Free security checkers
Quick, safe checks for the vulnerabilities in the news. No signup and no email needed: you get the result right on the page.
Checkers
- Node.js · static
Node2Shell checker
Paste node -v, a Dockerfile FROM line or your .nvmrc and see if that Node.js version has the Brotli RCE fix. Nothing is scanned.
Covers Node2Shell (Node.js Brotli RCE) · CVE-2026-111497
Run check - Flutter · Android app
Flutter eMudhra checker
Upload your Android app and see if it was built with a Dart SDK that still trusts the compromised eMudhra certificates.
Covers eMudhra TLS MitM in Dart/Flutter · GHSA-frr6-h895-5pxp
Run check - PHP · passive
PHP2Shell checker
Enter a domain and see if the PHP version your site reports is below the fixed release. Passive, one request.
Covers PHP2Shell (PHP RCE) · CVE-2026-109618, CVE-2026-109619
Run check
Every checker is passive or static: none of them tests, exploits or logs in to anything. Need more than a version check? Talk to us.