A small, extensible directory of practical utilities. The first is the Website Security Snapshot — a passive, rate-limited view of externally observable configuration.
Enter a domain and receive a summary of externally observable security signals. No account, no intrusive probing, and a clear statement of what is and is not being observed.
This tool is not yet runnable; it will be enabled here when ready.
Validity, issuer chain and expiration of the presented certificate.
Presence and configuration of response security headers.
Whether plain HTTP is redirected to HTTPS correctly.
Publicly resolvable records relevant to exposure.
Each future tool follows the same safety rules and is labelled honestly until it is available.
These rules are non-negotiable and apply to every tool in this directory.
Boundaries
Talk to us about a scoped, authorised assessment.