Global SecOps & Infrastructure Hardening · NIST · ISO 27001 · Cyber Essentials v3.3 ("Danzell")

Find the flaw for free. Deploy the fix in minutes.

Run a live DMARC, SPF, MTA-STS, TLS-RPT and CAA posture audit on any domain worldwide (.com, .io, .org, .co.uk, .de, .au) in seconds, or check your PHP runtime exposure against October 2026 RCE advisories (CVE-2026-109618). Free browser diagnostics; practitioner-grade remediation packs ready to download immediately after checkout.

✓ Live 1.1.1.1 DoH Audit ✓ Zero Sign-Up / Telemetry ✓ NIST / ISO / CE v3.3 ("Danzell") ✓ Instant ZIP Delivery
73% UnenforcedOf audited UK North West legal & accountancy domains lack p=reject DMARC
CVE-2026-109618Critical PHP2Shell RCE affecting unpatched PHP < 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35
< 30 MinsZero-downtime rollout using our pre-built DNS, Nginx, Apache, IIS & PHP templates
// FREE DIAGNOSTIC 01 · LIVE DNS AUDIT

Live Global Domain, DMARC, SPF & MTA-STS Scanner

Queries public DNS over HTTPS for strict SPF (-all), DMARC enforcement (p=reject), MX gateway resilience, MTA-STS TLS enforcement, TLS-RPT reporting and CAA certificate locks.

// FREE DIAGNOSTIC 02 · PHP2SHELL RCE TRIAGE

Interactive PHP2Shell RCE & Perimeter Exposure Matrix

Disclosed in October 2026, PHP2Shell (CVE-2026-109618 & CVE-2026-109619) allows unauthenticated remote code execution via crafted CGI/FastCGI stream parameters on unpatched PHP runtimes. Tap your server's PHP branch and perimeter gateway below to verify patch status and required lockdown templates:

1. Select Installed PHP Runtime
2. Select Web Server / Perimeter Gateway
// ZERO SUBSCRIPTION BLOAT · FREE EXTENSIONS + IMPULSE-PRICED COMPLIANCE PACKS

Why Are Our Prices 90% Lower? (Our Zero-SaaS Economics)

We give away both of our daily-use Chrome MV3 security extensions and all 5 live browser diagnostics 100% Free Forever to build practitioner trust, and price our offline Compliance & Remediation ZIP Packs at £19–£29 (or £39 for all three) so any sysadmin, MSP, or IT Director can expense them instantly without a PO.

Why Our Prices Are 90% Lower Than Legacy Security Vendors (2026 Economics) Strictly Under £50 / $65 Corporate Expense Card Limit
1. £0 Cloud Hosting Bloat 100% Local Run

Legacy SaaS charges £600–£12,000/yr to run basic DNS/Graph checks on AWS. Our Python, PowerShell & DoH tools run locally on your machine at £0 cloud overhead.

2. £0 SDR & Demo Bloat Live Proof First

Enterprise vendors spend 60%+ of revenue on sales commissions. Our free live scanners and Dummy-Data Output Previews prove engineering quality in 10 seconds.

3. Retest & SaaS Alternative $400–$15,000/yr

A single failed IASME Cyber Essentials v3.3 retest costs £320+ VAT, DMARC SaaS costs £600/yr, and supply-chain portals cost $15k/yr.

FaultyPacket Model £0 Ext · £19–£39 Packs

Built once by practitioners, sold at scale. 100% Free Chrome MV3 extensions; £19–£29 standalone compliance packs or £39 for all 3 packs (Save 46%).

// SEE PROOF BEFORE YOU BUY · LIVE DUMMY-DATA OUTPUT INSPECTOR

Don't Trust Claims Blindly — Inspect Real Outputs From Our Packs (Dummy Tenant: Acme UK Ltd)

Tap any tab below to inspect the exact Executive Board HTML Report, PowerShell/Python CLI terminal output, Auditor CSV columns, and production Nginx/IASME templates before spending a penny:

// STANDALONE COMPLIANCE & REMEDIATION ZIP PACKS (OR GET ALL 3 FOR £39 ABOVE)
Pack 02 · RFC 7489 & CVE-2026-109618

Domain, Email Auth (DMARC/SPF/MTA-STS) & PHP2Shell Pack

£24 ~$30 USD / €28 EUR · Was £49

Less than 2 weeks of a £50/mo DMARC SaaS subscription

  • 10-Page 2026 PDF Handbook: Zero-downtime DMARC p=none → p=reject rollout, SPF flattening, 2048-bit DKIM & MTA-STS
  • Python 3 CLI Domain Auditor: Generates board-ready HTML reports offlinetools/faultypacket_uk_auditor.py
  • PHP2Shell Forensic Triage + 6 Configs: Bash IOC hunter + Cloudflare, Nginx, Apache, IIS, php.ini & MTA-STS templates
Pack 03 · EU NIS2 Art. 21 & DORA Art. 28

NIS2, DORA & ISO 27001 Supplier Posture Bulk Auditor Pack

£19 ~$24 USD / €22 EUR · Was £39

Audit 1,000+ suppliers offline vs. $15,000/yr BitSight/UpGuard

  • Unlimited Python 3 Bulk Scanner: Batch-audits SPF, DMARC, MX, MTA-STS, TLS-RPT, CAA & security.txt (`0–100` Grade A–F)nis2_supplier_auditor.py --demo
  • Art. 21 / Art. 28 ICT Register CSV: Ready for NIS2, DORA & ISO 27001 A.5.19–5.22 external audits
  • 30-Day Vendor Remediation Notices: Copy-paste supplier outreach templates & PDF Handbook
// 100% FREE FOREVER COMMUNITY EXTENSIONS · ZERO PAYWALL · ZERO TELEMETRY
Free Magnet 01 · Chrome MV3 + Web Workbench
100% FREE FOREVER (£0)

FaultyPacket Table & ARIA Grid CSV Exporter

£0 100% Free Forever · Unlimited CSV & Clipboard Exports · Zero Paywall

Extracts both standard HTML tables and virtualized ARIA data grids ([role="grid"]) from Microsoft Entra ID, Intune, Defender, ServiceNow & Jira. Automatically neutralises OWASP CSV Formula Injection (=cmd|...), preserves UK 07... leading zeros, and batch-exports all grids for free.

Free Magnet 02 · Chrome MV3 Active-Tab Inspector
100% FREE FOREVER (£0)

FaultyPacket Security, DNS & PHP2Shell Inspector

£0 100% Free Forever · Full DoH, Header & CVE Triage + HTML Report Export

1-click active-tab inspection of live HTTP security headers (HSTS, CSP, X-Frame-Options), live DoH SPF/DMARC status, and exposed X-Powered-By: PHP banners vulnerable to CVE-2026-109618 — including unlocked client HTML security report export at £0.

// DONE-FOR-YOU 100% ASYNC AUDITS & FIX PACKS · DIRECT OR VIA FIVERR (@faultypacket)
Zero Calls · Zero Server Logins · 24h Delivery

Want Us to Run the Audit for You? Order Direct Here (Save 20% Marketplace Fees) or via Our Official Fiverr Storefront (@faultypacket)

Every service in our Fiverr 4/4 Active Roster & Specialist Bench (fiverr.com/faultypacket) is mirrored 1:1 on faultypacket.co.uk. Just send us your public domain name(s)—no passwords, screen-shares, or phone calls required—and receive your custom Board-Ready Executive HTML Scorecard + Ready-to-Import Remediation Pack ZIP:

Gig #1 · Domain DMARC, SPF, DKIM & MTA-STS Audit + DNS Fix Pack£19 Direct · $25/$35/$50 Fiverr

Full RFC 7489/7208/8461 external audit (SPF, DMARC, DKIM, MTA-STS, TLS-RPT, CAA) + custom Executive HTML Scorecard + Cloudflare/BIND/M365 DNS Fix ZIP (incl. Google/Yahoo bulk-sender compliance).

Gig #2 · PHP2Shell (CVE-2026-109618) & Web Server Hardening Audit£24 Direct · $30/$45/$65 Fiverr

External PHP runtime exposure, FastCGI/CGI RCE surface (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), Cloudflare WAF & Grade A+ CSP/HSTS header audit + Bash IOC hunter & Nginx/Apache/IIS/php.ini lockdown ZIP.

Gig #3 · Cyber Essentials v3.3 ("Danzell") & Entra ID Pre-Audit£29 Direct · $35/$55/$85 Fiverr

5-Pillar NCSC/IASME v3.3 external boundary pre-audit + offline Entra ID Graph PowerShell Collector, Conditional Access & Intune hardening JSON policies, IASME Model Answer Bank & 1-Day Leaver SOP.

Gig #4 · NIS2 Art. 21 & DORA 25–250 Supplier Bulk Security Audit£39 Direct · $50/$95/$175 Fiverr

Done-for-you batch audit of 25, 100, or 250 supplier domains (0–100 Risk-Scored CSV/JSON Matrix + Article 21(2)(d) Executive Board HTML Summary + 30-Day Vendor Notices) PLUS all 3 full FaultyPacket Compliance ZIP Packs.

⚡ Specialist Bench Services Also Available Direct or on Request: (#5) Cloudflare WAF Rules, CSP, HSTS & Grade A+ Security Headers ($25/$40/$60) · (#6) Google & Yahoo Bulk Sender DMARC/SPF/DKIM 24h Rejections Fix ($25/$35/$50) · (#7) Entra ID Conditional Access & Intune Hardening Policy Pack ($35/$55/$85).
// INDEPENDENT LAB FUND · 100% FREE EXTENSIONS & DIAGNOSTICS · ZERO TELEMETRY

Did a Free Extension or Diagnostic Just Save You a Ticket Escalation, a £320 Retest, or an Hour in PowerShell?

Why is this tip jar here? Because we made both of our Chrome MV3 extensions (Table & Grid Exporter and Security, DNS & PHP2Shell Inspector) plus all 5 live browser diagnostics 100% Free Forever instead of charging $12/mo SaaS fees or harvesting your email into a CRM. If our free tools saved you time today, fuel independent zero-telemetry engineering:

☕ Fuel the Lab with £5.00 via PayPal →
// INDEPENDENT LAB FUND · 100% FREE EXTENSIONS & DIAGNOSTICS · ZERO TELEMETRY

Did a Free Extension or Diagnostic Just Save You a Ticket Escalation, a £320 Retest, or an Hour in PowerShell?

Why is this tip jar here? Because we made both of our Chrome MV3 extensions (Table & Grid Exporter and Security, DNS & PHP2Shell Inspector) plus all 5 live browser diagnostics 100% Free Forever instead of charging $12/mo SaaS fees or harvesting your email into a CRM. If our free tools saved you time today, fuel independent zero-telemetry engineering:

☕ Fuel the Lab with £5.00 via PayPal →
// INSTANT SELF-SERVICE DELIVERY · SHA-256 VERIFIED ARCHIVES

Instant Delivery Vault & Free Extension Downloads

Completed a PayPal checkout? You are redirected here automatically (`?unlocked=bundle2026`, `ce33`, `pack2026`, or `nis2`) to download your ZIP archive immediately. Both of our Chrome MV3 extensions are unlocked below 100% Free Forever.

Archive / DeliverableTier & PriceSizeSHA-256 Checksum & Action
faultypacket-table-exporter-mv3.zip 100% FREE 6.9 5b322a4d6048e9be… · Download Free ZIP
faultypacket-security-inspector-mv3.zip 100% FREE 7.9 54f9e8f30357f987… · Download Free ZIP
faultypacket-complete-3pack-compliance-bundle-v1.zip £39 BUNDLE 699.7 9ae30df11da54fca… · Unlock (£39 Save 46%)
faultypacket-cyber-essentials-v33-pack-v1.zip £29 PACK 164.2 fb28c4f4717d20aa… · Unlock (£29)
fp-vault-9f4c8a2e71b305d6-uk-remediation-pack-2026-v1.zip £24 PACK 383.4 45f5be0223aa0861… · Unlock (£24)
faultypacket-nis2-dora-supplier-pack-v1.zip £19 PACK 154.2 9e8a57066ddc5f67… · Unlock (£19)
// PRACTITIONER KNOWLEDGE BASE · 5 FREE INTERACTIVE DIAGNOSTICS & BLUEPRINTS

Deep-Dive Advisories & Live Browser Diagnostics

Step-by-step engineering guides and free browser tools for SecOps teams, sysadmins and MSPs across the UK, Europe, North America and APAC.

Advisory · CVE-2026-109618 & CVE-2026-109619

PHP2Shell RCE Triage & Server Lockdown Guide

How crafted CGI/FastCGI stream parameters trigger unauthenticated RCE on PHP < 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, exact access-log IOC grep patterns, and Nginx/Apache/IIS perimeter rules.

Blueprint · RFC 7489 / NIST SP 800-177 / CE v3.3

Zero-Downtime DMARC p=reject, SPF & MTA-STS Rollout

How to transition from p=none to strict p=reject across Microsoft 365, Google Workspace, SendGrid & HubSpot without blocking legitimate mail, plus fixing the SPF 10-lookup limit.

Interactive Workbench · OWASP CWE-1236

Exporting Virtualized ARIA Grids & Blocking CSV Injection

Paste raw HTML, virtualized [role="grid"] DOM snippets, or JSON logs into our free on-page workbench to strip =cmd|... payloads and download our 100% Free Chrome MV3 Exporter.