Free Website Security & Diagnostics Tools
Fast, privacy-focused web security testing utilities for developers, webmasters, and agencies. Inspect email authentication, certificates, open firewall ports, and HTTP headers without sales gates.
Security Tools Directory
Select a tool below to run an instant analysis on your domain or server.
DMARC & Email Security Checker
Inspect your domain’s DMARC policy, SPF TXT record, and MX records for common email authentication gaps.
SSL Certificate & Expiry Checker
Inspect a live TLS certificate’s dates, issuer, hostname coverage, negotiated protocol, and expiration countdown.
Open Port & Firewall Checker
Probe common web, database, and admin TCP ports from our server to identify potentially exposed services.
DNS Record Lookup & Configuration Checker
Look up A, AAAA, CNAME, MX, TXT, NS, and CAA records using our resolver, with configuration tips.
HTTP Security Headers Validator
Evaluate HSTS, CSP, X-Frame-Options, and Referrer-Policy with instant copy-paste Nginx, Apache, Caddy, and Cloudflare configs.
Raw PEM Certificate & CSR Decoder
Paste raw X.509 certificate strings or CSR blocks to decode fields, algorithms, and key sizes instantly.
SPF Record Checker
Inspect your SPF TXT record for common syntax issues, +all risks, and direct DNS lookup mechanisms.
URL Redirect & SSL Loop Checker
Trace full 301/302 HTTP/HTTPS redirect chains, detect ERR_TOO_MANY_REDIRECTS loops, and flag insecure downgrade hops.
Domain & IP Spam Blacklist Checker
Check a public IPv4 address or a domain’s first A-record IP against DNS-based lists including Spamhaus, Barracuda, and SpamCop.
URL Risk & Phishing Pattern Checker
Inspect URL patterns, redirects, and domain signals. This heuristic check does not use a malware reputation feed.
Protect Your Website from ADA & WCAG Lawsuits
While DNS and server security protect your infrastructure, digital accessibility ensures every visitor can use your site. Run a free automated WCAG scan to spot compliance risks before they lead to legal demand letters.