Safe by design
URL tools check one public URL, block private/internal targets, use short timeouts, and avoid response-body proxying. They are built for diagnostics, not scanning.
Review public website-facing signals such as response headers, security headers, robots.txt crawler directives, XML sitemaps, canonical/noindex tags, meta title and description tags, heading structure, Open Graph metadata, structured data, SSL certificate records, redirect chains, DNS, and certificate-authority DNS policy. These tools are limited checks and are not a full security audit.
View selected response headers for one public URL.
Security Headers CheckerCheck common security-related header presence.
Redirect CheckerFollow a limited redirect chain with status codes.
HTTP Latency TestMeasure constrained HTTP request timing.
SSL Certificate CheckerReview certificate transparency issuer, expiry, SAN, and match signals.
Robots.txt CheckerParse crawler directives, sitemap declarations, and common SEO signals.
Sitemap CheckerValidate XML sitemap structure, sampled child sitemaps, and URL signals.
Canonical / Noindex CheckerInspect canonical tags, meta robots, and X-Robots-Tag headers for one public URL.
Meta Title / Description CheckerInspect title tags, meta descriptions, duplicate metadata, and snippet preview signals.
HTML Heading / Content Structure CheckerInspect heading hierarchy, skipped levels, duplicates, and content structure signals.
Open Graph / Social Preview CheckerInspect social preview metadata, Twitter/X Card fields, and preview conflicts for one public URL.
Structured Data / JSON-LD ValidatorCheck JSON-LD blocks, schema.org types, malformed structured data, and basic schema findings for one public URL.
CAA LookupCheck certificate authority DNS policy records.
DNS LookupReview public DNS records for a domain.
WHOIS / RDAP LookupReview public registry context for domains, IP addresses, and ASNs.
URL tools check one public URL, block private/internal targets, use short timeouts, and avoid response-body proxying. They are built for diagnostics, not scanning.
No. They check selected public signals only.
No. Internal and private targets are blocked.
Port scanning carries higher abuse risk and remains deferred.