One account. Every tool your company runs on.
qzila is a family of small, single-purpose tools: each one does one job properly — watch your domains, keep the evidence, run onboarding, track the hours — and they share one sign-in, one alert hub and one bill. Built by people who run security and compliance audits for a living.
Every account gets €5 of usage free each month, shared by all the tools. No card and no time limit: you pay only for what goes over. Beta tools are free while in beta, by invitation.
Tools for every part of the company
Security and compliance are where we started. The same account now runs tools for marketing, day-to-day work and the back office.
Security
Links, mail, domains and files that cannot be turned against you.
Compliance
Audits, roles and recovery plans, with the evidence kept.
Monitoring
Know the minute your site, DNS or pages change.
Marketing
A site that is up, mail that lands and a brand nobody copies.
Productivity
Hours, files and routine jobs, without the spreadsheets.
Business & finance
People, roles and billable hours, in order.
A letter grade and the exact fix
Every check ends in a grade you can put in front of the board — and, underneath, the exact record, header or setting to change. No 400-line scanner export.
- SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI
- CSP, HSTS and the other response headers
- TLS protocols, ciphers and certificate expiry
- SPF v=spf1 include:_spf.google.com -all
- DKIM google · 2048-bit
- DMARC p=quarantine · adkim=s · aspf=s
- MTA-STS mode: testing → enforce
- BIMI /bimi/logo.svg
Where the hours went, ready for the invoice
Not everything is security. Timetracking is a timer and a weekly timesheet by client, project and task, with your rates. Approved weeks lock, and the month goes to Excel or CSV for the invoice the same day.
- Timer, or a whole week at once
- Amounts from your rates, billable or not per entry
- Timesheets submitted, approved and locked
| Client · project | Mon | Tue | Wed | Thu | Fri | Total |
|---|---|---|---|---|---|---|
| Acme · Website | 3 h | 2.5 h | 4 h | 3.5 h | 2 h | 15 h |
| Acme · Support | 1 h | 1.5 h | – | 1 h | 1.5 h | 5 h |
| Northwind · NIS2 audit | 2.5 h | 3 h | 2.5 h | 2 h | 3 h | 13 h |
| Internal · meetings · non-bill. | 1 h | 0.5 h | 1 h | 0.5 h | 1 h | 4 h |
One invoice, itemised per tool
A public price per unit, metered monthly. Add a domain and it starts billing; remove it and it stops the same day. Set a budget and get warned before you reach it.
- No minimum, no annual licence, no contract
- Usage overview per tool, exportable
- Prices listed in your account
| Email Security | 120 audits | € 6.00 |
| Uptime Monitor | 5 domains | € 10.22 |
| TLS Scanner | 60 scans | € 3.00 |
| Snapshots | 25 pages | € 28.75 |
| Monthly credit | −€ 5.00 | |
| Total | € 42.97 | |
Built by the people who run the audits
We run ISO 27001, NIS2 and DORA audits. An auditor does not ask whether you have a tool; they ask what happened, who knew and when. This is what it looks like when someone touches your domain. One sign-in, one place for alerts, one invoice. Hosted in the EU, on AWS in Frankfurt.
- 09:12NS record changed
ns1.example.net → ns.attacker.example - 09:12Alert sentSlack #ops · security@example.com
- 09:19Jana took itNot a planned change; registrar contacted.
- 09:41Record restored
ns1.example.net· confirmed by DNS Monitor - 09:41Kept as evidenceIn Asign, with times and who did what, ready for the auditor.
Need the whole picture? Asign.
Asign is the GRC platform for NIS2, DORA and ISO 27001 — risk analysis, BIA, vendor management, incident management, training and automated evidence collection. qzila tools plug into it.
Start with one tool. Add the rest when you need them.
Sign in once and every tool is a click away. You pay only for what you watch, per month, with no minimum and no contract — the price list is in your account before you add anything.
- One account across every qzila tool
- €5 of usage free every month, then pay-as-you-go
- Alerts to email, Slack, webhook, SMS or Jira