denyfirst.

Independent security and privacy tools

Security.
On your terms.

Tools that help you understand your infrastructure. Built with evidence, restraint and respect for your data.

Explore our work

01 / Products & services

Purpose-built.
Principle-led.

Products and services with a clear purpose. Choose the one that fits the work.

Available

Porch

A clear view of your TLS, web and mail configuration, and the evidence behind every finding. Run it yourself, or watch it work here on our own domain.

Infrastructure checks
Planned

Porch Elite

A proposed next step: continuous visibility and a record of how a configuration changes over time.

Continuous visibility
Exploring

PAM services

A possible future service for privileged access management. Its scope is not defined yet.

Privileged access

Planned and exploring offerings show where the work may go. They are not available, and no date is promised.

02 / The standard we build to

Less blind trust.
More understanding.

01

Evidence first.

Show what was observed, cite the rule behind a conclusion, and say plainly what was not measured.

02

Control stays with you.

Built to be run on your own machine. What is kept and what is contacted are stated, and nothing is collected by us.

03

Keep the scope clear.

Purposeful instruments with explicit boundaries: a check reads what a server already serves, and does nothing more.

03 / Independent security & privacy team

Independent people.
A considered approach.

We are an independent team building security and privacy tools. denyfirst is the home for that work: the products, the reasoning behind them, and the responsibility for both. Everything we ship is open source, with no third-party dependencies, so it can be checked rather than trusted.

See the source

Documentation

Everything written down, in one place.

How to read a report, what a check sends, how to run your own copy, and how to reach us.

Read the docs