CIHAN NETWORK · OPERATIONAL SECURITY
Know what you own. Know what comes next.
Build a living asset and access picture, place security dates on a real calendar, check exposed passwords privately and preserve incident evidence without creating another account.
Local-first · exportable · no account required01 · ASSET & OWNERSHIP INVENTORY
You cannot protect what nobody owns.
Record domains, hosting, email, cloud, devices and applications with ownership, criticality, dependencies and renewal dates.
02 · ACCESS REVIEW CENTER
Remove access before it becomes exposure.
Track accounts, roles, MFA and review dates. This workspace never asks for or stores account passwords.
03 · EXPOSED PASSWORD CHECK
Strong does not always mean unseen.
The password is hashed on this device. Only the first five SHA-1 characters are sent to the official Pwned Passwords range service; the full password and full hash never leave the browser.
—
No check yet
The entered value is cleared immediately after each check.
Source: Have I Been Pwned · Pwned Passwords API · A “not found” result does not prove that a password is safe or unique.
04 · SECURITY CALENDAR
Put security work on a calendar that can remind you.
Asset renewals, access reviews and vendor reviews appear automatically. Add custom events and export an ICS file with reminders.
05 · INCIDENT EVIDENCE TIMELINE
Preserve decisions, time and file fingerprints.
Build a chronological working record. Attached files are hashed locally; only their name, size, type and SHA-256 fingerprint are saved.
06 · FILE PRIVACY CLEANER
Share the content, not the hidden history.
Inspect images and PDFs locally. Supported images are re-rendered without embedded metadata; PDF Info and Metadata objects are neutralized without uploading the file.
JPG · PNG · WEBP · PDF
Choose a file to inspect privately
Maximum 25 MB · processed in this browser
READY
No file selected
Always open and verify the downloaded copy before sharing it. Metadata removal cannot prove that visible content contains no sensitive information.
DATA BOUNDARY
Export what matters before clearing browser data.
Inventory, access, calendar and evidence records are stored on this device. Clearing site data removes them. The exposed-password check sends only a five-character hash prefix to the official range API.