Global SecOps & Infrastructure Hardening · NIST · ISO 27001 · Cyber Essentials v3.3 ("Danzell")

Find the flaw for free. Deploy the fix in minutes.

Run a live DMARC, SPF, MTA-STS, TLS-RPT and CAA posture audit on any domain worldwide (.com, .io, .org, .co.uk, .de, .au) in seconds, or check your PHP runtime exposure against October 2026 RCE advisories (CVE-2026-109618). Free browser diagnostics; practitioner-grade remediation packs ready to download immediately after checkout.

✓ Live 1.1.1.1 DoH Audit ✓ Zero Sign-Up / Telemetry ✓ NIST / ISO / CE v3.3 ("Danzell") ✓ Instant ZIP Delivery
73% UnenforcedOf audited UK North West legal & accountancy domains lack p=reject DMARC
CVE-2026-109618Critical PHP2Shell RCE affecting unpatched PHP < 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35
< 30 MinsZero-downtime rollout using our pre-built DNS, Nginx, Apache, IIS & PHP templates
// FREE DIAGNOSTIC 01 · LIVE DNS AUDIT

Live Global Domain, DMARC, SPF & MTA-STS Scanner

Queries public DNS over HTTPS for strict SPF (-all), DMARC enforcement (p=reject), MX gateway resilience, MTA-STS TLS enforcement, TLS-RPT reporting and CAA certificate locks.

// FREE DIAGNOSTIC 02 · PHP2SHELL RCE TRIAGE

Interactive PHP2Shell RCE & Perimeter Exposure Matrix

Disclosed in October 2026, PHP2Shell (CVE-2026-109618 & CVE-2026-109619) allows unauthenticated remote code execution via crafted CGI/FastCGI stream parameters on unpatched PHP runtimes. Tap your server's PHP branch and perimeter gateway below to verify patch status and required lockdown templates:

1. Select Installed PHP Runtime
2. Select Web Server / Perimeter Gateway
// ZERO SUBSCRIPTION BLOAT · FREE EXTENSIONS + IMPULSE-PRICED COMPLIANCE PACKS

Why Are Our Prices 90% Lower? (Our Zero-SaaS Economics)

We give away both of our daily-use Chrome MV3 security extensions and all 6 live browser diagnostics 100% Free Forever to build practitioner trust, and price our offline Compliance, Web & WordPress ZIP Packs at £12–£29 (or £39 for all four — Save £45) so any sysadmin, MSP, or IT Director can expense them instantly without a PO.

Why Our Prices Are 90% Lower Than Legacy Security Vendors (2026 Economics) Strictly Under £50 / $65 Corporate Expense Card Limit
1. £0 Cloud Hosting Bloat 100% Local Run

Legacy SaaS charges £600–£12,000/yr to run basic DNS/Graph checks on AWS. Our Python, PowerShell & DoH tools run locally on your machine at £0 cloud overhead.

2. £0 SDR & Demo Bloat Live Proof First

Enterprise vendors spend 60%+ of revenue on sales commissions. Our free live scanners and Dummy-Data Output Previews prove engineering quality in 10 seconds.

3. Retest & SaaS Alternative $400–$15,000/yr

A single failed IASME Cyber Essentials v3.3 retest costs £320+ VAT, DMARC SaaS costs £600/yr, and supply-chain portals cost $15k/yr.

FaultyPacket Model £0 Ext · £12–£39 Packs

Built once by practitioners, sold at scale. 100% Free Chrome MV3 extensions; £12–£29 standalone compliance packs or £39 for all 4 packs (Save 54%).

// SEE PROOF BEFORE YOU BUY · LIVE DUMMY-DATA OUTPUT INSPECTOR

Don't Trust Claims Blindly — Inspect Real Outputs From Our Packs (Dummy Tenant: Acme UK Ltd)

Tap any tab below to inspect the exact Executive Board HTML Report, PowerShell/Python CLI terminal output, Auditor CSV columns, and production Nginx/IASME templates before spending a penny:

// STANDALONE COMPLIANCE, EMAIL & WORDPRESS ZIP PACKS (OR GET ALL 4 FOR £39 ABOVE — SAVE £45)
Pack 02 · RFC 7489 & CVE-2026-109618

Domain, Email Auth (DMARC/SPF/MTA-STS) & PHP2Shell Pack

£24 ~$30 USD / €28 EUR · Was £49

Less than 2 weeks of a £50/mo DMARC SaaS subscription

  • 10-Page 2026 PDF Handbook: Zero-downtime DMARC p=none → p=reject rollout, SPF flattening, 2048-bit DKIM & MTA-STS
  • Python 3 CLI Domain Auditor: Generates board-ready HTML reports offlinetools/faultypacket_uk_auditor.py
  • PHP2Shell Forensic Triage + 6 Configs: Bash IOC hunter + Cloudflare, Nginx, Apache, IIS, php.ini & MTA-STS templates
Pack 03 · EU NIS2 Art. 21 & DORA Art. 28

NIS2, DORA & ISO 27001 Supplier Posture Bulk Auditor Pack

£19 ~$24 USD / €22 EUR · Was £39

Audit 1,000+ suppliers offline vs. $15,000/yr BitSight/UpGuard

  • Unlimited Python 3 Bulk Scanner: Batch-audits SPF, DMARC, MX, MTA-STS, TLS-RPT, CAA & security.txt (0–100 Grade A–F)nis2_supplier_auditor.py --demo
  • Art. 21 / Art. 28 ICT Register CSV: Ready for NIS2, DORA & ISO 27001 A.5.19–5.22 external audits
  • 30-Day Vendor Remediation Notices: Copy-paste supplier outreach templates & PDF Handbook
// 100% FREE FOREVER COMMUNITY EXTENSIONS · ZERO PAYWALL · ZERO TELEMETRY
Free Magnet 01 · Chrome MV3 + Web Workbench
100% FREE FOREVER (£0)

FaultyPacket Table & ARIA Grid CSV Exporter

£0 100% Free Forever · Unlimited CSV & Clipboard Exports · Zero Paywall

Extracts both standard HTML tables and virtualized ARIA data grids ([role="grid"]) from Microsoft Entra ID, Intune, Defender, ServiceNow & Jira. Automatically neutralises OWASP CSV Formula Injection (=cmd|...), preserves UK 07... leading zeros, and batch-exports all grids for free.

Free Magnet 02 · Chrome MV3 Active-Tab Inspector
100% FREE FOREVER (£0)

FaultyPacket Security, DNS & PHP2Shell Inspector

£0 100% Free Forever · Full DoH, Header & CVE Triage + HTML Report Export

1-click active-tab inspection of live HTTP security headers (HSTS, CSP, X-Frame-Options), live DoH SPF/DMARC status, and exposed X-Powered-By: PHP banners vulnerable to CVE-2026-109618 — including unlocked client HTML security report export at £0.

// DONE-FOR-YOU 100% ASYNC AUDITS & FIX PACKS · DIRECT OR VIA FIVERR (@faultypacket)
Zero Calls · Zero Server Logins · 24h Delivery

Compare Instant Self-Serve Website ZIPs (£12–£39) vs. Custom “Done-For-You” 24h Engineering on Fiverr (@faultypacket · $15–$175)

Whether you want an Instant 0-Second Self-Serve Template ZIP (£12–£39 via PayPal on this website) where you fill in your own domain, or a Custom “Done-For-You” 24h Engineering Engagement ($15–$175 on fiverr.com/faultypacket) where our engineers probe your live domain(s) and custom-write every record and scorecard for you:

// WHY TWO BUYING OPTIONS? · WEBSITE SELF-SERVE ZIP (£12–£39) VS. FIVERR DONE-FOR-YOU ($15–$175) 100% Transparent Pricing · Zero Calls Required
⚡ Option 1: Buy on This Website via PayPal (£12–£29 Single Pack · £39 All-4 Bundle)

Instant 0-Second Self-Serve Template ZIP. You immediately download our unencrypted production scripts, MU-plugins, server configs, and templates, and you fill in your own domain name using our 3-minute Quick-Start guide. Lowest flat price because no custom engineer time is required.

🛠️ Option 2: Order on Fiverr ($15–$175 · Basic / Standard / Premium Tiers)

Custom “Done-For-You” 24h Engineering. Why Fiverr costs more: our engineers run a deep external server & DNS probe on your live domain(s) and custom-write every record and config file specifically for your domain, IPs, and mail/payment stack—ready to paste with zero editing. Includes a custom 0–100 Executive HTML Scorecard written for your company, multi-domain tiers (1–5 domains or 25–250 suppliers), live post-fix verification, and all 4 Packs (£84 value) free on Premium.

Gig #1 · Domain DMARC, SPF, DKIM & MTA-STS Audit + DNS Fix Pack£24 Self-Serve ZIP · $25/$35/$50 Fiverr

Full RFC 7489/7208/8461 external audit (SPF, DMARC, DKIM, MTA-STS, TLS-RPT, CAA) + Cloudflare/BIND/M365 DNS Fix ZIP (incl. Google/Yahoo 550 5.7.26 bulk-sender compliance).

⚡ £24 Website ZIP (Self-Serve): Instant download of generic DNS templates, 10-page PDF handbook & Python CLI scanner (you plug in your domain).
🛠️ $25 / $35 / $50 Fiverr (Done-For-You): We audit 1 domain ($25), 3 domains + MTA-STS ($35), or 5 domains + Live Post-Fix Re-Scan + All 4 Packs ($50) & write your exact DNS records + custom Executive HTML Scorecard.

Gig #2 · WordPress, WooCommerce & PHP2Shell Web Server Hardening£12 WP / £24 PHP ZIP · $15/$30/$55 Fiverr

Zero-login WordPress/WooCommerce /wp-json/wp/v2/users, xmlrpc.php, PCI-DSS v4.0.1 CSP & wp_mail() 550-5.7.26 rescue + PHP2Shell (CVE-2026-109618) FastCGI/CGI lockdown, MU-plugins & Cloudflare WAF ZIP.

⚡ £12 WP Pack (or £24 PHP Pack) on Website (Self-Serve): Instant 11-file drop-in MU-plugin, Nginx/Apache, Cloudflare WAF & SMTP rescue ZIP (you drop onto your server).
🛠️ $15 / $30 / $55 Fiverr (Done-For-You): We run a live external HTTP/DNS probe on your site, pre-fill your domain’s exact configs & custom Scorecard ($15 1-Site WP/Email · $30 Full WP + PHP2Shell Lockdown · $55 3-Site + Re-Scan + All 4 Packs).

Gig #3 · Cyber Essentials v3.3 (“Danzell”) & Entra ID Pre-Audit£29 Self-Serve ZIP · $35/$55/$85 Fiverr

Mandatory April 2026 NCSC/IASME v3.3 gap analysis (cloud MFA anti-spoofing, passwordless readiness, 1-day leaver SLA, Device Code block) + offline Graph PowerShell collector & IASME model answers.

⚡ £29 Website ZIP (Self-Serve): Instant download of our offline Graph PowerShell collector, IASME v3.3 Model Answer Bank & 1-Day Leaver SOP.
🛠️ $35 / $55 / $85 Fiverr (Done-For-You): We run your external v3.3 boundary pre-audit ($35 1-Domain · $55 3-Domain + Custom Entra/MFA Plan · $85 5-Domain + Assessor Sign-Off Dossier + All 4 Packs) & write your custom Gap Report.

Gig #4 · NIS2 Art. 21 & DORA 25–250 Supplier Bulk Security Audit£19 Self-Serve CLI · $50/$95/$175 Fiverr

Automated non-intrusive posture audit of up to 25, 100, or 250 vendor domains + board-ready HTML Executive Dossier, risk-scored CSV register, 30-day vendor remediation notices & Python CLI scanner.

⚡ £19 Website ZIP (Self-Serve CLI): Instant download of our Python 3 Bulk Supplier CLI Scanner & CSV templates to run vendor scans yourself on your own machine.
🛠️ $50 / $95 / $175 Fiverr (Done-For-You Managed Batch Audit): Send us your vendor list—we scan 25 ($50), 100 ($95), or 250 ($175) supplier domains for you & deliver a finished Art. 21/28 Board HTML Dossier, Risk-Scored CSV + All 4 Packs included.
⚡ Specialist Bench Services Also Available Direct or on Request: (#5) Cloudflare WAF Rules, CSP, HSTS & Grade A+ Security Headers ($25/$40/$60) · (#6) Google & Yahoo Bulk Sender DMARC/SPF/DKIM 24h Rejections Fix ($25/$35/$50) · (#7) Entra ID Conditional Access & Intune Hardening Policy Pack ($35/$55/$85).
// INDEPENDENT LAB FUND · 100% FREE EXTENSIONS & DIAGNOSTICS · ZERO TELEMETRY

Did a Free Extension or Diagnostic Just Save You a Ticket Escalation, a £320 Retest, or an Hour in PowerShell?

Why is this tip jar here? Because we made both of our Chrome MV3 extensions (Table & Grid Exporter and Security, DNS & PHP2Shell Inspector) plus all 5 live browser diagnostics 100% Free Forever instead of charging $12/mo SaaS fees or harvesting your email into a CRM. If our free tools saved you time today, fuel independent zero-telemetry engineering:

☕ Fuel the Lab with £5.00 via PayPal →
// INSTANT SELF-SERVICE DELIVERY · SHA-256 VERIFIED ARCHIVES

Instant Delivery Vault & Free Extension Downloads

Completed a PayPal checkout? You are redirected here automatically (?unlocked=bundle2026, ce33, pack2026, nis2, or wp12) to download your ZIP archive immediately. Both of our Chrome MV3 extensions are unlocked below 100% Free Forever.

💡 Paid via PayPal? You're redirected here automatically after checkout—or enter the redemption key from your receipt / email ([email protected]) to unlock anytime.

Archive / DeliverableTier & PriceSizeSHA-256 Checksum & Action
faultypacket-table-exporter-mv3.zip 100% FREE 27.9 KB cad1bf69a70580cd… · Download Free ZIP
faultypacket-security-inspector-mv3.zip 100% FREE 28.9 KB a3f813c635baf9df… · Download Free ZIP
faultypacket-complete-3pack-compliance-bundle-v1.zip £39 BUNDLE 743.8 KB 51924285f0e98877… · Unlock (£39 Save 54%)
faultypacket-cyber-essentials-v33-pack-v1.zip £29 PACK 169.4 KB 706c8be1d9ce82f5… · Unlock (£29)
fp-vault-9f4c8a2e71b305d6-uk-remediation-pack-2026-v1.zip £24 PACK 388.6 KB 23db63af91ce9a67… · Unlock (£24)
faultypacket-nis2-dora-supplier-pack-v1.zip £19 PACK 159.4 KB 3bfc5e2b65eb4e10… · Unlock (£19)
faultypacket-wordpress-woocommerce-shield-pack-v1.zip £12 PACK 19.9 KB 3dbb265dc3247735… · Unlock (£12)
// PRACTITIONER KNOWLEDGE BASE · 6 FREE INTERACTIVE DIAGNOSTICS, FLAW FINDERS & BLUEPRINTS

Deep-Dive Advisories & Live Browser Diagnostics

Step-by-step engineering guides and free browser tools for SecOps teams, sysadmins and MSPs across the UK, Europe, North America and APAC.

Advisory · CVE-2026-109618 & CVE-2026-109619

PHP2Shell RCE Triage & Server Lockdown Guide

How crafted CGI/FastCGI stream parameters trigger unauthenticated RCE on PHP < 8.5.12 / 8.4.27 / 8.3.36 / 8.2.35, exact access-log IOC grep patterns, and Nginx/Apache/IIS perimeter rules.

Blueprint · RFC 7489 / NIST SP 800-177 / CE v3.3

Zero-Downtime DMARC p=reject, SPF & MTA-STS Rollout

How to transition from p=none to strict p=reject across Microsoft 365, Google Workspace, SendGrid & HubSpot without blocking legitimate mail, plus fixing the SPF 10-lookup limit.

Interactive Workbench · OWASP CWE-1236

Exporting Virtualized ARIA Grids & Blocking CSV Injection

Paste raw HTML, virtualized [role="grid"] DOM snippets, or JSON logs into our free on-page workbench to strip =cmd|... payloads and download our 100% Free Chrome MV3 Exporter.