Overview & core concepts

What the platform is, the tier model, and how storage degrades gracefully.

Passwordless OTP sign-in, the limits that apply, and disposable-email handling.

Plans, prices & quotas

Every SKU and quota, read live from the platform catalog.

Every tool on the platform, grouped by category, listed live from the catalog.

Multi-tenant log ingestion, detection and AI triage — with API examples.

QR enrolment, the installable PWA, posture signals and fleet reporting.

Website monitoring & agent

Register a site you own, prove control of the domain, install the PHP agent, and watch events arrive.

Seats, invitations, and the Team Security Center.

Free modules, progress sync, AI tutor, and verified certificates.

Authentication, every endpoint, rate limits and status codes.

Security & privacy model

What is never stored, the defences in force, and how to report a vulnerability.

Quick reference (printable)

Every tool on one page: tier, what it takes, whether it uses AI, and whether it stores anything.

What each panel means: usage, quotas, pack balances and account state.

The problems users actually hit, and what to do about each.

How prepaid passes work, what expiry means, receipts, and where the binding terms live.

// tool reference · Network & Firewall

Port Reference Free

Look up what a port is for and the risk of exposing it.

Open Port Reference →

What it does

Explains what a port carries and what exposing it means. Reference and analysis — this does NOT scan a remote host, in line with the platform's defensive-only boundary.

When to use it

Interpreting a firewall rule or a netstat output.

Inputs

Field names are the actual form parameters, verified against source.

Field	Type	Required	Notes
(port / service)	text	required	Port number or service name.

What you get back

Service, typical use, and exposure risk.

Worked example

Input

Output (abridged)

6379/tcp -- Redis

  RISK IF EXPOSED: CRITICAL

  Redis ships with NO authentication by default. An exposed instance is
  not 'a database with a weak password' -- it is an open, shell-adjacent
  service. CONFIG SET has been used to write SSH keys and cron entries.

  Should face the internet: NEVER.
  Correct posture: bind 127.0.0.1, set requirepass, rename or disable
  CONFIG in production.

  This is reference and risk analysis. It does not scan a host -- that
  would be an offensive capability, which is outside this platform.

How it works

Deterministic reference lookup. No remote scanning is performed.

Limits

Read live from the platform configuration.

Rate limit

30 requests / 60s (platform default)

Limitations — what it does not do

Reference only -- it does NOT scan a remote host. That is deliberate: remote scanning is an offensive capability and sits outside the platform's defensive-only boundary. Use the Firewall Rule Analyzer to see what your rules permit.

Privacy

Nothing is stored.

Standards

IANA port registry

← All tools Manual home