SARA / Free Tools

Free Security Tools

Five free utilities for SOC and vulnerability teams, powered by the engine behind OmniSense — SIRP's agentic, self-driving SOC platform. No account, no signup, no rate limits below 30 lookups an hour. All five share an OpenAI-compatible API if you want to embed them in your SOAR or SIEM.

1.7K
CISA KEV CVEs indexed
10K
CVE explainers published
30/hr
Free per IP, no signup
5
Tools live today
Paste · upload · verdict

Phishing Email Analyzer

Paste an email or upload .eml. SARA analyzes headers, links, attachments, and sender authentication — in seconds. AI-grade verdict with red flags and recommended actions.

Open tool →
IP · domain · URL · hash

IOC Reputation Checker

Paste any IP, domain, URL, or file hash. Get an analyst-grade verdict with a confidence score, the evidence behind it, and the recommended next step — from the same autonomous SOC engine that triages live alerts inside OmniSense.

Open tool →
Popular
30-day exploit probability

EPSS Lookup

Look up the 30-day exploit probability for any CVE. Updated daily from FIRST.org with CISA KEV cross-reference.

Open tool →
Popular
Search 1,700+ KEV entries

CISA KEV Browser

Search and filter the CISA Known Exploited Vulnerabilities catalog. Sort by date, filter by vendor or ransomware use.

Open tool →
Plain English → Sigma + KQL + SPL

Sigma Rule Generator

Describe a behavior in plain English. Get a valid Sigma rule with MITRE ATT&CK mapping, plus converted queries for Splunk SPL, Elastic ES|QL, Microsoft KQL, and Sumo.

Open tool →

ProgrammaticBrowse the CVE knowledge base

SARA has indexed every CVE on the CISA KEV catalog and the top-1,000 by EPSS — each gets a dedicated explainer page with affected products, remediation, detection signatures, and a written analyst summary.

Recently added to CISA KEV

The most recent CISA KEV entries, with EPSS percentile, ransomware-use flag, and BOD 22-01 due date.

Browse KEV →

Most-read CVE explainers

Long-form pages covering Log4Shell, PAN-OS GlobalProtect, the latest Outlook NTLM leak — 10,000 CVE explainers published.

Open Log4Shell →

Ask about any CVE

Don't see your CVE? Paste any CVE-ID into SARA and get a full analyst-grade explainer in chat.

Open chat →

Looking for more?

Ask SARA — our AI security analyst — for full CVE context, exploit chains, and detection rules.

Try SARA