# Free security tools and guides

> Free tools, guides and research from Precursor Intelligence. Look up any software flaw, threat group, industry or vendor without an account, read our guides on deciding what to fix first and get a free weekly threat email. Developers will find the API and MCP documentation here too.

Canonical page: https://www.precursorintelligence.com/resources

## Try a real lookup (no account needed)

Enter a CVE ID on the page to open its public profile, for example https://www.precursorintelligence.com/what-is/cve-2024-3400. Or start from an example:

- CVE-2021-44228, a software flaw explained (known exploited): https://www.precursorintelligence.com/what-is/cve-2021-44228
- APT29, a threat group profile: https://www.precursorintelligence.com/threat-actors/apt29
- Financial services, groups targeting a sector: https://www.precursorintelligence.com/industries/financial-services
- Fortinet, a vendor and its flaws: https://www.precursorintelligence.com/vendors/fortinet

## Free tools

- **Vulnerability search:** look up any published software flaw, see how severe it is and whether it is being exploited. https://www.precursorintelligence.com/cve-search
- **Threat groups:** profiles of criminal and state-backed groups: who they are, where they operate and how they work. https://www.precursorintelligence.com/threat-actors
- **Industries:** the threat groups linked to each of 15 industry groups, from healthcare to retail. https://www.precursorintelligence.com/industries
- **Vendors and products:** the flaws affecting a vendor and its products, with those most likely to be exploited first. Examples: https://www.precursorintelligence.com/vendors/microsoft, https://www.precursorintelligence.com/vendors/apache, https://www.precursorintelligence.com/vendors/fortinet
- **Breach cost estimator:** an illustrative estimate of what a breach could cost a business of your size and sector. https://www.precursorintelligence.com/breach-estimator

## Guides

Six long-form guides on deciding what to fix first, mapping what you have online and explaining cyber risk to a board. All posts: https://www.precursorintelligence.com/blog

1. Severity scores vs exploit likelihood: https://www.precursorintelligence.com/blog/epss-vs-cvss-guide
2. Why the likelihood of exploitation should decide what you fix: https://www.precursorintelligence.com/blog/beyond-epss-likelihood-of-exploit
3. The maths of deciding what to patch first: https://www.precursorintelligence.com/blog/math-of-remediation-epss-guide
4. Watching what you have online vs scanning for flaws: https://www.precursorintelligence.com/blog/easm-vs-vulnerability-scanning
5. A complete guide to threat and vulnerability management: https://www.precursorintelligence.com/blog/finite-guide-to-threat-vulnerability-management
6. Turning cyber risk into numbers a board understands: https://www.precursorintelligence.com/blog/board-ready-metrics-cyber-risk

## Stay informed

- **The Precursor Brief:** a free weekly email on the week's most important threats. Just your email address. https://www.precursorintelligence.com/newsletter
- **For developers:** a REST API and an MCP server (71 tools) bring our intelligence and your own organisation's data into scripts and AI assistants, with scoped keys. Example MCP tools: `get_cve`, `search_cves_by_vendor`, `get_threat_actor`, `list_my_vulnerabilities`, `assess_cve_exposure`. Quickstart: https://docs.precursorintelligence.com/quickstart · API reference: https://docs.precursorintelligence.com/api-reference · MCP server guide: https://docs.precursorintelligence.com/mcp

## Get started

- Start free (£0, no card, nothing to install): https://www.precursorintelligence.com/register
- Book a demo: https://www.precursorintelligence.com/contact