Free DevOps tools
The toolbox engineers bookmark.
Diagnostics that see your infrastructure from the outside, and daily utilities that never leave your browser. No signups, no tracking, no limits.
Diagnostics
server-assisted · we probe from outside→
SSL / TLS audit
Certificate chain, expiry, protocol versions and security headers — graded with fix hints.
→
DNS health
NS consistency, TTL sanity, dangling CNAMEs and common misconfigurations.
→
DNS lookup
Query any record type for a domain — A, AAAA, MX, TXT, NS, CAA, SRV, PTR and more, with TTLs.
→
GeoIP lookup
Locate an IP or hostname: country, city, coordinates with accuracy radius, time zone, network and AS operator.
→
Email deliverability
SPF, DKIM, DMARC, MX and blacklist report with plain-language fixes.
→
Port checker
Checks whether a TCP port on a host is open, closed or filtered — with latency and service info.
→
WHOIS lookup
Registration report for a domain: registrar, expiry dates, transfer lock, statuses and DNSSEC — RDAP-first with WHOIS fallback.
→
HTTP headers
Status line, redirect chain and every response header of a URL, grouped by purpose.
→
Security headers
Graded report for HSTS, CSP, clickjacking protection, cookie flags and version disclosure.
→
Kubernetes CVEs
Enter a Kubernetes version: known CVEs with the patch that fixes them on your release line, plus support status.
Utilities
100% client-side · nothing leaves your browser→
Base64
Encode / decode, UTF-8-safe, URL variant.
→
JWT decoder
Header, claims and expiry status. Signature is not verified.
→
Password generator
crypto.getRandomValues, length and charset options, entropy estimate.
→
Cron parser
Plain-English description and the next five run times.
→
CIDR calculator
Network, broadcast, host range and contains-IP check.
→
Timestamp converter
Unix ↔ ISO / local / UTC, ms and s auto-detect.
→
YAML / JSON / TOML
Validate YAML, JSON and TOML with precise error location — convert and pretty-print between all three.
→
bcrypt / htpasswd
Hash generation fully client-side, WASM under the hood.
→
Punycode
Converts internationalized domain names to punycode (xn--…) and back.
→
UUID / ULID generator
Random UUID v4, time-ordered UUID v7 and ULID — bulk generation with formatting options.
→
MD → PDF / Word
Converts a Markdown file (up to 2 MB) to PDF or Word — headings, lists, code and tables, with page-size and border options.
→
Regex tester
Test JavaScript regular expressions: highlighted matches, capture groups and a replace preview.
→
QR generator
QR codes from any text or URL — error-correction levels, SVG and PNG download.
→
YAML diff
Structural diff for YAML and JSON documents — compares parsed values, ignores formatting and key order.
→
SBOM viewer
Inspect CycloneDX and SPDX JSON SBOMs: components, versions and a license summary with filtering.
→
CSP analyzer
Parse a Content-Security-Policy and grade it: unsafe directives, missing protections, deprecated syntax.
→
Password leak check
Check whether a password appears in known breaches — the password never leaves your browser, only 5 characters of its hash.
→
Dockerfile analyzer
Lint a Dockerfile for root containers, unpinned images, leaked secrets, cache busting and image bloat.
→
K8s manifest validator
Validate Kubernetes YAML: structure, removed API versions, security context, resources, probes and inline secrets.