KrakenShield (Kraken Shield) is a European cybersecurity platform for professionals: four audits to understand what to fix on your website, and training to build everyday cybersecurity habits, on your own or with your team.
TLS configuration, source code and privacy: one platform to understand your exposure and prioritize fixes. Explore the available capabilities and those rolling out.
01Free with your account · 0 Kredits
Assess, without touching anything, the TLS configuration of your domains: versions, cipher suites, certificates, and HTTP security headers.
02Discover what your homepage stores and contacts before any choice, after rejecting and after accepting cookies. Technical observations to guide your GDPR work, without claiming legal certification.
03One command on your server is enough: the agent analyzes your code in place, detects secrets and generates a CycloneDX SBOM of your dependencies. These are checked against an extensive database of known vulnerabilities, powered by OSV and its reference sources. Only the inventory and findings are sent back: your source code stays with you.
04A console-driven pentest: reconnaissance, exposed ports, TLS, vulnerabilities, sensitive resources and backdoor detection. Go further with SQL injection detection, hidden content discovery and brute-force simulation to check your login protections.
05Assess your TLS readiness for the quantum era and apply a modern encryption posture on your Cloudflare edge, via API.
KrakenShield automates the whole path (scope, analysis, prioritization, follow-up) so you get consultant-grade results without waiting for a consultant.
SSL and privacy: any public website. Penetration testing: you prove the domain is yours and accept the mandate, nothing runs outside that scope.
The analysis runs in the background, isolated, with zero risk to your production.
Not a tool dump: graded, explained results with the concrete fix to carry out.
Apply the fixes, re-run the audit whenever you want and watch your grade climb.
A report gathering dust protects no one. We tell you what is exposed, why it matters and what to fix first, without your data ever leaving Europe.
Create your accountEuropean sovereignty
Your domains, audit results and conversations with our assistants never leave the European Union. The whole chain runs on European providers.
Proof of domain control and an accepted authorization mandate before any penetration test. Every action is checked server-side, timestamped and logged.
Every issue is graded, explained in plain words and paired with a recommended fix, ranked by real risk. You know exactly where to start on Monday morning.
Proven, non-destructive methods, industrialized: re-run an audit after every fix instead of waiting for the next engagement.
KrakenShield, also written Kraken Shield, is a European online cybersecurity platform published by the French company KRAKEN HOLDING. It offers professionals four audits (surface and SSL/TLS, privacy, code, non-destructive penetration testing), security awareness training and certifications, at krakenshield.eu.
Yes. SSL and privacy audits only observe what a website shows any visitor: they work on any public website. Penetration testing requires that you are entitled to it: you first prove that you control the domain (DNS record, file or meta tag) and accept an authorization mandate, both checked and recorded before any test.
No. Create your account, verify your domain and run your audit: everything is self-service and takes minutes.
Exclusively in Europe (IONOS), in compliance with GDPR. Your data is encrypted at rest and in transit, and is never resold or transferred outside the EU.
No. The agent scans your code where it lives and only sends back the findings (vulnerabilities, dependencies, secrets). Your source code never leaves your infrastructure.
It is designed to limit impact: no denial-of-service testing, limited rates and a stop button available at any time. SQL injection detection, content discovery and brute-force simulation are off by default and require explicit opt-in in the authorization. These phases may trigger your protections, including an IP block or a test-account lockout.
Algorithms designed to resist future quantum computers. KrakenShield will assess your readiness and help you enable, via the Cloudflare API, a modern and durable TLS posture (capability coming soon).
Kredits are the units used for audits and training. Each action’s cost is shown before confirmation: it depends on the audit type and, for code analysis, the size scanned.
A TLS audit checks encryption and certificates. A privacy audit examines cookies and trackers. Code analysis needs an agent; penetration testing requires a verified scope and authorisation.
Start with the Kredits granted by the promotional code, subject to its conditions: no purchase is needed to use them. To go further, buy a pack in My Kredits, with secure Stripe payment and an invoice.
Access your console to choose an audit or explore Academy training. You stay in control of the Kredits you use.
Already have an account? Sign in
No chats yet. Ask your first question!
Chats with no activity for 30 days are archived, then deleted after 90 days.
