Find the flaw for free. Deploy the fix in minutes.
Run a live DMARC, SPF, MTA-STS, TLS-RPT and CAA posture audit on any domain worldwide (.com, .io, .org, .co.uk, .de, .au) in seconds, or check your PHP runtime exposure against October 2026 RCE advisories (CVE-2026-109618). Free browser diagnostics; practitioner-grade remediation packs ready to download immediately after checkout.
Live Global Domain, DMARC, SPF & MTA-STS Scanner
Queries public DNS over HTTPS for strict SPF (-all), DMARC enforcement (p=reject), MX gateway resilience, MTA-STS TLS enforcement, TLS-RPT reporting and CAA certificate locks.
p=none / report-only) before production rollout. See ICO/GDPR Privacy Notice, Reg. 37 Digital Terms & Liability Cap (£0–£39).Domain Email & TLS Posture
Interactive PHP2Shell RCE & Perimeter Exposure Matrix
Disclosed in October 2026, PHP2Shell (CVE-2026-109618 & CVE-2026-109619) allows unauthenticated remote code execution via crafted CGI/FastCGI stream parameters on unpatched PHP runtimes. Tap your server's PHP branch and perimeter gateway below to verify patch status and required lockdown templates:
Why Are Our Prices 90% Lower? (Our Zero-SaaS Economics)
We give away both of our daily-use Chrome MV3 security extensions and all 6 live browser diagnostics 100% Free Forever to build practitioner trust, and price our offline Compliance, Web & WordPress ZIP Packs at £12–£29 (or £39 for all four — Save £45) so any sysadmin, MSP, or IT Director can expense them instantly without a PO.
Legacy SaaS charges £600–£12,000/yr to run basic DNS/Graph checks on AWS. Our Python, PowerShell & DoH tools run locally on your machine at £0 cloud overhead.
Enterprise vendors spend 60%+ of revenue on sales commissions. Our free live scanners and Dummy-Data Output Previews prove engineering quality in 10 seconds.
A single failed IASME Cyber Essentials v3.3 retest costs £320+ VAT, DMARC SaaS costs £600/yr, and supply-chain portals cost $15k/yr.
Built once by practitioners, sold at scale. 100% Free Chrome MV3 extensions; £12–£29 standalone compliance packs or £39 for all 4 packs (Save 54%).
Don't Trust Claims Blindly — Inspect Real Outputs From Our Packs (Dummy Tenant: Acme UK Ltd)
Tap any tab below to inspect the exact Executive Board HTML Report, PowerShell/Python CLI terminal output, Auditor CSV columns, and production Nginx/IASME templates before spending a penny:
Complete 4-Pack Compliance & Web Shield Bundle (Save £45 — All 4 Packs Included)
Includes all 4 full offline ZIP packs in one instant download: (1) £29 CE v3.3 ("Danzell") & Entra ID Pack + (2) £24 DMARC/SPF/MTA-STS & PHP2Shell Pack + (3) £19 NIS2/DORA Supplier Bulk Auditor Pack + (4) £12 WordPress & WooCommerce Drop-In Security & Email Shield Pack. SHA-256 verified (743.8 KB).
Cyber Essentials v3.3 ("Danzell") & Entra ID Evidence Pack
10% of the cost of a single £320+ VAT IASME retest fee
- Graph PowerShell Collector: Read-only 180-line script auditing Admin separation, MFA, Legacy Auth, >30d dormancy & Intune 14-day patch complianceInvoke-FaultyPacketCEv33Audit.ps1
- Offline Python Evaluator: Generates board-ready HTML scorecards & blocker CSVsevaluate_ce_v33_posture.py --demo
- IASME v3.3 Model Answer Bank & SOPs: Copy-paste answers, Cloud Scope Register CSV, 1-Day Leaver SOP & PDF Handbook
Domain, Email Auth (DMARC/SPF/MTA-STS) & PHP2Shell Pack
Less than 2 weeks of a £50/mo DMARC SaaS subscription
- 10-Page 2026 PDF Handbook: Zero-downtime DMARC
p=none → p=rejectrollout, SPF flattening, 2048-bit DKIM & MTA-STS - Python 3 CLI Domain Auditor: Generates board-ready HTML reports offlinetools/faultypacket_uk_auditor.py
- PHP2Shell Forensic Triage + 6 Configs: Bash IOC hunter + Cloudflare, Nginx, Apache, IIS,
php.ini& MTA-STS templates
NIS2, DORA & ISO 27001 Supplier Posture Bulk Auditor Pack
Audit 1,000+ suppliers offline vs. $15,000/yr BitSight/UpGuard
- Unlimited Python 3 Bulk Scanner: Batch-audits SPF, DMARC, MX, MTA-STS, TLS-RPT, CAA &
security.txt(0–100Grade A–F)nis2_supplier_auditor.py --demo - Art. 21 / Art. 28 ICT Register CSV: Ready for NIS2, DORA & ISO 27001 A.5.19–5.22 external audits
- 30-Day Vendor Remediation Notices: Copy-paste supplier outreach templates & PDF Handbook
WordPress & WooCommerce Drop-In Security & Email Rescue Pack
Cure WooCommerce & Contact Form 7 550-5.7.26 drops + lock down WP in 3 mins
- Drop-In MU-Plugin Shield: Blocks
/wp-json/wp/v2/usersenumeration, disablesxmlrpc.php, strips?ver=leaks & adds PCI-DSS v4.0.1 checkout CSP headersmu-plugins/faultypacket-wp-shield.php - WooCommerce &
wp_mailSMTP Rescue: Enforces STARTTLS, Return-Path alignment & matchingMessage-IDdomainsmu-plugins/faultypacket-wp-mail-dkim-smtp.php - Edge & Server Configs: Apache/LiteSpeed
.htaccess, Nginx FastCGI rules, Stripe/PayPal-safe Cloudflare WAF rules &verify-wp-posture.sh
FaultyPacket Table & ARIA Grid CSV Exporter
Extracts both standard HTML tables and virtualized ARIA data grids ([role="grid"]) from Microsoft Entra ID, Intune, Defender, ServiceNow & Jira. Automatically neutralises OWASP CSV Formula Injection (=cmd|...), preserves UK 07... leading zeros, and batch-exports all grids for free.
FaultyPacket Security, DNS & PHP2Shell Inspector
1-click active-tab inspection of live HTTP security headers (HSTS, CSP, X-Frame-Options), live DoH SPF/DMARC status, and exposed X-Powered-By: PHP banners vulnerable to CVE-2026-109618 — including unlocked client HTML security report export at £0.
Compare Instant Self-Serve Website ZIPs (£12–£39) vs. Custom “Done-For-You” 24h Engineering on Fiverr (@faultypacket · $15–$175)
Whether you want an Instant 0-Second Self-Serve Template ZIP (£12–£39 via PayPal on this website) where you fill in your own domain, or a Custom “Done-For-You” 24h Engineering Engagement ($15–$175 on fiverr.com/faultypacket) where our engineers probe your live domain(s) and custom-write every record and scorecard for you:
Instant 0-Second Self-Serve Template ZIP. You immediately download our unencrypted production scripts, MU-plugins, server configs, and templates, and you fill in your own domain name using our 3-minute Quick-Start guide. Lowest flat price because no custom engineer time is required.
Custom “Done-For-You” 24h Engineering. Why Fiverr costs more: our engineers run a deep external server & DNS probe on your live domain(s) and custom-write every record and config file specifically for your domain, IPs, and mail/payment stack—ready to paste with zero editing. Includes a custom 0–100 Executive HTML Scorecard written for your company, multi-domain tiers (1–5 domains or 25–250 suppliers), live post-fix verification, and all 4 Packs (£84 value) free on Premium.
Gig #1 · Domain DMARC, SPF, DKIM & MTA-STS Audit + DNS Fix Pack£24 Self-Serve ZIP · $25/$35/$50 Fiverr
Full RFC 7489/7208/8461 external audit (SPF, DMARC, DKIM, MTA-STS, TLS-RPT, CAA) + Cloudflare/BIND/M365 DNS Fix ZIP (incl. Google/Yahoo 550 5.7.26 bulk-sender compliance).
Gig #2 · WordPress, WooCommerce & PHP2Shell Web Server Hardening£12 WP / £24 PHP ZIP · $15/$30/$55 Fiverr
Zero-login WordPress/WooCommerce /wp-json/wp/v2/users, xmlrpc.php, PCI-DSS v4.0.1 CSP & wp_mail() 550-5.7.26 rescue + PHP2Shell (CVE-2026-109618) FastCGI/CGI lockdown, MU-plugins & Cloudflare WAF ZIP.
Gig #3 · Cyber Essentials v3.3 (“Danzell”) & Entra ID Pre-Audit£29 Self-Serve ZIP · $35/$55/$85 Fiverr
Mandatory April 2026 NCSC/IASME v3.3 gap analysis (cloud MFA anti-spoofing, passwordless readiness, 1-day leaver SLA, Device Code block) + offline Graph PowerShell collector & IASME model answers.
Gig #4 · NIS2 Art. 21 & DORA 25–250 Supplier Bulk Security Audit£19 Self-Serve CLI · $50/$95/$175 Fiverr
Automated non-intrusive posture audit of up to 25, 100, or 250 vendor domains + board-ready HTML Executive Dossier, risk-scored CSV register, 30-day vendor remediation notices & Python CLI scanner.
Did a Free Extension or Diagnostic Just Save You a Ticket Escalation, a £320 Retest, or an Hour in PowerShell?
Why is this tip jar here? Because we made both of our Chrome MV3 extensions (Table & Grid Exporter and Security, DNS & PHP2Shell Inspector) plus all 5 live browser diagnostics 100% Free Forever instead of charging $12/mo SaaS fees or harvesting your email into a CRM. If our free tools saved you time today, fuel independent zero-telemetry engineering:
Instant Delivery Vault & Free Extension Downloads
Completed a PayPal checkout? You are redirected here automatically (?unlocked=bundle2026, ce33, pack2026, nis2, or wp12) to download your ZIP archive immediately. Both of our Chrome MV3 extensions are unlocked below 100% Free Forever.
💡 Paid via PayPal? You're redirected here automatically after checkout—or enter the redemption key from your receipt / email ([email protected]) to unlock anytime.
✓ Complete 4-Pack Compliance & Web Shield Bundle Unlocked (£39 — Save £45)
Download your master 4-Pack Bundle ZIP or individual packs below (SHA-256: 51924285f0e98877ce89287bf978db54f08963f39ce45b557eb8bb5e147eee54):
✓ Cyber Essentials v3.3 ("Danzell") & Entra ID Pack Unlocked (£29)
SHA-256: 706c8be1d9ce82f539e18c02b835c0e1ad850b4e6ab95ce1aed5b85ee3ba62e6
✓ Domain, Email Auth & PHP2Shell Remediation Pack Unlocked (£24)
SHA-256: 23db63af91ce9a67ee8245e8235e5e40780241dbbc0744e0396c18997f703e3c
✓ NIS2 & DORA Supplier Posture Bulk Auditor Pack Unlocked (£19)
SHA-256: 3bfc5e2b65eb4e10de85390b1bbdf123627e4695ebd69f6beec2eab6b879c262
✓ WordPress & WooCommerce Drop-In Security & Email Shield Pack Unlocked (£12)
SHA-256: 3dbb265dc3247735e6dc8898e5dd0d1007b87082755367f1aeedf74334af5a92
| Archive / Deliverable | Tier & Price | Size | SHA-256 Checksum & Action |
|---|---|---|---|
| faultypacket-table-exporter-mv3.zip | 100% FREE | 27.9 KB | cad1bf69a70580cd… · Download Free ZIP |
| faultypacket-security-inspector-mv3.zip | 100% FREE | 28.9 KB | a3f813c635baf9df… · Download Free ZIP |
| faultypacket-complete-3pack-compliance-bundle-v1.zip | £39 BUNDLE | 743.8 KB | 51924285f0e98877… · Unlock (£39 Save 54%) |
| faultypacket-cyber-essentials-v33-pack-v1.zip | £29 PACK | 169.4 KB | 706c8be1d9ce82f5… · Unlock (£29) |
| fp-vault-9f4c8a2e71b305d6-uk-remediation-pack-2026-v1.zip | £24 PACK | 388.6 KB | 23db63af91ce9a67… · Unlock (£24) |
| faultypacket-nis2-dora-supplier-pack-v1.zip | £19 PACK | 159.4 KB | 3bfc5e2b65eb4e10… · Unlock (£19) |
| faultypacket-wordpress-woocommerce-shield-pack-v1.zip | £12 PACK | 19.9 KB | 3dbb265dc3247735… · Unlock (£12) |
Deep-Dive Advisories & Live Browser Diagnostics
Step-by-step engineering guides and free browser tools for SecOps teams, sysadmins and MSPs across the UK, Europe, North America and APAC.
WordPress, WooCommerce & Web Flaw Finder + wp_mail Rescue
Diagnose WooCommerce & Contact Form 7 550-5.7.26 email drops, /wp-json/wp/v2/users enumeration, xmlrpc.php amplification, and PCI-DSS v4.0.1 checkout CSP headers with zero wp-admin access.
Cyber Essentials v3.3 ("Danzell") Pre-Audit Blocker Scorer
Score your tenant across all 6 mandatory v3.3 pillars (Cloud Scope, Admin MFA, 14-Day Patching, 1-Day Leaver Revocation, Admin Separation & Host Firewalls) and export a free pre-audit CSV.
NIS2 & DORA Third-Party Supplier Posture Batch Auditor
Audit up to 5 supplier domains concurrently in your browser via Cloudflare 1.1.1.1 DoH for SPF, DMARC, MX, MTA-STS & CAA and export a free Article 21/28 CSV register.
PHP2Shell RCE Triage & Server Lockdown Guide
How crafted CGI/FastCGI stream parameters trigger unauthenticated RCE on PHP < 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, exact access-log IOC grep patterns, and Nginx/Apache/IIS perimeter rules.
Zero-Downtime DMARC p=reject, SPF & MTA-STS Rollout
How to transition from p=none to strict p=reject across Microsoft 365, Google Workspace, SendGrid & HubSpot without blocking legitimate mail, plus fixing the SPF 10-lookup limit.
Exporting Virtualized ARIA Grids & Blocking CSV Injection
Paste raw HTML, virtualized [role="grid"] DOM snippets, or JSON logs into our free on-page workbench to strip =cmd|... payloads and download our 100% Free Chrome MV3 Exporter.