Let’s talk↗
Menu

Tottle tools

Small tools. Useful work.

Software built around practical problems. Explore what’s available, or talk to us about a tool your team needs.

Security

Tottle Security Audit

A free tool for exploring your public attack surface: it discovers subdomains, scans common TCP ports, and checks TLS certificates, HTTP security headers, exposed endpoints, and dangling DNS, then ranks what to fix.

Each finding comes with the observation behind it and a concrete fix, ranked by severity, and every report states how many hosts and endpoints were checked and what a limit skipped.

Use the tool only for domains you own or are authorized to assess. Review the current features and limits on the product website.

Open Security Audit↗

How we decide what to build

A tool has to earn
its maintenance.

We build tools we use ourselves, every day, for work that keeps coming back. A tool is worth keeping when it removes a repeated step, shows its own limits, and stays small enough for the team that runs it to understand. Daily use is where we start judging a tool, including the AI tools we build, not proof that more of them is better.

Have a repetitive problem worth solving?

We build operational tools, integrations, and useful AI applications around real workflows: we start from the repeated step your team already knows by heart, and hand over code the team can read, run, and change without us.

Talk about a custom tool↗

Start with the problem

What could work better?

Bring the bottleneck, the rising bill, or the release that takes too long. We’ll help you find a useful next step.

Tell us what you’re working on↗