Small tools for everyday SOC work.
IOC extraction, email header analysis, DMARC checks, Windows event triage and Microsoft 365 sign-in review. Built by a working ops engineer for analysts, IT admins and MSPs. No account, no upload, no tracking.
Tools
Each one solves a single job well, runs in your browser, and links to the next step.
Store review
IOC Triage
Browser extension. Right-click any IP, domain, URL, hash or CVE for an explainable verdict from 15 intel sources, plus ticket notes and phishing protection.
IOC Extractor
Paste a report, alert or email. Pull out every IP, domain, URL, hash and email address, then defang or refang them in one click.
Email Header Analyzer
Paste raw headers to see the delivery path, SPF, DKIM and DMARC results, and the signs of spoofing or business email compromise.
SPF / DKIM / DMARC Checker
Enter a domain and get a plain-language score, what is broken, and the exact DNS record to fix it.
Windows Event Triage
Look up what an event ID means, or paste exported events and see the suspicious ones highlighted: brute force, new services, encoded PowerShell.
M365 Sign-in Review
Load an Entra ID sign-in log export and spot impossible travel, legacy authentication, MFA failures and logins from unexpected countries.
How these tools treat your data
Security people paste sensitive things. These tools are built so you never have to wonder where that went.
Processed in your browser
Pasted text and uploaded logs are analysed on your machine. They are not sent to or stored on an OpsVantage server.
Only lookups leave
Tools that need the internet, such as a DNS check, send just that query, and each tool says so on the page.
No accounts, no trackers
No sign-up, no ad scripts, no third-party analytics.
Get the next tool first
A short email when a new tool ships, plus one practical SOC tip. The newsletter is launching soon; until then, follow the project on GitHub.