Network & security toolbox
Inspect the detail.
Understand the signal.
37 practical utilities for DNS, email security, web configuration and day-to-day technical work. Local analysis where possible. Public-data queries only when you choose.
Use public, non-sensitive test data. Do not paste classified information, production credentials or private keys. Local utilities do not transmit their inputs from this component. Other scripts on the website are outside its control.
01DNS OverviewA, AAAA, CNAME, MX, NS, TXT, SOA and CAAPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above.
Ready.
02Resolver ComparisonCompare Google and Cloudflare DNS responsesPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above.
Ready.
03DNSSEC SignalsInspect DS and DNSKEY recordsPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above. DS/DNSKEY observations do not prove a valid DNSSEC chain.
Ready.
04Reverse DNSResolve public IPv4 or IPv6 to PTRPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above.
Ready.
05WHOIS / RDAPStructured registration data for domainsPublic data query
This query is sent to rdap.org and may be redirected to the authoritative registry.
Ready.
06IDN / PunycodeConvert a Unicode hostname to its ASCII representationBrowser-local
Unicode hostnames are converted to ASCII. Look-alike detection is not performed.
Ready.
07SPF CheckLocate and display SPF TXT policyPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above.
Ready.
08DMARC CheckInspect policy, reporting and alignment signalsPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above.
Ready.
09MX ReviewInspect mail exchangers and priorityPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above.
Ready.
10MTA-STS & TLS-RPTCheck policy discovery records for SMTP transport securityPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above.
Ready.
11BIMI CheckInspect default BIMI DNS recordPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above.
Ready.
12Email Posture SummarySPF, DMARC, MX, MTA-STS and TLS-RPT in one viewPublic data query
Sends the entered domain or public IP to the selected DNS provider. Public-data queries must be enabled above.
Ready.
13URL InspectorParse scheme, host, port, path, query and fragmentBrowser-local
Ready.
14Security Headers AnalyzerPaste response headers and review core controlsBrowser-local
Paste headers for local review. The target website is not contacted.
Ready.
15CSP ReviewBasic policy hygiene and risky-directive checksBrowser-local
A lightweight review, not a complete CSP parser or browser security assessment.
Ready.
16Cookie Flag AnalyzerReview Secure, HttpOnly and SameSite attributesBrowser-local
Ready.
17HSTS BuilderGenerate a strict transport security policyBrowser-local
Test HTTPS on every affected subdomain before enabling includeSubDomains or preload.
Ready.
18security.txt BuilderCreate a minimal RFC 9116-style security contact fileBrowser-local
Generates text only. No file is published automatically.
Ready.
19IPv4 CIDR CalculatorNetwork, broadcast, host range and maskBrowser-local
Ready.
20IP ClassifierIdentify common private, loopback and special IPv4 rangesBrowser-local
Ready.
21Port ReferenceQuick lookup for common TCP/UDP servicesBrowser-local
Ready.
22IPv4 to IntegerConvert dotted IPv4 notation to 32-bit integer and backBrowser-local
Ready.
23Unix Permission CalculatorConvert chmod numeric and symbolic notationBrowser-local
Ready.
24Redirect Rule BuilderCreate a reviewed Apache URL-redirect exampleBrowser-local
Generates an Apache 2.4 .htaccess example for review; no configuration is changed.
Ready.
25JWT DecoderDecode header and payload locally without signature validationBrowser-local
Use sample tokens only. Decoding does not verify a signature or authenticity.
Ready.
26Regex TesterTest JavaScript regular expressions against sample inputBrowser-local
Runs in an isolated worker with a one-second time limit. Up to 100 matches.
Ready.
27Password Entropy EstimateEstimate search space from observed character classesBrowser-local
Use a sample, never a production password. This is a theoretical random-search-space model, not a strength score.
Ready.
28CORS Header ReviewReview Access-Control-* response headersBrowser-local
Ready.
29JSON ValidatorValidate and pretty-print JSON locallyBrowser-local
JavaScript JSON parsing can round large integers and retain only the final duplicate key.
Ready.
30Hash GeneratorSHA-256, SHA-384 and SHA-512 using Web CryptoBrowser-local
Ready.
31Subresource Integrity GeneratorCreate SHA-384 SRI value for pasted contentBrowser-local
The result is based on the exact pasted text encoded as UTF-8.
Ready.
32Base64 Encode / DecodeLocal UTF-8 conversionBrowser-local
Ready.
33Timestamp ConverterUnix timestamp and ISO 8601 conversionBrowser-local
Ready.
34UUID GeneratorGenerate random UUID v4 values in-browserBrowser-local
Ready.
35Text / Hex ConverterConvert UTF-8 text to hexadecimal and backBrowser-local
Ready.
36URL Encode / DecodePercent-encode or decode a URI componentBrowser-local
Ready.
37HTTP Status ReferenceQuick reference for common status codesBrowser-local
Ready.
No matching tools. Try another keyword or choose All tools.
Artefaktum Workspace
When an individual check is not enough.
Move from isolated technical signals to structured security analysis and practical planning. Explore the professional tools available through Artefaktum Workspace.
Professional products are offered on a 12-month licence term. Access follows the agreed scope.
Operating boundaries
Useful checks. Honest limits.
Observe before acting.
DNS and registration queries read public data. This toolbox does not perform port scans, exploitation or vulnerability probing.
Interpret in context.
A record, header or token field is a signal. Its presence does not establish security, authenticity, regulatory conformity or operational readiness.
Keep sensitive data out.
Use examples and sanitised inputs. Results are not stored by this component. You can copy, export or clear each result yourself.
A practical next step
Need an assessment, not another signal?
Discuss a concrete architecture, information-protection or operational-security requirement.
