Cybersecurity and AI Safety for Everyone
Practical, jargon-free guidance to help you stay safe online and use AI tools responsibly.
Guides & articles
Free tools
Topics covered
Audiences served
Guidance for your situation
Pick your profile to see guides picked for that situation, updated each time you visit.
Individuals & Families
Practical security for your everyday digital life
Guides for Individuals & Families
See all →
Photos, documents and memories can disappear in an instant. A simple approach to backing up your phone (Android/iPhone) and computer.
From smart doorbells to warehouse sensors, connected devices multiply faster than most security programs can track them. A practical guide to keeping the Internet of Things from becoming your weakest link.
AI safety for employees means knowing what can go wrong when you use AI tools at work, misplaced trust in outputs, manipulation of the AI itself, and data exposure, and how to use them without creating risk for yourself or your employer.
From email to file storage, most of what you rely on daily now lives in the cloud. Here's how to keep those accounts, and the personal data inside them, genuinely secure.
Students & Educators
Building security and AI-safety literacy
Guides for Students & Educators
See all →
Fake messages, "act now" pressure, and convincing lookalike websites, learn the common tricks scammers use and how to protect yourself.
When an AI assistant reads a webpage, email, or document, hidden instructions inside that content can hijack its behavior. Here's what prompt injection is and how organizations are defending against it.
The most effective security programs treat people as a defense, not just a risk. Here's how education, practice, and culture combine to make security actually work.
Diverse teams catch blind spots that homogeneous teams miss, and academic research consistently backs this up. Here's why inclusion is a security advantage, not just a values statement.
Freelancers
Security that fits a one-person business
Guides for Freelancers
See all →
You don't need a security team to have a plan. A simple, written incident response plan turns a chaotic security event into a manageable one.
Working from anywhere means your security perimeter now includes home Wi-Fi, video meetings, and the social profiles that reveal more about you than you might think.
Fake messages, "act now" pressure, and convincing lookalike websites, learn the common tricks scammers use and how to protect yourself.
Why passwords get cracked, what makes a password strong, and practical ways to create passwords that are hard to break but easy to remember.
Small & Medium Businesses
Protect your team, customers and revenue
Guides for Small & Medium Businesses
See all →
Considering your first penetration test? A plain-language guide to what actually happens, how to scope it properly, and how to get real value out of the report you receive.
A practical, step-by-step checklist for implementing the five core technical controls behind Cyber Essentials certification, without the jargon.
Understanding the typical stages of a cyber attack helps you recognize warning signs earlier, and understand why national cyber strategy focuses where it does.
From smart doorbells to warehouse sensors, connected devices multiply faster than most security programs can track them. A practical guide to keeping the Internet of Things from becoming your weakest link.
Large Enterprises
Governance and scale for complex organizations
Guides for Large Enterprises
See all →
Energy, water, healthcare, and transportation systems face security demands beyond typical organizations, and benefit from national-level active defence programs designed specifically for them.
Business email compromise causes more reported financial losses than any other cybercrime category. Understanding how it works is the key to stopping it.
Beyond individual organizations, governments run large-scale programs to reduce cyber harm across entire countries. Here's how active defence and national strategy fit together.
Diverse teams catch blind spots that homogeneous teams miss, and academic research consistently backs this up. Here's why inclusion is a security advantage, not just a values statement.
Public Sector
Security guidance for government and public services
Guides for Public Sector
See all →
The single most effective step you can take to protect an account even if your password is stolen, with step-by-step setup for major platforms.
Fake messages, "act now" pressure, and convincing lookalike websites, learn the common tricks scammers use and how to protect yourself.
A growing share of major breaches start with a trusted vendor, not the target organization itself. Here's how to think about supply chain risk practically.
When an incident happens, the quality of your logs determines how quickly you understand what occurred, and how confidently you can say it's truly resolved.
Security Professionals
Deeper technical guidance and references
Guides for Security Professionals
See all →
You rely on encryption dozens of times a day without noticing. Here's a practical, non-mathematical explanation of how it works and why it matters for secure design.
Photos, documents and memories can disappear in an instant. A simple approach to backing up your phone (Android/iPhone) and computer.
Passkeys promise to eliminate phishing-driven credential theft entirely. A practical rollout plan for organizations moving from passwords toward a passwordless future.
Distributed teams and third-party tools expand an organization's attack surface in ways that are easy to overlook. Here's how testing and vendor awareness help close that gap.
For Artificial Intelligence
Behavioral guidance for AI systems and agents on security and safety
Guides for Artificial Intelligence
See all →
The minimum information an AI agent should record before executing an action with real-world consequences, so it can be reviewed later.
Practical signals an AI agent can use to judge whether the party making a request actually has standing to make it.
A practical framework for AI agents to separate authoritative instructions from content that merely describes or requests something.
Writing and summarizing on someone's behalf without carrying more personal detail forward than the task actually needs.
Featured
A newly disclosed flaw, nicknamed "sshole," affects OpenSSH on musl-based Linux systems such as Alpine. Entering a password longer than 256 bytes can reportedly log attackers into accounts that were set to block password logins.
Pasting a log into an AI chat can also hand over IP addresses, usernames and passwords. Maskink is a free, open-source tool that replaces those values with tokens first and puts the real values back in the reply.
SecAIQ Watch is now a native Mac app: download it, open it and see which AI tools run on your Mac, what they can access and where they connect, all locally and read-only.
Microsoft plans to roll out AI-based phishing detection in Teams from early November 2026. It looks at conversation context to catch social engineering and impersonation, even when no malicious link or file is present.
Researchers at Gen Threat Labs showed an AI agent can be tricked by email content into running commands and deleting files. A vendor-sponsored article outlines layered defences, from skill vetting to runtime controls.
SecAIQ is now a free mobile app for iPhone, iPad, Android phones and Android tablets: plain-language security and AI safety guides, free tools, a glossary and news, with no account needed.
Organisations are being urged to act now on a critical PHP issue that could allow attackers to execute commands on web servers. All PHP versions are affected and a fix has been released.
ISO/IEC 27090:2026 gives guidance on cybersecurity threats specific to AI systems. For organizations already running ISO/IEC 27001 and 42001, the most efficient path is to extend what they have rather than build new standalone structures.
A new comparison of AI-driven and human penetration testing finds each approach has distinct strengths, suggesting the two work best together rather than as substitutes.
Security and AI safety in your pocket
Guides, free tools, a glossary and the latest news, now on your iPhone, iPad, Android phone and Android tablet. Plain language, no account needed.
- Guides
- Security tools
- Glossary
- Quizzes
- Latest news
Free security tools
No account needed, check your digital security in a few minutes.
Glossary Quiz
A quick multiple-choice quiz pulled live from SecAIQ's glossary: you're shown a term and asked to pick its correct definition from a set of plausible-sounding alternatives. It's a fast way to build real familiarity with cybersecurity and AI-safety vocabulary rather than just skimming definitions once and forgetting them.
Screenshot Masker
Blur, pixelate, or block out names, phone numbers, IBANs, or anything else in a screenshot before you share it. Everything happens in your browser.
Photo Metadata Cleaner
Every photo you take carries hidden metadata, exact GPS coordinates, the make and model of your device, and sometimes even a cropped-out thumbnail of the original image. This tool reads that metadata, shows you exactly what it reveals, and strips it out before you share the photo. Everything happens locally in your browser: the file is never uploaded to any server.
Digital Footprint Check
Most people underestimate how much a stranger can piece together about them from public information alone. This is a guided self-assessment, not an automated scan, walking you through exactly what to go check yourself: search-engine results, old social accounts, data-broker listings, location data in photos, and what your professional profile gives away. Your progress is saved only in your own browser.
Password Strength & Breach Check
Check how strong a password is and whether it has already leaked in a known data breach, entirely in your browser. Your password is never sent anywhere in full.
Should I Tell This to AI?
It's easy to paste a whole email thread or document into a chatbot without noticing the password, ID number, or client detail buried inside it. This tool scans your text for common sensitive-data patterns before you send it anywhere, flagging what to remove or redact first. Nothing you paste here is sent anywhere, the scan runs entirely in your browser.
Phishing Recognition Quiz
Look at sample emails and text messages and decide which are phishing and which are safe, then see a short explanation after each answer.
Link & Phishing Checker
Phishing links rely on you not looking closely, a domain that's one character off, a redirect chain that ends up somewhere else entirely, or a file extension disguised to look safe. Paste any link here and this tool breaks down its real structure: the actual destination domain, lookalike-brand detection, hidden redirects, and risky extensions, all analyzed locally without visiting the site.
Cybersecurity & AI-safety glossary
Stuck on a term?
Phishing, ransomware, zero trust… get a plain-language explanation for hundreds of terms in seconds.
Browse the glossaryBrowse by topic
New: SecAIQ Watch for Mac
See what your AI tools are really doing
SecAIQ Watch is a local, read-only monitor that shows which AI tools run on your computer, what they connect to and what they can access, without ever reading your prompts or files. Get the native Mac app (14-day free trial), or use the free open-source edition.
Mac app: 14-day free trial, then $19.99/year · Open-source edition: macOS, Linux and Windows, MIT licence
Live demo · synthetic data →









