Free Cybersecurity Toolkit for Business

A curated, genuinely free cybersecurity toolkit for Kenyan businesses: password managers, MFA, breach checks, secure DNS, website scans and awareness.

Why these tools

Stop the common breaches: the majority of incidents we respond to start with a reused password, a missing MFA prompt, or a phishing click. These free tools close exactly those gaps.
No budget barrier to getting started: strong baseline security shouldn't wait for a big spend. Every tool here is genuinely free for the essentials.
A clear path to maturity: these cover the basics. When you outgrow them, our managed SOC, EDR/MDR and penetration-testing services pick up where free tools stop.

Passwords & identity

Reused and weak passwords are the single biggest cause of breaches. These cost nothing and stop most account takeovers.

Bitwarden (Free): Open-source password manager with unlimited passwords, synced across every device. Eliminates reused and weak passwords without staff having to remember them.
Have I Been Pwned: Checks whether your email or domain has appeared in a known data breach. Tells you instantly which staff credentials are already exposed and need rotating.
Microsoft / Google Authenticator: Free multi-factor authentication (MFA/2FA) for email, banking and business apps. Blocks the vast majority of automated account-takeover attacks, even with a stolen password.

Device & endpoint protection

Most businesses already own strong protection; it just needs configuring. These keep laptops and desktops clean.

Microsoft Defender: Antivirus and firewall built into Windows, with no extra licence needed. Enterprise-grade protection you already have; we simply turn it on and tune it properly.
Malwarebytes Free: On-demand scanner that removes malware, adware and unwanted programs. Fast cleanup for the 'my computer is slow or acting strange' moments.

Network & web

Stop threats before they reach the device, and protect the website your customers rely on.

Cloudflare (Free plan): DNS, DDoS protection and basic web application firewall for your website. Keeps your site online and fast, and shields it from common attacks at no cost.
Cloudflare 1.1.1.1 / Quad9 DNS: Free secure DNS that filters out known malicious and phishing domains. Network-level blocking of malware and phishing for every device, with nothing to install per machine.

Free security check-ups

Quick, credible scans you can run today to see where you stand, using the same tools we use in assessments.

Mozilla Observatory: Scans your website's security headers and configuration, then grades it. A plain-English report card that shows exactly what to fix on your site.
Qualys SSL Labs: Deep test of your website's HTTPS/TLS encryption setup. Confirms customer data is encrypted in transit, and flags weak or expiring certificates.

Awareness & guidance

People are the front line. Free, trustworthy guides keep your team alert to phishing and scams.

CISA Secure Our World: Plain-language security checklists and awareness material for small businesses. Ready-made staff training resources so you don't have to write them from scratch.
Google Phishing Quiz: A short interactive quiz that teaches staff to spot phishing emails. Turns awareness training into something your team will actually finish in 5 minutes.

Get the full toolkit by email, or book a free 30-minute security check-up and we will help you deploy the right tools for your business.