Diagnostic tools

Free tools for the questions that come up when something is slow, unreachable or misconfigured. They report what was measured, explain what it means, and say what to check next — and they say when a measurement could not be made, rather than filling the gap with a plausible number. No account, and no sign-up to see results.

Start here

Internet & networking

Throughput, latency, loss and the behaviour of a connection under load.

VoIP & communications

Whether a network will carry calls well, and what to change if it will not.

DNS & domains

Records, resolution, signing, and who owns what.

DNS health checkerEvery record for a domain, with the misconfigurations called out.Waiting on its diagnostic service.
DNS propagation checkerWhat a spread of public resolvers currently return for a name.Waiting on its diagnostic service.
DNSSEC checkerChain of trust, signatures and expiry — and unsigned told apart from broken.Waiting on its diagnostic service.
WHOIS & RDAP lookupRegistration, registrar, nameservers and status for a domain or IP.Waiting on its diagnostic service.
Reverse DNS checkeryour connectionPTR records and whether the forward lookup agrees.Waiting on its diagnostic service.

Email & deliverability

The DNS and transport configuration that decides whether mail arrives.

Email security & deliverability checkerSPF, DKIM, DMARC, MTA-STS and mail-server TLS, explained.Waiting on its diagnostic service.
SPF record checkerEvery include followed, with the exact DNS lookup count against the limit of ten.Waiting on its diagnostic service.
DKIM record checkerPublished keys, their real measured length, and testing or revoked flags.Waiting on its diagnostic service.
DMARC record checkerThe policy, what it actually enforces, and where the reports go.Waiting on its diagnostic service.
MX record lookupMail exchangers in priority order, with whether each one resolves.Waiting on its diagnostic service.
Email blacklist checkerWhether a sending address appears on the blocklists that matter.Not planned: the blocklists that matter license commercial and public-facing queries.

Cybersecurity

Certificates, headers, exposure and reachability.

SSL/TLS checkerCertificate, chain, expiry, protocol versions and cipher configuration.Waiting on its diagnostic service.
HTTP security headers checkerWhat a site sends, what it is missing, and which of those actually matter.Waiting on its diagnostic service.
Port scanner for your own connectionyour connectionScans 32 service ports on the address the internet sees you from.Waiting on its diagnostic service.
Port connectivity testeryour connectionWhether a common service port is reachable from the public internet.Waiting on its diagnostic service.
IP address lookupyour connectionNetwork operator, ASN, approximate location and reverse DNS for an address.Waiting on its diagnostic service.

Cloud & infrastructure

Response times and reachability from more than one place.

Website response testDNS, TCP, TLS and time to first byte, broken down by stage.Waiting on its diagnostic service.
Global latency testResponse time to a host from each region we run a node in.Not planned: measuring from several regions needs paid probe nodes in each one.
Traceroute & MTRyour connectionThe path to a host, hop by hop, with the caveats ICMP deserves.Waiting on its diagnostic service.

Calculators & utilities

Arithmetic that is tedious by hand and instant in a browser.

8 tools are available today; 22 more are in build. Tools without a link are not finished — we would rather show a short list than send you to a page that does not work.

How these differ from the usual lookup sites

A measurement, then an explanation

“Jitter: 45 ms” is a fact nobody can act on. What matters is that jitter at that level makes voice calls choppy, and that the usual causes are Wi-Fi interference, a congested uplink, or no traffic prioritisation. Every result here comes with what it means and what to check.

Measured, not inferred

A tool that cannot measure something says so. Where a result is a hypothesis rather than an observation — which NAT behaviour is likely, which of several causes fits — it is labelled as one. Confident numbers invented to fill a gap are worse than an honest blank.

Methodology in the open

Each tool states what it tested, from where, and what it cannot see. A speed test measuring against a node in the next city and one across an ocean are different measurements, and you should be able to tell which you got.

Nothing collected that is not needed

Several of these run entirely in your browser and send nothing anywhere — the subnet calculator among them. Where a tool does need a server, the page says what it sends and why.