SARA / Free Tools

Free Security Tools

Five free utilities for SOC and vulnerability teams, powered by the same knowledge base SARA uses for autonomous security analysis. No account, no signup, no rate limits below 30 lookups an hour. All five share an OpenAI-compatible API if you want to embed them in your SOAR or SIEM.

Phishing Email Analyzer

Paste an email or upload .eml. SARA analyzes headers, links, attachments, and sender authentication — in seconds. AI-grade verdict with red flags and recommended actions.

Open tool →

IOC Reputation Checker

Paste any IP, domain, URL, or file hash. SARA enriches it across 8 threat-intel sources (VirusTotal, AbuseIPDB, GreyNoise, OTX, URLhaus, ThreatFox, Shodan, Censys) and writes the analyst summary.

Open tool →

EPSS Lookup

Look up the 30-day exploit probability for any CVE. Updated daily from FIRST.org with CISA KEV cross-reference.

Open tool →

CISA KEV Browser

Search and filter the CISA Known Exploited Vulnerabilities catalog. Sort by date, filter by vendor or ransomware use.

Open tool →

Sigma Rule Generator

Describe a behavior in plain English. Get a valid Sigma rule with MITRE ATT&CK mapping, plus converted queries for Splunk SPL, Elastic ES|QL, Microsoft KQL, and Sumo.

Open tool →

ProgrammaticBrowse the CVE knowledge base

SARA has indexed every CVE on the CISA KEV catalog and the top-1,000 by EPSS — each gets a dedicated explainer page with affected products, remediation, detection signatures, and a written analyst summary.

Recently added to CISA KEV

The most recent CISA KEV entries, with EPSS percentile, ransomware-use flag, and BOD 22-01 due date.

Browse KEV →

Most-read CVE explainers

Long-form pages covering Log4Shell, PAN-OS GlobalProtect, the latest Outlook NTLM leak, and 1,200+ more.

Open Log4Shell →

Ask about any CVE

Don't see your CVE? Paste any CVE-ID into SARA and get a full analyst-grade explainer in chat.

Open chat →

Looking for more?

Ask SARA — our AI security analyst — for full CVE context, exploit chains, and detection rules.

Try SARA