVE-2026-116675 VERIFIED): Lock xmlrpc.php & wp-json user enumeration, disable dangerous PHP eval/exec primitives, and deploy strict HSTS + CSP headers. Verify live via https://faultypacket.co.uk/wordpress-woocommerce-security-flaw-finder.html?utm_source=threat_pulse&utm_medium=onsite&utm_campaign=wp12 or deploy the £12 WordPress & WooCommerce Security Shield Pack.

FREE DOMAIN SECURITY CHECK

Know What’s Wrong With Your Domain.

Check email authentication, DNS and security posture in seconds. No account. No installation. No sales call.

Browser-first diagnostics • No signup • Free to scan Real DNS results. Fix only what needs fixing.

• Free scanner • 2 Chrome extensions • Public DNS research (738,611+ domains) • Optional fix packs (£5–£39) • Evidence export

Authorised use & point-in-time public DNS diagnostic notice: only test domains you own or are authorised to inspect. Results reflect live DNS/HTTP observations at the time of scan.

WHAT CAN I CHECK?

Four Core Diagnostic Areas

Email AuthenticationDMARC · SPF

Check DMARC policy enforcement, SPF lookup counts (≤10), MTA-STS TLS encryption, and sender alignment.

DNS & Domain HygieneDNSSEC · CAA

Inspect TXT, MX, SOA, SRV, CAA certificate locks, DNSSEC signatures, and Certificate Transparency subdomains.

Web & WordPress ExposureWP · HEADERS

Test HTTP security headers, WooCommerce email drops, /wp-json user enumeration, and xmlrpc.php exposure.

Supplier & Readiness ChecksNIS2 · CE v3.3

Batch-check third-party supplier domains for NIS2/DORA or score your Microsoft 365 tenant against Cyber Essentials v3.3.

FREE TOOLS

Free Browser Extensions & Server Checks

No account, no telemetry, and free to use in your browser.

Chrome Web Store Extension

Security, DNS & PHP2Shell Inspector

One-click active-tab inspection of HTTP security headers (HSTS, CSP, X-Frame-Options), live DoH SPF/DMARC status, and exposed PHP banners.

Install from Chrome Web Store Download MV3 .zip →

Chrome Web Store Extension

Clean Table & ARIA Grid CSV Exporter

Extracts HTML tables and virtualized ARIA grids from Entra ID, Intune, Defender, and ServiceNow while stripping CSV formula injection.

Install from Chrome Web Store Open web workbench →

SERVER RUNTIME CHECK · CVE-2026-109618

Check PHP2Shell Exposure by Runtime & Web Server

Select your PHP runtime and web server to generate the matching perimeter block rule.

1. Select Installed PHP Runtime

2. Select Web Server / Perimeter Gateway

RESEARCH · PUBLIC DNS OBSERVATORY

Where does your DMARC reporting data actually go?

FaultyPacket’s ongoing public DNS research across 738,611+ audited domains examines how UK and European domains configure DMARC enforcement (p=none vs p=reject) and where they route aggregate (rua=) and forensic (ruf=) reporting destinations across self-hosted mailboxes and third-party processors.

Read the research Check my domain ↑ Compare self-hosted RUA vs SaaS tools →

✅ 738,611+ UK & EU Domains Audited · 21,000+ Follows Across Meta & X (@faultypacket / Sphud ✓) · 2 Official Google Chrome Web Store Extensions · Interactive Live Previews Before You Pay 💳 Pay with Visa, Mastercard or Amex via PayPal Guest Checkout (no PayPal account required)

🔥 FIRST-5-BUYERS LAUNCH SPECIAL · £5 DIRECT WEBSITE PACK vs. $15 FIVERR 24H DONE-FOR-YOU

£5 Direct Website Launch Special — Instant Domain Executive Audit + Ready-to-Paste DNS/SPF/DMARC Quick-Fix Pack

Want to test our practitioner tooling for the price of a coffee? Unlock our £5 Direct Website Launch Special (instant download via PayPal UK) or book our $15 24-Hour Done-For-You Launch Special on Fiverr (from $15 on Fiverr — Fiverr's lowest allowed category minimum for Cybersecurity & Server Hardening).

⚡ Buy £5 Website Launch Special (Instant ZIP) →

💳 Pay with Visa, Mastercard or Amex via PayPal Guest Checkout (no PayPal account required) — or via Fiverr ($15 Launch Special with Apple Pay / Google Pay / Corporate Card) · Instant ZIP + VAT/Sole-Trader Receipt · 100% Money-Back Guarantee

🛠️ Book $15 Fiverr Launch Special (24h Done-For-You) →

NO SUBSCRIPTIONS · NO SALES CALLS · ONE-OFF GBP PRICING

Fix It Yourself from £5—Or Let Us Do It for You in 24 Hours ($15)

Our browser scanners and Chrome extensions are 100% free forever. When you need the ready-to-deploy scripts, policies, and server configs, grab a one-off pack for £5–£39—no recurring SaaS subscriptions and no procurement hoops.

Why Our Prices Are 90% Lower Than Legacy Security Vendors (2026 Economics) Strictly Under £50 / $65 Corporate Expense Card Limit

1. £0 Cloud Hosting Bloat 100% Local Run

Legacy SaaS charges £600–£12,000/yr to run basic DNS/Graph checks on AWS. Our Python, PowerShell & DoH tools run locally on your machine at £0 cloud overhead.

2. £0 SDR & Demo Bloat Live Proof First

Enterprise vendors spend high enterprise sales overhead. Our free live scanners and Dummy-Data Output Previews prove engineering quality in 10 seconds.

3. No Recurring SaaS Lock-In One-Off Purchase

Instead of tying your budget to recurring monthly monitoring portals or multi-day consultancy retainers, you get permanent offline scripts and templates for a single fixed fee.

FaultyPacket Model £0 Ext · £12–£39 Packs

Built once by practitioners, sold at scale. 100% Free Chrome MV3 extensions; £12–£29 standalone compliance packs or £39 for all 4 packs (Save £45 vs buying all 4 separately).

SEE EXACTLY WHAT YOU GET BEFORE YOU SPEND A PENNY

Peek Inside the Packs (Live Sample Output)

Click any tab below to preview the exact Board HTML Report, PowerShell/Python CLI output, Auditor CSV registers, and server configs included in your download:

★ BEST VALUE · COMPLETE 4-PACK COMPLIANCE & WEB SHIELD BUNDLE (SAVE £45 — ALL 4 PACKS INCLUDED)

Strictly Under £50 / $65 Corporate Card Limit

Complete 4-Pack Compliance & Web Shield Bundle (Save £45 — All 4 Packs Included)

£39 GBP (£) · one-off · ~~£84 Separate~~ (Save £45)

Includes all 4 full offline ZIP packs in one instant download: (1) £29 CE v3.3 ("Danzell") & Entra ID Pack + (2) £24 DMARC/SPF/MTA-STS & PHP2Shell Pack + (3) £19 NIS2/DORA Supplier Bulk Auditor Pack + (4) £12 WordPress & WooCommerce Drop-In Security & Email Shield Pack. SHA-256 verified (745.7 KB).

Buy Complete 4-Pack Compliance & Web Shield Bundle — £39 (Save £45 vs buying all 4 separately)

Preview Full Sample Board HTML Report →

INDIVIDUAL FIX PACKS (£12–£29) · OR GRAB ALL 4 ABOVE FOR £39

Pack 01 · NCSC / IASME April 2026

Cyber Essentials v3.3 Prep + Email/Domain Security Gap Pack ("Danzell" & Entra ID)

£29 GBP (£) · ~~Was £49~~

GBP (£) Direct Download · Download after payment confirmation · 100% Money-Back Guarantee

Catch Automatic-Fail Blockers First: Audits Entra ID MFA, Admin Role separation, Intune device compliance, and 14-day patch status before you submit to IASME.
Ready-to-Paste IASME v3.3 Wording: Pre-written answers for Cloud Services, Passwordless / FIDO2 MFA, and Home Working scope.
Instant Executive HTML & CSV Proof: Generates board-ready evidence files in 60 seconds with zero cloud uploads.

📂 View Exact Scripts & Files in Pack #1 (£29)Specs ↓

Includes Invoke-CEv33-EntraIntune-Audit.ps1, iasme_v3_3_danzell_scope_templates.md, ce_v3_3_pre_audit_checklist.csv, and sample_ce_v3_3_board_report.html.

📂 View All 4 ZIP Archives & Guarantee DetailsSpecs ↓

Includes all 4 standalone ZIP packs (`ce-v3-3-danzell-readiness-pack.zip`, `dmarc-mta-sts-php2shell-remediation-pack.zip`, `nis2-dora-supplier-auditor-pack.zip`, `wordpress-woocommerce-security-email-shield-pack.zip`), 100% offline execution, lifetime updates, and our 14-Day Money-Back Guarantee.

Buy CE v3.3 Pack — £29

Try Free CE v3.3 Readiness Scorer →

Pack 02 · RFC 7489 & CVE-2026-109618

Sovereign DMARC (T0 RUA), SPF, MTA-STS & PHP2Shell Remediation Pack

£24 GBP (£) · ~~Was £49~~

Less than 2 weeks of a £50/mo DMARC SaaS subscription

Reach Strict p=reject Safely: Step-by-step DNS templates (`p=none` → `p=quarantine` → `p=reject`) that protect Microsoft 365, Google Workspace, SendGrid & HubSpot mail.
Fix the 10-Lookup SPF Limit: Automated Python flattening helper + drop-in mta-sts.txt and _smtp._tls records.
Block PHP2Shell (CVE-2026-109618): Production Nginx, Apache, IIS, Cloudflare WAF & php.ini lockdown snippets.

📂 View Exact DNS & Server Configs in Pack #2 (£24)Specs ↓

Includes dmarc_staged_rollout_zones.bind, spf_lookup_flattener.py, mta-sts-well-known-kit/, and php2shell-nginx-apache-iis-waf.conf.

Buy DMARC, SPF, MTA-STS & PHP2Shell Remediation Pack — £24

Read DMARC & SPF Blueprint →

Pack 03 · EU NIS2 Art. 21 & DORA Art. 28

NIS2, DORA & ISO 27001 Supplier Posture Bulk Auditor Pack

£19 GBP Checkout · ~~Was £39~~

Audit 1,000+ suppliers offline vs. $15,000/yr BitSight/UpGuard

Audit 1,000+ Suppliers on Your Laptop: Multi-threaded Python CLI checks vendor DMARC, SPF, MX, MTA-STS, TLS & CAA records with zero SaaS fees.
Board & Regulator Ready: Exports a traffic-light Executive HTML Report + UTF-8 CSV register mapped to NIS2 Art. 21(2)(d), DORA Art. 28 & ISO 27001.
Built-In CSV Formula-Injection Shield: Automatically neutralises untrusted DNS strings (`CWE-1236`) before you open in Excel.

📂 View Exact Python CLI & Registers in Pack #3 (£19)Specs ↓

Includes faultypacket_supplier_auditor.py (zero pip dependencies), sample_50_vendor_nis2_dora_register.csv, and sample_board_posture_report.html.

Buy NIS2 Supplier Pack — £19

Try Free 5-Domain Live Auditor →

Pack 04 · WordPress, WooCommerce & PCI-DSS v4.0.1

WordPress & WooCommerce Drop-In Security & Email Rescue Pack

£12 GBP Checkout · ~~Was £29~~ · Zero wp-admin Login Needed

Cure WooCommerce & Contact Form 7 550-5.7.26 drops + lock down WP in 3 mins

Stop WooCommerce Order Emails Dropping: Ready-to-paste DNS records + lightweight MU-plugin that fixes unauthenticated wp_mail() headers without heavy plugins.
Close User Leaks & Bot Amplifier Holes: Blocks /wp-json/wp/v2/users enumeration, xmlrpc.php brute-force attacks, and exposed .env / debug.log files.
Meet PCI-DSS v4.0.1 Checkout Rules: Drop-in Content-Security-Policy (CSP) & checkout script integrity monitor (Req 6.4.3 / 11.6.1).

📂 View All 10 Drop-In WordPress Files in Pack #4 (£12)Specs ↓

Includes 00-faultypacket-wp-shield.php (drop-in MU-plugin), nginx-wp-woocommerce-hardening.conf, apache-htaccess-wp-lockdown.conf, and pci-dss-v4-checkout-csp-headers.conf.

Buy WP & WooCommerce Pack — £12

Open Free Live WP & Email Flaw Finder →

FREE CHROME EXTENSIONS · ZERO TRACKING · BUILT FOR DAILY ADMIN WORK

Free Magnet 01 · Chrome MV3 + Web Workbench

100% FREE FOREVER (£0)

FaultyPacket Table & ARIA Grid CSV Exporter

£0 100% Free Forever · Unlimited CSV & Clipboard Exports · Zero Paywall

Extracts both standard HTML tables and virtualized ARIA data grids ([role="grid"]) from Microsoft Entra ID, Intune, Defender, ServiceNow & Jira. Automatically neutralises OWASP CSV Formula Injection (=cmd|...), preserves UK 07... leading zeros, and batch-exports all grids for free.

⬇ Direct Download Free MV3 (.zip · 29.9 KB) Open On-Page ARIA/CSV Workbench → ➕ Install Free from Chrome Web Store

Free Magnet 02 · Chrome MV3 Active-Tab Inspector

100% FREE FOREVER (£0)

FaultyPacket Security, DNS & PHP2Shell Inspector

£0 100% Free Forever · Full DoH, Header & CVE Triage + HTML Report Export

1-click active-tab inspection of live HTTP security headers (HSTS, CSP, X-Frame-Options), live DoH SPF/DMARC status, and exposed X-Powered-By: PHP banners vulnerable to CVE-2026-109618 — including unlocked client HTML security report export at £0.

⬇ Direct Download Free MV3 (.zip · 31.5 KB) Read PHP2Shell Advisory → ➕ Install Free from Chrome Web Store

DONE-FOR-YOU 100% ASYNC AUDITS & FIX PACKS · DIRECT OR VIA FIVERR (@faultypacket)

Zero Calls · Zero Server Logins · 24h Delivery

Compare Instant Self-Serve Website ZIPs (£12–£39) vs. Custom “Done-For-You” 24h Engineering on Fiverr (@faultypacket · $15–$175)

Whether you want an Instant 0-Second Self-Serve Template ZIP (£12–£39 via PayPal on this website) where you fill in your own domain, or a Custom “Done-For-You” 24h Engineering Engagement ($15–$175 on fiverr.com/faultypacket) where our engineers probe your live domain(s) and custom-write every record and scorecard for you:

TWO SIMPLE WAYS TO FIX IT · £5–£39 INSTANT ZIP OR $15+ DONE-FOR-YOU ON FIVERR 100% Transparent Pricing · Zero Calls Required

⚡ Option 1: Buy on This Website via PayPal (£12–£29 Single Pack · £39 Complete 4-Pack Compliance & Web Shield Bundle)

Instant 0-Second Self-Serve Template ZIP. You immediately download our unencrypted production scripts, MU-plugins, server configs, and templates, and you fill in your own domain name using our 3-minute Quick-Start guide. Lowest flat price because no custom engineer time is required.

🛠️ Option 2: Order on Fiverr ($15–$175 · Basic / Standard / Premium Tiers)

Custom “Done-For-You” 24h Engineering. Why Fiverr costs more: our engineers run a deep external server & DNS probe on your live domain(s) and custom-write every record and config file specifically for your domain, IPs, and mail/payment stack—ready to paste with zero editing. Includes a custom 0–100 Executive HTML Scorecard written for your company, multi-domain tiers (1–5 domains or 25–250 suppliers), live post-fix verification, and all 4 Packs (£84 value) free on Premium.

Gig #1 · Domain DMARC, SPF, DKIM & MTA-STS Audit + DNS Fix Pack£24 Self-Serve ZIP · US$25 / US$35 / US$50 Fiverr

Full RFC 7489/7208/8461 external audit (SPF, DMARC, DKIM, MTA-STS, TLS-RPT, CAA) + Cloudflare/BIND/M365 DNS Fix ZIP (incl. Google/Yahoo 550 5.7.26 bulk-sender compliance).

⚡ £24 Website ZIP (Self-Serve): Instant download of generic DNS templates, 10-page PDF handbook & Python CLI scanner (you plug in your domain).

🛠️ US$25 / US$35 / US$50 Fiverr (Done-For-You): We audit 1 domain ($25), 3 domains + MTA-STS ($35), or 5 domains + Live Post-Fix Re-Scan + All 4 Packs ($50) & write your exact DNS records + custom Executive HTML Scorecard.

🛠️ Order Done-For-You Custom Audit on Fiverr (US$25 / US$35 / US$50) → ⚡ Or Buy Self-Serve Template ZIP — £24 (Instant PayPal Download)

Gig #2 · WP, WooCommerce & PHP2Shell Hardening£12 WP / £24 PHP ZIP · US$15 / US$30 / US$55 Fiverr

Zero-login WordPress/WooCommerce /wp-json/wp/v2/users, xmlrpc.php, PCI-DSS v4.0.1 CSP & wp_mail() 550-5.7.26 rescue + PHP2Shell (CVE-2026-109618) FastCGI/CGI lockdown, MU-plugins & Cloudflare WAF ZIP.

⚡ £12 WP Pack (or £24 PHP Pack) on Website (Self-Serve): Instant 11-file drop-in MU-plugin, Nginx/Apache, Cloudflare WAF & SMTP rescue ZIP (you drop onto your server).

🛠️ US$15 / US$30 / US$55 Fiverr (Done-For-You): We run a live external HTTP/DNS probe on your site, pre-fill your domain’s exact configs & custom Scorecard ($15 1-Site WP/Email · $30 Full WP + PHP2Shell Lockdown · $55 3-Site + Re-Scan + All 4 Packs).

🛠️ Order Done-For-You Custom Fix on Fiverr (US$15 / US$30 / US$55) → ⚡ Or Buy Self-Serve WP Shield ZIP — £12 (Instant PayPal Download)

Gig #3 · Cyber Essentials v3.3 (“Danzell”) & Entra ID Pre-Audit£29 Self-Serve ZIP · US$35 / US$55 / US$85 Fiverr

Mandatory April 2026 NCSC/IASME v3.3 gap analysis (cloud MFA anti-spoofing, passwordless readiness, 1-day leaver SLA, Device Code block) + offline Graph PowerShell collector & IASME model answers.

⚡ £29 Website ZIP (Self-Serve): Instant download of our offline Graph PowerShell collector, IASME v3.3 Editable Response Guidance & Templates & 1-Day Leaver SOP.

🛠️ US$35 / US$55 / US$85 Fiverr (Done-For-You): We run your external v3.3 boundary pre-audit ($35 1-Domain · $55 3-Domain + Custom Entra/MFA Plan · $85 5-Domain + Assessor Sign-Off Dossier + All 4 Packs) & write your custom Gap Report.

🛠️ Order Done-For-You Pre-Audit on Fiverr (US$35 / US$55 / US$85) → ⚡ Or Buy Self-Serve CE v3.3 Pack ZIP — £29 (Instant PayPal Download)

Gig #4 · NIS2 Art. 21 & DORA 25–250 Supplier Bulk Security Audit£19 Self-Serve CLI · US$50 / US$95 / US$175 Fiverr

Automated non-intrusive posture audit of up to 25, 100, or 250 vendor domains + board-ready HTML Executive Dossier, risk-scored CSV register, 30-day vendor remediation notices & Python CLI scanner.

⚡ £19 Website ZIP (Self-Serve CLI): Instant download of our Python 3 Bulk Supplier CLI Scanner & CSV templates to run vendor scans yourself on your own machine.

🛠️ US$50 / US$95 / US$175 Fiverr (Done-For-You Managed Batch Audit): Send us your vendor list—we scan 25 ($50), 100 ($95), or 250 ($175) supplier domains for you & deliver a finished Art. 21/28 Board HTML Dossier, Risk-Scored CSV + All 4 Packs included.

🛠️ Order Done-For-You 25–250 Vendor Audit on Fiverr (US$50 / US$95 / US$175) → ⚡ Or Buy Self-Serve Bulk CLI Pack — £19 (Instant PayPal Download)

⚡ Specialist Bench Services Also Available Direct or on Request: (#5) Cloudflare WAF Rules, CSP, HSTS & Grade A+ Security Headers ($25/$40/$60) · (#6) Google & Yahoo Bulk Sender DMARC/SPF/DKIM 24h Rejections Fix (US$25 / US$35 / US$50) · (#7) Entra ID Conditional Access & Intune Hardening Policy Pack (US$35 / US$55 / US$85).

⚡ 100% Asynchronous Delivery (Zero Meetings Required): All Fiverr gigs and compliance packs are delivered as self-contained, board-ready HTML executive reports + copy-paste DNS/server configs via Fiverr or [email protected]—no sales calls or calendar bloat.

100% FREE FOREVER · NO POPUPS · NO SIGNUPS

Saved you an afternoon of headaches? Buy me a coffee. ☕

I built these scanners and Chrome extensions so you can get instant answers without booking a sales call or handing over your email—if they just saved your day, a coffee keeps the late-night builds going.

☕ Buy Adam a £5.00 Coffee via PayPal →

INSTANT DOWNLOAD VAULT · ZERO WAITING

Download Your Packs & Free Chrome Extensions

Completed a PayPal checkout? PayPal returns you here automatically to download your ZIP archive. You can also enter the 17-character Transaction ID from your PayPal receipt (or the redemption key we emailed you) below at any time. Both of our Chrome MV3 extensions are unlocked below 100% Free Forever.

💡 Paid via PayPal? You're redirected here automatically after checkout—or enter the Transaction ID from your PayPal receipt (or your emailed redemption key) ([email protected]) to unlock anytime.

Archive / Deliverable	Tier & Price	Size	SHA-256 Checksum & Action
faultypacket-table-exporter-mv3.zip	100% FREE	29.9 KB	`e6c33c716001d3f0…` · Download Free ZIP
faultypacket-security-inspector-mv3.zip	100% FREE	31.5 KB	`838b2fdfe7231898…` · Download Free ZIP
faultypacket-complete-3pack-compliance-bundle-v1.zip	£39 BUNDLE	745.7 KB	`1699f1e3ea29eaf7…` · Unlock (£39 Save £45 vs buying all 4 separately)
faultypacket-cyber-essentials-v33-pack-v1.zip	£29 PACK	169.4 KB	`f29c08cddae49c0d…` · Unlock (£29)
fp-vault-9f4c8a2e71b305d6-uk-remediation-pack-2026-v1.zip	£24 PACK	388.6 KB	`23db63af91ce9a67…` · Unlock (£24)
faultypacket-nis2-dora-supplier-pack-v1.zip	£19 PACK	161.3 KB	`5adc39644c82e34e…` · Unlock (£19)
faultypacket-wordpress-woocommerce-shield-pack-v1.zip	£12 PACK	19.9 KB	`3dbb265dc3247735…` · Unlock (£12)

FREE INTERACTIVE TOOLS & STEP-BY-STEP GUIDES

6 Free Browser Scanners & Fix Blueprints

Run any diagnostic below in your browser with zero login—written from real hands-on UK & European infrastructure experience.

Flagship Investigation · GDPR Art. 44 & NIS2 Art. 21

External _dmarc Telemetry Routing in Shops, CRMs & Law Firms (GDPR Art. 28/44 & NIS2)

"76.6% of the 738,611+ audited organisations we audited told Gmail and Outlook to email daily sending maps and failure headers to an outside vendor—while 36 household brands still sit on p=none." — Adam

Plain-English 3-part breakdown of how rua= and ruf= leak Shopify/WooCommerce order headers and HubSpot/Salesforce stacks to US clouds—plus the 60-second sovereign fix & Boss KPI Brag Sheet.

🛒 Shop & CRM _dmarc Sovereignty Guide → 📘 Business Building 101: DNS & MX Setup → Read Shop & CRM _dmarc Telemetry Investigation →

Live Flaw Finder · WordPress, WooCommerce & PCI-DSS v4.0.1

WordPress, WooCommerce & Web Flaw Finder + wp_mail Rescue

"I built this after seeing countless UK SMEs lose customer receipts and contact-form enquiries to Gmail/M365 550-5.7.26 rejections while leaving /wp-json and xmlrpc.php wide open." — Adam

Diagnose WooCommerce & Contact Form 7 550-5.7.26 email drops, /wp-json/wp/v2/users enumeration, xmlrpc.php amplification, and PCI-DSS v4.0.1 checkout CSP headers with zero wp-admin access.

Launch WP & WooCommerce Flaw Finder →

Interactive Scorer · NCSC / IASME Apr 2026

Cyber Essentials v3.3 ("Danzell") Pre-Audit Blocker Scorer

"Born directly from preparing multi-site UK & European Microsoft 365 / Intune estates for cyber-security audits without paying external pre-assessors." — Adam

Score your tenant across all 6 mandatory v3.3 pillars (Cloud Scope, Admin MFA, 14-Day Patching, 1-Day Leaver Revocation, Admin Separation & Host Firewalls) and export a free pre-audit CSV.

Launch CE v3.3 Readiness Scorer →

Live 5-Domain DoH Tool · EU NIS2 & DORA

NIS2 & DORA Third-Party Supplier Posture Batch Auditor

"Managing IT across the UK, Ireland, and 4 Nordic countries meant needing fast, verifiable supplier DNS/TLS posture evidence without enterprise portal bloat." — Adam

Audit up to 5 supplier domains concurrently in your browser via Cloudflare 1.1.1.1 DoH for SPF, DMARC, MX, MTA-STS & CAA and export a free Article 21/28 CSV register.

Launch 5-Domain Supplier Auditor →

Advisory · CVE-2026-109618 & CVE-2026-109619

PHP2Shell RCE Triage & Server Lockdown Guide

How crafted CGI/FastCGI stream parameters trigger unauthenticated RCE on PHP < 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, exact access-log IOC grep patterns, and Nginx/Apache/IIS perimeter rules.

Read PHP2Shell Remediation Guide →

Blueprint · RFC 7489 / NIST SP 800-177 / CE v3.3

Zero-Downtime DMARC p=reject, SPF & MTA-STS Rollout

How to transition from p=none to strict p=reject across Microsoft 365, Google Workspace, SendGrid & HubSpot without blocking legitimate mail, plus fixing the SPF 10-lookup limit.

Read DMARC & SPF Engineering Guide →

Interactive Workbench · OWASP CWE-1236

Exporting Virtualized ARIA Grids & Blocking CSV Injection

"I wrote this Chrome extension after Microsoft Entra ID and Intune virtualised grids kept truncating row exports when pulling audit evidence." — Adam

Paste raw HTML, virtualized [role="grid"] DOM snippets, or JSON logs into our free on-page workbench to strip =cmd|... payloads and download our 100% Free Chrome MV3 Exporter.

Open ARIA Grid & CSV Workbench →

TURN THE FIX INTO EVIDENCE

Management Summary, Cost Comparison & Before/After Verification

Compare your current or quoted recurring DMARC/DNS SaaS spend against a one-off configuration pack, or record a measured pre-fix DNS baseline before updating your records.

1. MONTHLY SAAS SPEND (£ GBP / MO)

User-entered assumption (£15–£500/mo)

2. DOMAINS & ONE-OFF PACK TIER

One-off GBP checkout • £0/mo recurring

3. ESTIMATED COST DIFFERENCE

1-Yr: £516 · 3-Yr: £1,596

Based on £540/yr (£1,620 / 3 yrs) vs £24 one-off pack.

Measured Before → After Verification: Run a live scan above, save the measured baseline before editing DNS, then rescan after propagation to generate a timestamped comparison.

BUILT BY A PRACTITIONER

Independent UK Infrastructure & Security Lab

FaultyPacket is an independent UK technical lab built around practical infrastructure, security and automation problems. Every scanner check runs client-side or over public DNS, and every remediation pack ships as inspectable scripts and templates you own outright.

About Adam & FaultyPacket →

OPT-IN MONITORING

Free Monthly DNS Drift Alert

Opt in for a monthly check on your domain if your DMARC policy, SPF lookup count (>10), or MTA-STS record changes. No cold emails.

FOR MSPS & AGENCIES

Multi-Client & White-Label Licensing

Need to run our CLI auditors and remediation templates across multiple client domains under your own consultancy brand?

Get Complete 4-Pack Bundle (£39) Multi-domain Fiverr packages →

📘 FaultyPacket Internet Mail Security Observatory — Methodology, Scope & Correction Policy (v2.2 · Oct 2026)Reproducible Public DNS Evidence

Empirical Observation vs. Legal Assessment: All statistics published by the FaultyPacket Internet Mail Security Observatory (including our 338-Domain Regulated Benchmark and our rolling 10-Million-Domain Census, currently at 738,611+ domains audited) are derived from live, reproducible public DNS queries (_dmarc, SPF, MX, _mta-sts, _smtp._tls, CAA, and DNSSEC) via Cloudflare 1.1.1.1 and multi-resolver verification. Lookups that return network timeouts or SERVFAIL are classified as UNASSESSED and excluded from percentage denominators. Routing DMARC reports to a third-party or US-headquartered vendor is a technical observation from public DNS (rua= / ruf=), not an automatic legal determination under GDPR Article 44 or NIS2 Article 21; organisations should review their own transfer mechanisms (such as DPF/SCCs and processor DPAs) or route reports directly to an internal UK/EU mailbox to eliminate third-party processor overhead altogether.

Live Re-Verification & Corrections: Any domain owner who updates their DNS records can verify their live posture immediately using the FaultyPacket 20-Lookup SuperTool or request a dataset refresh at [email protected]. Raw datasets: 10M Observatory Hub · 338-Domain Study JSON · 10M Observatory Live JSON.