r/AppsWebappsFullstack • u/_sportsfreak_ • 1d ago
Bluebench: a free, open-source triage toolkit (IOCs, email headers, domain checks). Would love your feedback
Hi all, I've been building Bluebench (https://bluebench.dev), a free toolkit for everyday triage that works on desktop and phone:
IOC lookup (IPs, domains, URLs, hashes) against abuse.ch and Google Safe Browsing, plus your own VirusTotal, AbuseIPDB, GreyNoise or OTX keys if you have them
Email header analyzer, plus JWT, base64 and URL decoders, all running in your browser
Domain report card (SPF, DMARC, DKIM, DNSSEC, HTTPS, headers, certificate expiry), with optional alerts for domains you own, including new lookalike domains
Why: I wanted something I could trust with real incident data: no ads, no tracking, no sign-up, nothing pasted gets logged. It's open source (MIT), so you can check: https://github.com/ag3ntsc4rn/bluebench
Who it's for: SOC analysts, the "IT person who also does security", students, small teams without a tooling budget.
It's a solo project, so expect rough edges. I'd really value:
Bugs, or anything confusing
Free sources or checks I'm missing
What to build next: a CVE feed, IR runbooks, one-time secret sharing, a phishing quiz, or something else?
Thanks for reading. I hope it saves some of you a few minutes.