About

Practical security tools, built by someone who uses them

CyberHQS publishes free tools and plain-English guides for the security problems small organisations actually face, starting with email: the records that stop attackers sending messages in your name.

Who is behind CyberHQS

CyberHQS is run by Ghulam Rasool (Gr), a cybersecurity engineer in Australia. Day to day that means security operations on the Microsoft stack, email security, identity and hardening work in critical-infrastructure environments. The tools here come from that work: they check the things that go wrong in real deployments.

  • Microsoft SC-200
  • CompTIA CySA+
  • CompTIA Security+
  • CompTIA SecAI+
  • ISC2 CC
  • Microsoft AZ-900
  • Master of IT (Cyber Security)

How the tools handle your data

  • Everything runs in your browser. There are no accounts and nothing to install.
  • A domain check sends DNS lookups to public resolvers (Google, with Cloudflare as a fallback). The domain name is the only thing they see.
  • Pasted records and uploaded DMARC reports are processed on your device and never uploaded.
  • These pages use no cookies and no analytics.

Use the results as guidance

The analyzer explains what each record does and what to change, but every organisation's email setup is different. Check changes with whoever manages your DNS and email before you enforce a stricter policy.

Find out what attackers can do with your domain.

Check your domain