Secure Your System

ThreatVector: professional security scans, run from your own desk.

Access the ThreatVector app for free. Get to know the software and automated security scans for: your computer, your network, your website, your email domain, your exposed data. Once you're ready, you answer a few plain questions. ThreatVector does the technical work. Then our system produces a written PDF report comes back by email with every finding rated, explained in English, and ordered by what to fix first.

Download ThreatVector for free See the demo

The Scan Locker — every scan in the library, in one window. Scans you own launch; the rest link straight to the store.

How it works

Three steps, about five minutes of your time.

01

Pick a scan

Open TommyGun and choose what you want checked — this computer, the office Wi-Fi, your website, your email domain, your personal data on the dark web. Scans you have bought are unlocked; the rest are one click from the store.

02

Answer a few questions

A guided wizard replaces the command line entirely. It asks for what it needs in plain language, shows you exactly what it is about to do, and will not start until you consent. Passwords and API keys are masked and never written to the visible log.

03

Read the report

Results are analysed on our servers, triaged for false positives and written up as a branded PDF. It lands in your inbox with an executive summary, charts, a NIST-mapped findings list and a prioritised fix plan.

Inside the app

Built for people who are not security engineers.

Everything below is in the shipping build — not a roadmap.

One library, one window

The Scan Locker shows the whole catalogue at once, grouped by category. Owned scans are live, unowned ones are dimmed with a Buy link, and your run history sits under each card so you can see when you last checked.

A Coverage Level, not a score to game

The header banner rates your coverage by category, not by how many scans you have bought. Three network scans will not read as full protection while your email domain and your personal data have never been looked at.

The same five-step wizard, every time

Consent, details, review, scan, results. Learn it once and every scan in the library works the same way — including the multi-scan bundles.

None

Watch it work, or don't

A live progress bar with a plain-English status line, and a collapsible technical console underneath if you want to see the raw output. Stop the scan at any point — nothing is sent.

It tells you if something failed

If a report could not be delivered, the app says so. It never prints “your report is on its way” over a scan that saved nothing. An unreadable result is reported as unreadable, never as a clean bill of health.

Bundles run as one job

Service bundles run every scan in the package back to back, then produce a single cross-scan analysis — including how an attacker could chain findings from different scans together.

The deliverable

The report is the product.

ThreatVector runs the checks. The report is produced on ThreatVector’s infrastructure, so what you receive is the same document whether you ran one scan or a twelve-scan quarterly bundle.

Branded, with a real cover and contents

Cover page, table of contents with working PDF bookmarks, page furniture on every page, and a confidentiality notice naming the recipient.

Charts, not just tables

A risk-score gauge, a coverage dial showing what actually ran, a severity distribution bar and a category breakdown — on every report, including a clean one.

Mapped to NIST CSF 2.0

Every finding is mapped to the relevant framework control, with an honest “mapping is not an audit” disclaimer. Other frameworks can be selected when you run the scan.

An honest coverage ledger

A per-check list of what ran, what could not run, and what was skipped — with the reason. A check that failed is never quietly counted as a pass.
See a sample report

Before you download

What you need, and what it costs.

Windows 10 or 11, 64-bit

One installer, one app. Some scans need to be run as administrator — the wizard tells you which, and why, before it starts.

The app is free. Scans are not.

TommyGun and the whole scan library download free. You buy the right to produce a report, from $19. Nothing is charged until you run one.

Three runs per purchase

A one-off scan purchase covers three runs — your first look, a follow-up after you have fixed things, and a final check — valid for a year from the first run.

No account to create

Sign in with the Shopify account you bought with, in your normal browser. ThreatVector never stores a store password or payment detail on your machine.

Scans you can run with ThreatVector

ThreatVector QuickScan — Out-of-Date Software Scan (EOL-16)

Out-of-Date Software Scan – End-of-Life and Patch Risk Check

Out-of-Date Software Scan – End-of-Life and Patch Risk Check

$19.00

Questions

Before you download

Is ThreatVector really free?

Yes. The app and the whole scan library download at no cost and there is no trial clock. What you pay for is the right to produce a report from a scan — from $19 for a single scan. Quarterly plans are the only subscription we sell, and they are optional.
Do I need to know anything about security to use it?

No. TommyGun was built for people who are not technical. Every scan asks its questions in plain language, and the report explains each finding in English before it gives you the technical detail.
What can actually check?

More than fifty individual scans and bundles covering this computer, home and office networks, Wi-Fi and IoT devices, websites and domains, email spoofing and business email compromise, cloud storage, breached credentials and dark-web exposure, source code and API keys, Active Directory, and travel security.
Does it send my data anywhere?

Scan results are sent to ThreatVector so they can be analysed and written up — that is how the report is produced. The consent screen shows you what will be sent before anything runs, and secrets you type are masked and kept out of the log. You can stop a scan at any point and nothing leaves your machine.
Is this a replacement for a real penetration test?

No, and the reports say so on the cover. An automated scan is a strong, low-cost first pass that finds the things attackers look for first. ThreatVector also performs human-led penetration testing when you need the real thing.
Which version of Windows do I need?

Windows 10 or Windows 11, 64-bit. Some scans need administrator rights; the wizard tells you which ones and why before it starts.

Ownership and attribution

TommyGun is developed by ThreatVector LLC.

Reporting mechanisms and cybersecurity customer service are powered by ThreatVector LLC.

ThreatVector and its scan library are developed, sold and distributed by ThreatVector LLC.

Use of TommyGun and the QuickScan scan products is governed by our Terms of Service. Scans may be run only against systems you own or are authorised in writing to test.

Get started

Download the app. Buy a scan when you are ready.

Nothing is charged until you run a scan, and the report is yours to keep, forward or hand to an insurer.
Download TommyGun free Browse the scans