The raw data
behind the grade.
Five inspectors for DNS, TLS, HTTP headers, email, and IP. Each one standalone. Each one queryable from browser, curl, or CI.
Use one when you need it, compose them in CI, or mix with your own pipeline. Open source, self-hostable, no account needed. The same checks lens runs to produce a grade — exposed individually, with full detail.
IP Lookup
Enter any IP — or nothing, to see your own. Get geolocation, ASN,
reverse DNS, and network classification: cloud provider, VPN, Tor
exit node, or known botnet. Works from the browser or curl.
- → Geolocation, ASN & reverse DNS for any address
- → Cloud provider, VPN, Tor & botnet detection
- → JSON, YAML, TOML, CSV — plain text for scripts
- → Batch lookups and field filtering for automation
DNS Inspector
Query multiple DNS resolvers at once and stream results as they arrive. Spot resolver disagreements, trace delegation chains, and audit your domain's full DNS health in one shot.
- → Query, Check, Trace, Compare, Auth, DNSSEC modes
- → Cloudflare, Google, Quad9, Mullvad & more
- → dig-inspired query language with tab completion
- → Streaming results — no waiting for all resolvers
TLS Inspector
Catches what openssl s_client buries in noise.
Full certificate chain, protocol version, cipher strength, and DNS
cross-validation — including broken and expired certs.
- → Full chain: expiry, algorithm, completeness
- → DANE/TLSA validation & CAA record cross-check
- → Multi-IP consistency — detects CDN cert mismatches
- → Intentionally inspects broken & expired certs
HTTP Inspector
Inspect CSP, HSTS, CORS, cookies, and security headers for any URL. Three concurrent probes — HTTPS chain, HTTP port-80 upgrade, and CORS with an evil origin — give you the full picture in one request.
- → Content Security Policy analysis and scoring
- → HSTS validation including preload eligibility
- → CORS probing with simulated cross-origin requests
- → Cookie attribute audit and security header scoring
Email Inspector
DNS-only email security posture analysis. Checks SPF, DKIM, DMARC, MTA-STS, DANE, BIMI, DNSSEC, and more — with an aggregate A–F grade streamed as each check completes.
- → SPF flattening and DKIM key validation
- → DMARC policy analysis with alignment checks
- → MTA-STS, DANE/TLSA, and DNSBL reputation
- → Aggregate A–F grade with per-category breakdown
Learn
Guides on the protocols and concepts behind the tools.