Diagnostics

Ten tools that each answer one question properly.

Every test here runs against real infrastructure and shows its working. Nothing is scored by an opaque vendor feed, and nothing is stored.

Enumerate every ICE candidate your browser will hand to a remote peer, and compare them against the address you are actually connecting from.

Query four independent encrypted resolvers in parallel and compare their answers to detect rewriting, filtering or interception.

See yourself the way a streaming service does: network class, datacenter signals, and locale contradictions scored side by side.

Probe an IPv4 and an IPv6 literal endpoint directly to establish whether your network has a working dual stack.

Every header your browser sent on this request, exactly as our edge received it, with an explanation of what each one leaks.

Protocol version, negotiated cipher suite and handshake timing for the connection you are reading this on.

Resolve any IPv4 or IPv6 address to its autonomous system, announced prefix, registry and allocation date.

A, AAAA, MX, TXT, NS, CNAME, SOA, CAA and SRV records for any domain, resolved over DNS-over-HTTPS at the edge.

SPF, DMARC, MX and DKIM selector discovery for any domain, with a plain reading of what is misconfigured.

Compare what four major public resolvers currently return for a record, to see whether a change has landed everywhere.