Every check. One calm workspace.

Verify SPF, DKIM, DMARC, and MX records for any domain.

Trace the Received chain and decode SPF / DKIM / DMARC / ARC results from any received email.

Validate SSL/TLS certificates, expiry dates, and chain issues.

Analyze on-page SEO: meta tags, headings, images, and more.

Measure page load time, Core Web Vitals, and performance score.

Crawl your site and find all broken internal and external links.

Look up A, AAAA, MX, TXT, CNAME, NS, and more DNS records.

Trace full redirect chains and detect loops or mixed content.

Identify frameworks, CMS, analytics, and tech stack of any site.

Get domain registration, expiry, nameserver, and registrar info.

Validate JSON-LD, Microdata, and RDFa structured data markup.

Preview Open Graph and Twitter Card meta tags for any URL.

Analyze + build strict Content-Security-Policy headers. Score A→F with fix instructions.

Validate, test and build robots.txt. Simulate Googlebot / GPTBot / Bing rules per path.

Validate sitemaps + sitemapindex. Detect oversize, mixed hosts, missing lastmod. Drill children.

Inspect every response header on any URL. Findings calibrated to real production defects: HSTS, CSP, cookies, CORS.

Audit manifest delivery, 192px/512px icons, display modes, HTTPS, and offline-readiness evidence.

Parse Set-Cookie headers + audit Secure / HttpOnly / SameSite / Partitioned. Catches the 3 rules that cover 90% of cookie bugs.

Test cross-origin requests with the right preflight, browser-accurate verdict, per-finding fix instructions.

Audit every favicon, apple-touch-icon, manifest, theme-color + /favicon.ico fallback. Visual previews + per-finding fixes.

Static WCAG 2.2 audit — alt text, form labels, button names, heading hierarchy, landmarks. Per-finding fixes.

Monitor your site 24/7 and get instant alerts on downtime.

Track cron jobs and get alerted when they fail or run late.

Build and validate cron expressions with a visual editor.

Validate, format, and minify JSON with syntax highlighting.

Check XML syntax, validate against schemas, and pretty-print.

Validate YAML syntax and convert between YAML and JSON.

Compare two blocks of text and see changes side by side.

Every version: v1, v3, v4, v5, v6, v7, v8 plus Nil and Max. RFC 4122 + 9562.

Encode/decode text or files, standard or URL-safe, padded or unpadded. RFC 4648.

MD5, SHA-1, SHA-256, SHA-384, SHA-512 plus HMAC. Hex or Base64 output, file support.

Component, URI, Form, Punycode encoders + query string parser. RFC 3986 / 3492.

Decode JWT header + payload, verify HS256/384/512 signatures, explain every claim.

Convert between UTF-8/16, Win-1251, KOI8-R, Latin-1, Shift_JIS and more. Mojibake fixer.

Live JavaScript regex match, replace, capture groups + 13-pattern library (email, URL, UUID, IPv4, semver…).

HEX / RGB / HSL / OKLCH converter, 5 palette schemes, WCAG 2.2 contrast checker.

Generate a URL, watch incoming POSTs in real time, inspect headers + body + query. Free + ad-free.

Build and audit campaign URLs with clean source, medium, campaign, content, term, and ID tags.

Create a customizable privacy policy draft for your website.

Create professional HTML email signatures in seconds.

Validate RSS, Atom, and merchant product feeds.