Security & diagnostics
Checks for the things that quietly break or expose a site. Only public addresses are contacted, every redirect hop is re-checked, and nothing is stored.
9 tools
- DNSSEC CheckDS, DNSKEY and signatures: is the chain of trust intact?
- Email DNS CheckMX, SPF, DMARC, MTA-STS and DKIM records of a domain, explained.
- RPKI Route ValidatorIs a route's origin AS authorised by a ROA?
- TLS Certificate CheckThe certificate a server presents, its chain and expiry.
- HTTP HeadersYour request headers, and the response headers of any public URL.
- Security HeadersHSTS, CSP and the other protective headers of a public site.
- Redirect CheckerFollow a URL hop by hop with status codes.
- WebRTC Leak TestIn your browserWhich addresses your browser exposes over WebRTC.
- User-Agent ParserIn your browserBrowser, engine, operating system and device from a user-agent string.