Free DevOps tools
The toolbox engineers bookmark.
Diagnostics that see your infrastructure from the outside, and daily utilities that never leave your browser. No signups, no tracking, no limits.
Diagnostics
server-assisted · we probe from outside→
SSL / TLS audit
Certificate chain, expiry, protocol versions and security headers — graded with fix hints.
→
DNS health
NS consistency, TTL sanity, dangling CNAMEs and common misconfigurations.
→
DNS lookup
Query any record type for a domain — A, AAAA, MX, TXT, NS, CAA, SRV, PTR and more, with TTLs.
→
GeoIP lookup
Locate an IP or hostname: country, city, coordinates with accuracy radius, time zone, network and AS operator.
→
Email deliverability
SPF, DKIM, DMARC, MX and blacklist report with plain-language fixes.
→
Port checker
Checks whether a TCP port on a host is open, closed or filtered — with latency and service info.
→
WHOIS lookup
Registration report for a domain or IP address: registrar, expiry, transfer lock and DNSSEC — or the RIR network, holder and abuse contact for an IP. RDAP-first with WHOIS fallback.
→
HTTP headers
Status line, redirect chain and every response header of a URL, grouped by purpose.
→
Security headers
Graded report for HSTS, CSP, clickjacking protection, cookie flags and version disclosure.
→
Kubernetes CVEs
Enter a Kubernetes version: known CVEs with the patch that fixes them on your release line, plus support status.
Utilities
100% client-side · nothing leaves your browser→
Base64
Encode / decode, UTF-8-safe, URL variant.
→
JWT decoder
Header, claims and expiry status. Signature is not verified.
→
Password generator
crypto.getRandomValues, length and charset options, entropy estimate.
→
Cron parser
Plain-English description and the next five run times.
→
Subnet / CIDR calculator
IPv4 and IPv6 networks: ranges, netmask, contains-IP check, splitting into subnets and the v4-in-v6 address forms.
→
Timestamp converter
Unix ↔ ISO / local / UTC, ms and s auto-detect.
→
YAML / JSON / TOML
Validate YAML, JSON and TOML with precise error location — convert and pretty-print between all three.
→
bcrypt / htpasswd
Hash generation fully client-side, WASM under the hood.
→
Punycode
Converts internationalized domain names to punycode (xn--…) and back.
→
UUID / ULID generator
Random UUID v4, time-ordered UUID v7 and ULID — bulk generation with formatting options.
→
MD → PDF / Word
Converts a Markdown file (up to 2 MB) to PDF or Word — headings, lists, code and tables, with page-size and border options.
→
Regex tester
Test JavaScript regular expressions: highlighted matches, capture groups and a replace preview.
→
QR generator
QR codes from any text or URL — error-correction levels, SVG and PNG download.
→
YAML diff
Structural diff for YAML and JSON documents — compares parsed values, ignores formatting and key order.
→
SBOM viewer
Inspect CycloneDX and SPDX JSON SBOMs: components, versions and a license summary with filtering.
→
CSP analyzer
Parse a Content-Security-Policy and grade it: unsafe directives, missing protections, deprecated syntax.
→
Password leak check
Check whether a password appears in known breaches — the password never leaves your browser, only 5 characters of its hash.
→
Dockerfile analyzer
Lint a Dockerfile for root containers, unpinned images, leaked secrets, cache busting and image bloat.
→
K8s manifest validator
Validate Kubernetes YAML: structure, removed API versions, security context, resources, probes and inline secrets.
→
Hash & checksum
Every digest of a text or file at once — SHA-2, SHA-3, Keccak, BLAKE2b/BLAKE3, RIPEMD-160, MD5, SHA-1, CRC-32, Adler-32 — with a checksum-match field.
→
HMAC generator
HMAC signatures for webhook debugging: pick the algorithm, paste the secret, compare against the signature a provider sent.
→
Encrypt / decrypt
Encrypt or decrypt a string with AES-GCM/CBC, ChaCha20-Poly1305 or legacy 3DES — key, IV and output in hex or base64.
→
Password hashing
Derive keys with Argon2id, scrypt, PBKDF2 or bcrypt and see how long each parameter set actually takes.
→
chmod calculator
Unix permissions both ways: checkboxes, octal and ls-style symbolic stay in sync, with SUID, SGID and the sticky bit explained.
→
curl → code
Paste a curl command — from API docs or browser devtools — and get working Go, Python or Node.js code with headers, body and auth carried over.
→
CORS generator
Build a correct CORS policy and get it as Nginx, Go (Chi/Gin), Express or Caddy config — or paste response headers and see what a browser concludes.
→
Secret scanner
Check a config, .env, Dockerfile or manifest for accidentally committed credentials — AWS keys, GitHub tokens, private keys, JWTs — before they reach git.
→
Certificate decoder
Decode an X.509 certificate or chain (PEM/DER) in the browser: SAN, validity, issuer, key type, usage flags and fingerprints — private keys are refused, not parsed.
→
SSH keys
Ed25519 keypairs generated in the browser, fingerprints and format conversion for any public key, plus authorized_keys restriction and hashed known_hosts builders.
→
IAM / RBAC analyzer
Paste an AWS IAM policy, Kubernetes RBAC manifest or GCP binding and see the dangerous grants highlighted: wildcards, PassRole, secrets access, public principals.
→
TLS config
Generate TLS protocol and cipher configs per profile — Mozilla modern/intermediate, PCI DSS, BSI — for Nginx, Caddy, OpenSSL and Go, or validate the config you already run.