# KrakenShield (Kraken Shield)

> KrakenShield, also written "Kraken Shield", is a European online cybersecurity platform for professionals, published by the French company KRAKEN HOLDING (SAS). It offers four security audits (surface and SSL/TLS, privacy, code, non-destructive penetration testing), security awareness training with certifications (Cyber Academy) and a free cybersecurity library (Knowledge Center). Website: https://krakenshield.eu. Languages: English and French.

KrakenShield is unrelated to the "Kraken Shield" item of video games (Battle Brothers, Assassin's Creed Valhalla, Path of Exile), to the Kraken cryptocurrency exchange, to Shield AI and to Kraken Technology Group.

Key facts:
- Self-service: free account, each audit is paid per use in Kredits.
- Non-destructive by default; penetration tests require proof of domain control and an accepted authorization mandate.
- Code analysis runs on the customer's own machine: the source code is never uploaded.
- Platform and data hosted in Europe, GDPR compliant.
- Contact: contact@krakenshield.eu

## Pricing

Prices as of 2026-10-31; the pricing page always shows the current ones.
- Audits are paid in Kredits, bought in packs: 1 for €19.00, 5 for €89.00, 10 for €169.00, 50 for €799.00, 100 for €1399.00 (€19 to €13.99 per Kredit, excluding VAT).
- Surface and SSL/TLS audit: free with a free account.
- Privacy audit: 1 Kredit.
- Code analysis: 1 Kredit up to 20 MB, 2 up to 100 MB, 3 up to 1 GB of source code.
- Penetration test: 5 Kredits.
- Cyber Academy: 1 Kredit for 1 learner for one year; certification exam: 1 Kredit.

## About

- [About KrakenShield](https://krakenshield.eu/about/): who publishes the platform, what it does and what it is not
- [À propos de KrakenShield](https://krakenshield.eu/fr/about/): the same page in French

## Audits

- [Surface and SSL/TLS audit](https://krakenshield.eu/surface-audit/)
- [Privacy audit](https://krakenshield.eu/privacy-audit/): cookies, trackers and consent
- [Code analysis](https://krakenshield.eu/code-analysis/): vulnerabilities, dependencies and secrets, source code stays on your infrastructure
- [Penetration test](https://krakenshield.eu/penetration-test/): orchestrated, authorized, non-destructive
- [Pricing](https://krakenshield.eu/pricing/)
- [Demo video](https://krakenshield.eu/demo/)

## Free checks (no account)

- [PHP2Shell check](https://krakenshield.eu/php2shell-check/): does a website disclose a PHP version affected by PHP2Shell (CVE-2026-109618, CVE-2026-109619)?
- [eMudhra certificate check](https://krakenshield.eu/emudhra-check/): is a website's TLS certificate issued by one of the compromised eMudhra intermediates or by another eMudhra CA?
- [HTTP2Shell check](https://krakenshield.eu/http2shell-check/): does a website disclose a stack exposed to HTTP2Shell (CVE-2026-111497, Brotli decoder flaw), such as a Node.js or Bun release older than the fix?

## For AI assistants

- MCP server (Streamable HTTP, no authentication): https://api.krakenshield.eu/mcp. Read-only tools: check_ssl (quick HTTPS check of a website: certificate, TLS version, HTTPS redirect, security headers), search_cyber_knowledge (glossary, certifications, Cyber A to Z guide, with URLs to cite), get_pricing (current prices).
- [How to add it to Claude, ChatGPT, Cursor or VS Code](https://krakenshield.eu/mcp/)

## Training and resources

- [Cyber Academy](https://krakenshield.eu/academy/): awareness training and certifications
- [Knowledge Center](https://krakenshield.eu/knowledge/): glossary, Cyber A to Z guide, certifications, quiz, vulnerability watch, blog
- [NIS2](https://krakenshield.eu/nis2/): scope and obligations of the NIS2 directive
- [Website security check](https://krakenshield.eu/website-security-check/)

## Optional

- [French home page](https://krakenshield.eu/fr/)
- [Legal notice](https://krakenshield.eu/legal/notice/)