{"id":10421,"date":"2020-08-06T10:07:47","date_gmt":"2020-08-06T14:07:47","guid":{"rendered":"https:\/\/www.inmotionhosting.com\/blog\/?p=10421"},"modified":"2024-01-23T14:19:38","modified_gmt":"2024-01-23T19:19:38","slug":"8-free-cybersecurity-tools-to-secure-your-server","status":"publish","type":"post","link":"https:\/\/www.inmotionhosting.com\/blog\/8-free-cybersecurity-tools-to-secure-your-server\/","title":{"rendered":"8 Free Cybersecurity Tools To Secure Your Server"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

One of the best ways to learn more about Linux security<\/a> is to test your server with reputable cybersecurity tools. This makes you more invested in the results as you gain an unique perspective on your brand and personally identifiable information (PII).<\/p>\n\n\n\n

Much of the information each scanner below provides is rarely shown by the average internet user, though it affects our online activity every day. Graphical user interface (GUI) software such as the Firefox web browser and Thunderbird email client aim for a comfortable user experience (UX), hiding more advanced features in the background for power users. Meanwhile, command-line interface (CLI), or terminal, applications provide more detailed information.<\/p>\n\n\n\n

Below we cover some cybersecurity tools to protect your email and websites, free to download or use online.<\/p>\n\n\n\n

Need a stable, bare-bones web server? Check out our cheap Cloud Server Hosting<\/a>.<\/p>\n\n\n\n

1. Have I Been Pwnd Data Breach Scanner<\/h2>\n\n\n\n

HaveIBeenPwned.com<\/a> (HIBP) tells you if your email address was included in a data breach tracked by the website. HIBP accomplishes this by consolidating the data to a searchable database for online queries. If so, HIBP tells you what data breaches included your email address per the collected data sets.<\/p>\n\n\n\n

You can also view all data sets that the site has collected<\/a> and sign up for notifications if your email address is included in a future attack.<\/p>\n\n\n\n

2. Mail-Tester Email Authentication Tester<\/h2>\n\n\n\n

Mail-Tester.com<\/a> helps you ensure your emails aren’t delivering to recipients marked as junk or spam. You’ll be prompted to send an email to the address on the webpage. Then check your score<\/em>. The test results include recommendations for your email authentication<\/a> records (e.g. DMARC and SPF) and whether your domain is on a list of commonly used blacklists.<\/p>\n\n\n\n

3. WhyNoPadLock SSL Checker<\/h2>\n\n\n\n

WhyNoPadlock.com<\/a> checks your server SSL certificate for information on its domains, expiration date (useful for ensuring your SSL meets upcoming lifetime requirements<\/a>), and issues resulting in mixed content errors (usually from images).<\/p>\n\n\n\n

SSL Shopper SSL Checker<\/a> shows similar info in a simpler format.<\/p>\n\n\n\n

Do you need an SSL for your website? Our linux Shared Hosting plans<\/a> come with free Comodo SSL certificates. Cloud server users can manage Let’s Encrypt SSL certificates with Certbot<\/a>.<\/p>\n\n\n\n

4. Mozilla Observatory Header Scanner<\/h2>\n\n\n\n

Observatory.Mozilla.org<\/a> tests your website’s settings for cookies, SSL certificate, SSH access, and many security HTTP headers: Feature Policy, HTTP Strict Transport Security (HSTS), and Referrer Policy to name a few. It also checks Subresource Integrity (SRI)<\/a> for validating external packages.<\/p>\n\n\n\n

Observatory goes in-depth on how to create a strong, proper Content Security Policy (CSP) to truly protect your customers and viewers from man-in-the-middle (MITM) attacks. This is especially helpful when securing content management systems (CMSs) such as WordPress and Drupal.<\/p>\n\n\n\n

SecurityHeaders.com<\/a> shows similar information in a more condensed format.<\/p>\n\n\n\n

5. WPScan WordPress Scanner<\/h2>\n\n\n\n

The WPScan<\/a> WordPress security scanner is a CLI application that inspects your website code for a variety of information:<\/p>\n\n\n\n