Free tool · HIPAA · PCI DSS · NIST
How close are you to HIPAA, PCI DSS and NIST?
Scan your website and email in seconds, or run our read-only scanner on a Windows PC. Every finding is mapped to the HIPAA Security Rule, PCI DSS v4.0.1 and NIST CSF 2.0 / SP 800-171, and the report is yours to download.
10 seconds · Nothing to install
Website & email scan
Email spoofing protection (SPF, DKIM, DMARC), HTTPS and certificate health, security headers, DNSSEC. Thirteen checks.
Public information only — DNS records, the certificate and the home page's response headers, exactly what a browser sees. We don't scan ports or probe for vulnerabilities.
About a minute · One Windows PC
Workstation scan
Sixty-plus checks on one Windows 10/11 PC: antivirus, disk encryption, patching, firewall, passwords and lockout, admin rights, audit logging, backups.
Read-only PowerShell script. It checks Windows settings and changes nothing. It never opens your documents or patient files and uploads none of them.
Run the scanner
Your download has started: TEKNIK-FreeScan.ps1. On the PC you want to check:
- Open PowerShell as AdministratorRight-click the Start button and choose Terminal (Admin) or Windows PowerShell (Admin). Without admin rights about fifteen checks can't run.
- Allow the downloaded fileWindows marks downloads as untrusted. This clears that for this one file.
Unblock-File "$env:USERPROFILE\Downloads\TEKNIK-FreeScan.ps1" - Run the scanTakes about a minute. When it finishes it prints the link to your report.
powershell -ExecutionPolicy Bypass -File "$env:USERPROFILE\Downloads\TEKNIK-FreeScan.ps1"
Your report address: open report. Bookmark it — it works for 90 days. Each download works once, on one PC, for 7 days; for another PC, download again.
What's free, and what isn't
Free
- Every finding, pass or fail, with what we observed
- Severity and the exact HIPAA, PCI DSS, NIST CSF and 800-171 references for each
- Overall grade and a score for each framework
- Printable report you can save as PDF and keep
$50 · 30 days of fixes
- Step-by-step remediation for every failed and weak control
- Copy-paste DNS records and header values for your domain
- A generated PowerShell fix script for the workstation, dry-run by default
- Unlimited rescans and fixes for 30 days, so you can prove it's done
What this is not. It is not a PCI DSS ASV scan, a penetration test or the HIPAA risk analysis the Security Rule requires. It is a fast, honest look at the technical controls those frameworks expect, so you know where you stand before an auditor, insurer or bank asks.
Want it done for you? We run this across every PC and the whole Microsoft 365 tenant for clients, then fix what it finds. Book a free assessment or call 305-419-9992.