Request a quote

Products and tools

Security tools, built for the daily work.

Free tools you can use right here on overwatchlabs.ai, and dedicated platforms for deeper investigation. Built from the same work as our assessments, and honest about what each one can and cannot tell you.

  • 1 live platform · Web3 Forensia
  • 5 free tools
  • 1 product in development

01 Platforms

Dedicated platforms for investigation.

Under maintenanceforensia.ai

Forensia

Turn an indicator into an investigation. Paste an IP, domain, URL, file hash or CVE and Forensia brings 30+ public intelligence sources together into one verdict, with every claim linked to its source.

  • One paste. The indicator type is detected automatically. No query language.
  • Sources in parallel. Reputation, malware, exploitation and network context in one view.
  • Cited verdicts. Evidence stays attached, so you can check the reasoning yourself.
  • Pivot. Follow related infrastructure to decide what to investigate next.
  • IP
  • Domain
  • URL
  • Hash
  • CVE
  • Repo
  • Report

Forensia.ai is temporarily unavailable for maintenance. Web3 Forensia remains live.

See how it worksExplore Web3 Forensia
Illustrative example using a documentation-only address.

02 For Shopify stores

Ecommerce security, watched like an investigation.

In developmentShopify app

CommerceGuard

Security monitoring for Shopify stores. CommerceGuard watches a store the way an investigator would. Store owners often learn about a card skimmer from their payment processor, long after it was injected. The evidence was in the theme diff and the app scopes the whole time, with nobody reading them.

Not available yet. Register interest and we will let you know when early access opens.

Register interest
Illustrative alert using example data.
  • MonitoringTheme and script integrity

    Continuous watch on theme files, checkout templates and injected script tags. Card skimmers live in exactly these places, and a store owner rarely sees the diff.

  • AppsThird party app and scope audit

    Every installed app, the scopes it holds, and what customer data it can actually read. Abandoned apps with live tokens are the quietest way into a store.

  • StaffAccount and permission changes

    Staff role escalations, new collaborator accounts, API credentials issued, and logins from somewhere the account has never been.

  • OrdersFraud and abuse investigation

    Order anomalies correlated across address, device, IP and payment signals, so a suspicious cluster can be pulled apart rather than guessed at.

  • AlertingAlerts that name the change

    A notification that says which file changed, which app gained a scope, and which account did it. Not a score with no story behind it.

  • EvidenceExportable investigation trail

    A timestamped record you can hand to a payment processor, an insurer or a customer, with the underlying evidence attached.

03 Free tools

Five free tools on overwatchlabs.ai.

Nothing to install and no sign-up. Each one answers a single practical question well, and four of the five never send what you paste anywhere.

FreeOn overwatchlabs.ai

checkYourDomainSec

See what the internet sees of your domain in seconds: HTTPS and certificates, security headers, email spoofing protection, DNS and publicly logged subdomains. Every issue comes with the evidence and a fix you can copy, plus a PDF report to share.

  • TLS
  • Headers
  • SPF / DMARC
  • DNSSEC
  • CT logs

Passive by design: one page load and public records. No scanning, and results are discarded after 10 minutes.

Check your domain
See checkYourDomainSec in action30-second demo

From a domain to a security report: review the findings, understand the evidence, and see what to fix. Recorded demo; results are not live.

Open video in a new tab
FreeRuns in your browser

Phishing & email analyzer

Make sense of a suspicious email. Review authentication, inspect links, and pull out indicators without uploading the message.

Open phishing & email analyzer
See the email analyzer in action24-second demo

A walkthrough of email analysis, from a suspicious message to the signals worth investigating. Recorded demo; results are not live.

Open video in a new tab
FreeRuns in your browser

Web response analyzer

Understand what a web response reveals. Grade security headers, evaluate Content Security Policy, and inspect certificate details—all in your browser.

Open web response analyzer
See the web response analyzer in action50-second demo

See how the analyzer turns response details into security findings you can review. Recorded demo; results are not live.

Open video in a new tab
FreeRuns in your browser

Static file analysis

Inspect file signatures, review metadata, and calculate hashes without uploading the file.

Open static file analysis
See static file analysis in action50-second demo

A walkthrough of the static file analysis tool. Recorded demo; results are not live.

Open video in a new tab

04 Blockchain investigations

Follow the activity. Inspect the evidence.

Live · Free public betaweb3.forensia.ai

Web3 Forensia

The blockchain investigation tool in the Forensia family. Start with an address or transaction, explore public on-chain activity, and follow the evidence behind the connections.

  • Locate. Look up an address or transaction on supported networks.
  • Follow. Explore observable activity and related transactions.
  • Verify. Inspect the sources behind your findings.
  • Addresses
  • Transactions
  • Read-only
  • No wallet connection

Coverage depends on available sources. A partial lookup is not a full history or a safety assessment.

Watch the crypto investigation case studies

Explore the Bitget, Bybit, and Coldcard wallet demos. Copy a direct website link to share any case.

Open Web3 Forensia View network coverage
See Web3 Forensia in action21-second demo

A quick introduction to Web3 Forensia. Recorded demo; the activity shown is not live investigation data.

Open video in a new tab

How we build tools

Useful first. Honest always.

  • Free where it matters.The everyday checks stay free and need no account.
  • Evidence, not just a verdict.Results show what was seen and where it came from, so you can verify them.
  • Clear about limits.Every tool says what it cannot see. A clean result is not a security guarantee.
  • Authorized testing only.Public tools stay passive. Testing for exploitable weaknesses needs the owner's permission.

Need more than a tool can show?

Tools see the outside. Our assessments test applications, networks and code with your authorization and a clear scope.

Request a quoteExplore services