Config Templates Library

★ Hosted Tool · 100% Free

Config Templates Library

Curated, citation-backed config snippets across vendors. Filter by vendor or scenario, copy the snippet, optionally run it through the matching analyzer.

Open the analyzer →

What it checks

Cisco IOS — BGP with MD5, port-security hardening, VTY ACLs
Cisco WLC 9800 — WPA3+802.1X corp SSID, guest with isolation
Palo Alto — SAML SSO with Azure AD, default-deny with logging
FortiGate — IPsec VPN to AWS (BGP), RFC1918 anti-spoof
Cisco SD-WAN — voice SLA + app-aware routing
OpenVPN — TOTP MFA + LDAP
rsyslog — TLS forward to SIEM (mutual auth)
Juniper SRX — Screen options for DDoS protection
Aruba CX — 802.1X port-access with ClearPass

How it works

Paste a vendor config, the analyzer runs heuristic checks (regex + custom rules), produces a 0-100 score with prioritized findings, and lets you download the report as Word, HTML, or PDF.

Wireless / Wi-Fi Security Analyzer

★ Hosted Tool · 100% Free

Wireless / Wi-Fi Security Analyzer

Cisco Catalyst / Meraki, Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, FortiAP. SSID security audit with prioritized fixes and downloadable report.

Open the analyzer →

What it checks

Open SSIDs (no encryption)
Legacy WEP / WPA1 / TKIP
Weak PSKs (short or common passwords)
Missing WPA3 / SAE
No 802.1X for corporate SSIDs
Guest SSID without client isolation
Default RADIUS shared secret / management password

How it works

Paste a vendor config, the analyzer runs heuristic checks (regex + custom rules), produces a 0-100 score with prioritized findings, and lets you download the report as Word, HTML, or PDF.

Routing & Switching Security Analyzer

★ Hosted Tool · 100% Free

Routing & Switching Security Analyzer

Cisco IOS, Juniper JunOS, Arista EOS, Aruba CX, Mikrotik, FortiSwitch. Focused on the security posture of switches and routers — did your config stay hardened after years of change?

Open the analyzer →

What it checks

Telnet enabled / VTY without ACL
SNMP default communities (public / private)
BGP / OSPF without authentication
No port-security on access ports
Missing DHCP snooping + Dynamic ARP Inspection
No BPDU guard / spanning-tree hardening
Type-7 / weak passwords

How it works

Paste a vendor config, the analyzer runs heuristic checks (regex + custom rules), produces a 0-100 score with prioritized findings, and lets you download the report as Word, HTML, or PDF.

SD-WAN Analyzer (Multi-Vendor)

★ Hosted Tool · 100% Free

SD-WAN Analyzer — Multi-Vendor

Cisco SD-WAN, VMware VeloCloud, Fortinet Secure SD-WAN, Palo Alto Prisma SD-WAN, Versa, and HPE Aruba EdgeConnect — heuristic policy review with prioritized findings and Word/HTML/PDF export.

Open the analyzer →

What it checks

any/any policies that defeat branch isolation
Missing SLA class definitions / no app-aware routing
Single underlay (no failover transport)
Missing tunnel encryption flag
Missing branch isolation / VRF separation
Missing logging / telemetry destination

How it works

Paste a vendor config, the analyzer runs heuristic checks (regex + custom rules), produces a 0-100 score with prioritized findings, and lets you download the report as Word, HTML, or PDF.

Firewall As-Built Report Generator

★ Hosted Tool · 100% Free

Firewall As-Built Report

Generate a polished as-built deliverable from any firewall config. Includes executive summary, prioritized action plan, cleanup candidates, and best-practice check results.

Open As-Built Generator →

Sections in the as-built report

Executive summary (vendor, source, rule count, posture)
Prioritized action plan (top 25 items with rationale)
Cleanup candidates (broad / shadowed / unused rules)
Best-practice check results (vendor + NIST + CISA)
"Need help executing this?" CTA → hello@safecadence.com

Output formats: Word (.docx), HTML, PDF.

SOW Builder for Network & Security Projects

★ Hosted Tool · 100% Free

Statement of Work (SOW) Builder

Fill in the project shape (client, scope, deliverables, assumptions, acceptance, timeline). We produce a polished Word / HTML / PDF SOW you can hand to procurement.

Open SOW Builder →

What's in the generated SOW

Project overview, sponsor, vendor(s), site count
Scope — In / Out
Deliverables, assumptions, acceptance criteria
Timeline + pricing pointer
SafeCadence-branded header + footer with hello@safecadence.com CTA

Firewall Service Quote + Invoice Generator

★ Hosted Tool · 100% Free

Service Quote + Invoice Generator

Get a ballpark price for firewall cleanup, SD-WAN design, switch hardening, or wireless audit work. Generate a clean SafeCadence-branded invoice in Word, HTML, or PDF.

Open Quote / Invoice Generator →

Scenarios pre-loaded

Firewall rule cleanup (single site)
Multi-site firewall consolidation
SD-WAN design + rollout
Switch / port-security hardening
Wireless network audit
Custom (start from scratch)

Output formats

Word (.docx), HTML, and PDF — all branded with SafeCadence header / footer. Edit further in Word or your browser if you want to tweak before sending.

Firewall Best-Practice Checker

★ Hosted Tool · 100% Free

Firewall Best-Practice Checker

Paste a Palo Alto / Cisco Firepower / Fortinet / SonicWall config, get a 0-100 score and the prioritized fixes. Download the report as Word, HTML, or PDF.

Open Best-Practice Checker →

What it checks

Overly permissive rules (any/any, broad source/destination zones)
Missing logging, threat-prevention profiles, IPS/AV inspection
Drift from NIST SP 800-41 / CISA firewall hardening guidance
Vendor-specific best-practice violations

How the score works

We run every applicable best-practice check against your config, count passes vs. fails, then dock points for each critical/high finding. A score above 85 is solid; below 60 means significant gaps.

Firewall Analyzer

Flagship Tool · 100% Free

Firewall rule cleanup, risk review, and audit prep — in one place.

SafeCadence Firewall Analyzer reviews Palo Alto, Cisco Firepower, Fortinet, and SonicWall policies against vendor and industry best practices, then turns the rulebase into prioritized cleanup recommendations.

Open Firewall Analyzer →

Free. No sign-up wall. No credit card.

What it checks

Overly permissive rules (any/any, broad source/destination zones)
Shadowed, unused, and conflicting rules
Dangerous service exposure (RDP, SMB, Telnet, legacy SQL) on untrusted zones
Missing logging, threat-prevention profiles, and IPS/AV inspection
Policy drift from NIST SP 800-41 / CISA firewall hardening guidance
Audit-ready exports for PCI DSS firewall sections, SOC 2 CC6.6, HIPAA §164.312

Who it's for

Network administrators, security engineers, and compliance owners who inherit large rulebases and need to prove the firewall is doing what the policy says.

Privacy: Firewall configs are processed in your tenant only. SafeCadence does not retain configs after the analysis is delivered.

Open Firewall Analyzer →