Facing a ransom demand or locked files?
Ransomware First Aid
Sort the warning signs, protect remaining copies and prepare a local handoff brief. Not a malware scan or decryptor.
Cyber Decision Lab · by Paragamix GmbH
Free cybersecurity
& privacy tools.
Respond to incidents, prepare your team, inspect QR codes and remove photo metadata — directly in your browser.
IT Emergency Email, cloud or ERP down?
- No signup
- Local processing
- Free to use
Find my next steps
Incident response & preparation
IT Emergency Navigator
Coordinate an email, cloud or ERP outage: situation, contacts, actions, continuity and an incident log.
Local record · PDF and JSON exportOpen the navigatorCoordinate the next stepsRecord the situation → confirm responsibilities → keep a log
Incident Response Checklist
Start with the first 15 minutes, then build an incident-specific checklist with roles and recovery steps.
Quick reference + printable team checklistBuild a checklistFirst 15 minutesStart a record → assign a lead → preserve evidence
Tabletop Exercise Generator
Turn planning choices into a facilitator package with timed scenario injects, decision prompts and a debrief.
Planning exercise · not live incident instructionsGenerate an exerciseScenario timelineInitial signal → business impact → recovery decision
Privacy tools
Email & Link Check
Reveal stored email links, compare sender and reply domains, and inspect attachment metadata locally.
.eml or web address · local analysis · no safety verdictCheck a messageA closer look before you clickStored link targets + sender details + attachment metadata
QR Code Scanner
Read a QR image or screenshot and inspect its contents before deciding what to do. Links never open automatically.
PNG, JPEG or WebP · no camera accessScan a QR imageInspect, don’t automatically openDecoded text + destination host + warning signals
Photo Metadata Remover
Inspect supported GPS, date and device fields, then download a checked copy without JPEG recompression.
JPEG only · up to 10 MiB / 20 megapixelsRemove photo metadataKnow what remainsDisplay information may remain; no anonymity guarantee
Privacy by design
How we protect your inputs
Our tools process your choices, notes and selected images in your browser. They do not send those inputs to our servers or save them in application storage.
Clear or restart, reload, or leave the tool to discard its working state. Original files, downloads, copies you make and browser-managed data remain outside that guarantee.
Loading this website still sends technical connection information, such as your IP address, to our host. Optional audience analytics loads only after your consent and never receives tool inputs.
Read the privacy notice →Before you click or share
Practical guides, with limits made clear.QR codes
How to check a QR code link before opening it
Recognize misleading hosts, understand redirects and know when to use a trusted route instead.
Read the QR link guidePhoto privacy
What photo metadata can reveal before you share
Separate hidden location data from visible clues, and check the exact copy you intend to send.
Read the photo privacy guideBuilt for practical use. Clear about the limits.
Published and maintained by Paragamix GmbH. Checklists support professional judgment; a decoded link is not a safety verdict, and metadata removal is not anonymization.
Which tool fits my task?
All seven tools are free, require no account and process your inputs locally in your browser. Available in English and German.
| Tool | Task | Result | Limitations |
|---|---|---|---|
| Ransomware First Aid | Choose first steps when files are locked or a ransom is demanded. | A first-aid brief with next steps; text download and print / Save as PDF. | Does not scan devices, identify ransomware, decrypt files or confirm data theft. |
| Incident Response Checklist | Coordinate a team's response to a suspected cybersecurity incident. | A tailored checklist with roles and response phases; print / Save as PDF. | Does not investigate systems or establish compliance. Adapt actions to your authority and incident. |
| Tabletop Exercise Generator | Prepare a fictional team exercise before an incident. | An exercise package with roles, timed injects and debrief prompts; print / Save as PDF. | Not a live attack simulation, certification or instructions for a real incident. |
| Email & Link Check | Inspect technical details in a suspicious email or address without opening its links. | Readable extracted addresses, domains and, for .eml files, message and attachment metadata. | No AI wording analysis, malware scan, sender authentication or safe/scam verdict. Pasted text cannot reveal hidden link targets. |
| QR Code Scanner | Read a QR code's content before deciding whether to use it. | Decoded content displayed as text with an explanation of its type. | Decoding does not verify a destination or establish that a link is safe. |
| Photo Metadata Remover | Inspect and remove supported metadata from a JPEG before sharing it. | A metadata report and a downloadable cleaned JPEG; the original stays unchanged. | No anonymity guarantee. Visible image content and retained display information can still reveal details. |
| IT Emergency Navigator | Organize an IT outage affecting email, cloud services or ERP. | An incident record; print / Save as PDF and JSON export for continued editing. | Does not diagnose or repair systems. An outage does not by itself prove a cyberattack. The online tool needs connectivity to reopen reliably. |