Free tools · Moved

The free tools have moved to sec.team.

The free DNS, certificate and email security tools, previously DNS Canary and SSL Sentinel, are now part of sec.team, a platform built around them rather than a side project sitting next to a consultancy. Same checks, same people building them, somewhere they can grow properly.

If you had an account here

The tools on exit.codes ran as a beta with a small group of testers, and those accounts do not carry across to sec.team. Nothing was ever charged and nothing is being taken away, but you will need to sign up on sec.team and add your domains there to keep being monitored.

What to do

  • Create an account at sec.team, which is free to start
  • Add the domains you were watching here
  • Turn on the alerts you want, including certificate expiry
  • Your old exit.codes login is not needed and will not be migrated

Worth knowing

  • The tools stay free. The move is about giving them a proper home, not putting them behind a paywall
  • Managed security clients are unaffected: their monitoring is set up as part of their engagement, not through the free tools
  • If you are midway through something and need a hand moving across, just ask

The old tools at tools.exit.codes have now been switched off and that address redirects here. Everything lives on sec.team.

What moved across

All five tools, unchanged in what they check.

DNS monitoring

Monitors your domains for DNS record changes, validates SPF, DKIM and DMARC against the RFCs, and grades domain health A to F. Email alerts when something changes.

Certificate monitoring

Watches TLS certificates for issuer, expiry, chain and protocol problems, grades them A to F, and warns you before anything lapses.

Email security

Deep analysis of SPF, DKIM, DMARC, MTA-STS, TLS-RPT and BIMI, including the real RFC 7208 lookup count.

Subdomain discovery

Discovers subdomains across certificate transparency logs, passive DNS and record enumeration, then shows which ones differ from the apex.

DNS propagation

Queries public resolvers around the world at once, so you can see a change rolling out rather than guess at it.

Want these run continuously, with a person reading the results?

Monitoring, review and escalation are scoped to your estate. Coverage hours and response targets are agreed in writing for each engagement.

Explore managed security →