Security & diagnostics
Checks for the things that quietly break or expose a site. Only public addresses are contacted, every redirect hop is re-checked, and nothing is stored.
12 tools
- VPN & Proxy DetectionTor, data-centre and proxy signals for an IP address, each with its source.
- DNSSEC CheckDS, DNSKEY and signatures: is the chain of trust intact?
- Email DNS CheckMX, SPF, DMARC, MTA-STS and DKIM records of a domain, explained.
- IP Blacklist CheckIs an address listed on public spam blocklists (DNSBL)?
- Port CheckerIs a port on your own connection reachable from the internet?
- RPKI Route ValidatorIs a route's origin AS authorised by a ROA?
- TLS Certificate CheckThe certificate a server presents, its chain and expiry.
- HTTP HeadersYour request headers, and the response headers of any public URL.
- Security HeadersHSTS, CSP and the other protective headers of a public site.
- Redirect CheckerFollow a URL hop by hop with status codes.
- WebRTC Leak TestIn your browserWhich addresses your browser exposes over WebRTC.
- User-Agent ParserIn your browserBrowser, engine, operating system and device from a user-agent string.