Redspin, Inc. | Security Assessment Tools



	Tools Main
	FirewallCAT
	WincatCAT-AD
	fTrace
	Crackulator

Free Security Assessment Tools

We put these security audit tools here to help our clients keep their systems robust and illustrate any issues they may have. We sell security audits, so we're not going to give away everything — but we'll still be a good neighbor and lend them out for a little while.


Assessment Type:	Firewall Auditing
Platform:	Web-based
Link:	More Info
The Redspin FirewallCAT is a web-based tool that performs two key functions not available in any other firewall audit tool. On the back-end, it detects ACL errors by mimicking the firewall's thought process and analyzing the rules the same way that the firewall does. Then, on the front-end, it creates an easy-to-comprehend picture of everything that the firewall allows and denies. With this visual representation an IT administrator can easily see the net result of the ACLs without manually analyzing the entire configuration file. More Info About FirewallCAT


Assessment Type:	Active Directory Group Policy Object Auditing
Platform:	Windows
Link:	More Info
The Redspin WinCAT-AD (Windows Configuration Analysis Tools - Active Directory) is a powerful program that allows Domain Administrators the ability to see how their Group Policies are applied throughout their Microsoft's Active Directory environment. In contrast to built in Microsoft functionality that allows one to test a single object at a time, this security auditing tool reviews implemented Group Policy settings domain wide and outputs an easy-to-understand, browser-generated report. More Info About WinCAT-AD


Assessment Type:	Secure Program Development
Platform:	Linux
Link:	More Info
Download:	Download fTrace
fTrace is a security assessment tool for identifying security vulnerabilities in Linux binaries. It dynamically traces a non-stripped binary until it exits and prints to stderr all the local function calls which the program calls and reports possible arguments and return values of each function. It was programmed with intentional compatibility with such tools as strace(1) and ltrace(1) but is oriented toward secure program development. More Info About fTrace


Assessment Type:	Password Auditing
Platform:	Web-based
Link:	More Info
The Crackulator is a password policy auditor. It computes the amount of time it would take to crack a password given its complexity requirements and compares it to the password age policy. If it is possible to crack a password before the password is required to be changed, then the password policy needs to be revised. More Info About Crackulator