Free Website Security & Network Audit Suite • v2.7.3

Scan your website for security vulnerabilities, SSL, and DNS issues.

Run an instant, passive 360° health check on your website. Audit HTTP security headers, SSL certificate trust, global DNS propagation, and email spoofing defenses across 20 specialized tools.

Popular Examples: example.com github.com cloudflare.com
20
Specialized Engines
14
Anycast Resolvers
< 1ms
Inspection Latency
100%
Passive & Safe

Diagnostic Tools & Utilities

22 purpose-built tools for web defense, site quality, email deliverability, DNS propagation, and network speed.

22 Tools No registration required
FLAGSHIP
HTTP Security Headers

Deconstruct CSP directives, HSTS preload, Permissions-Policy, and generate 1-click server fixes.

Headers Audit → A+ RATING
ANYCAST 14
Global DNS World Map

Interactive Leaflet world map with real-time Anycast DNS propagation verification across 14 DoH resolvers.

DNS World Map → 14 RESOLVERS
TLS 1.3 PFS
Cryptographic SSL / TLS

Verify Root CA trust chains, expiration countdown alerts, Subject Alternative Names (SANs), and ciphers.

Certificate Trust → X.509 RFC
DMARC • SPF
Email Spoofing Defense

Audit SPF 10-lookup DNS limits, enforce strict DMARC quarantine/reject policies, and verify MX health.

Mailbox Audit → RFC 7489
API EXPLOITS
CORS Exploit Tester

Probe arbitrary origin reflection, credentials leakage, and null origin bypasses across API endpoints.

Test CORS API → ACAO / ACAC
FINGERPRINT
WAF & Tech Stack

Detect Web Application Firewalls, Edge CDNs (Cloudflare, AWS), web servers, CMS, and JS frameworks.

Detect Stack → EDGE CDN
WORDPRESS
WordPress Inspector

Check public WordPress fingerprints, version exposure, REST and XML-RPC endpoints, readme exposure, and visible plugins and themes.

Inspect WordPress →READ-ONLY
RFC 9116
RFC 9116 security.txt

Audit vulnerability disclosure policies, OpenPGP cryptographic signatures, and generate compliant files.

Audit Policy → IETF STD
LLM CONTROL
AI Crawler Shield

Inspect permissions for 12 AI training scrapers (GPTBot, ClaudeBot) and block unauthorized bots.

Inspect Scrapers → 12 AI BOTS
RFC 6376
DKIM Key & Selector

Auto-probe 12 common selectors, decode ASN.1 RSA public keys, and test key bit lengths.

Verify Selector → 2048-BIT RSA
VMC VERIFIED
BIMI & Brand Logo

Enforce DMARC prerequisites, validate SVG Tiny P/S standards, and preview verified inbox avatars.

Validate BIMI → SVG TINY P/S
25+ BLOCKLISTS
Multi-DNSBL Blacklist

Audit IP and domain deliverability across 25+ real-time spam blocklists with delisting guidance.

Check Blacklists → SPAMHAUS RBL
RFC 4034
DNSSEC & CAA Validator

Validate cryptographic trust chain (DS → DNSKEY → RRSIG) and enforce CAA authority rules.

Validate Trust → RRSIG CHAIN
DUAL-STACK
IPv6 Dual-Stack Audit

Audit AAAA records, latency comparison, NS/MX IPv6 transit, and reverse PTR resolution.

Audit Dual-Stack → AAAA / PTR
HOP WATERFALL
HTTP Redirect Tracer

Visualize hop-by-hop HTTP 301/302 redirects, measure per-hop latency, and detect loops.

Trace Hops → 301 / 302 HOPS
CRT.SH + DNS
Subdomain Recon

Discover public subdomains via Certificate Transparency logs paired with active live IP checks.

Discover Hosts → OSINT RECON
ASN & GEO
WHOIS & IP Geo

Lookup registration dates, authoritative registrar, Autonomous System (ASN), and ISP routing.

Lookup WHOIS → BGP ROUTING
PORT PROBE
Service Port Scanner

Probe essential web, mail, and database service ports (80, 443, 22, 25, 587, 3306, 8080).

Scan Ports → SOCKET SYN
TIMING WATERFALL
Latency & TTFB Ping

High-precision network timings: DNS lookup, TCP connect, TLS handshake, and TTFB speed.

Measure Latency → TTFB SPEED
CIDR MATH
IPv4 Subnet & CIDR

Calculate netmasks, wildcard masks, broadcast IPs, and usable host ranges with binary view.

Calculate CIDR → /0 TO /32
CRYPTOGRAPHY
Hash, Base64 & JWT

Generate SHA-256, SHA-512, MD5, and HMAC digests. Encode & decode Base64 and JWTs.

Encode / Decode → HMAC / SHA
SEO
On-Page SEO Audit

Review title and description tags, headings, canonical, indexability, mobile viewport, social metadata, and image alt text.

Audit a page →8 CHECKS

No Matching Tools Found

Try adjusting your search query or switch back to "All Tools".

Technical Reference & Security Architecture

The 4 Pillars of Resilient Web Architecture

Understanding defensive headers, cryptographic transport, email domain trust, and global Anycast DNS routing.

1. HTTP Defense

Hardens browsers against Cross-Site Scripting (XSS), Clickjacking, MIME sniffing, and MITM attacks via Content-Security-Policy (CSP), HSTS, and Permissions-Policy.

2. TLS Cryptography

Enforces TLS 1.3 with Perfect Forward Secrecy (PFS) cipher suites. Continuous certificate expiration tracking prevents devastating domain trust outages.

3. Email Trust

The triple-lock defense—SPF mechanisms, RFC 6376 DKIM digital signatures, and strict DMARC quarantine/reject policies—stops CEO spoofing and spam.

4. DNS & Anycast

Global resolver propagation verification across Google, Cloudflare, and Quad9 ensures rapid worldwide resolution, low TTFB, and zero DNS cache poisoning.

Even if application source code contains a cross-site scripting vulnerability, an authoritative Content-Security-Policy (CSP) instructs the user's browser never to execute untrusted inline scripts or communicate with unauthorized extraction endpoints. Combining CSP with HTTP Strict Transport Security (HSTS) guarantees that connections cannot be downgraded to unencrypted HTTP, satisfying enterprise compliance frameworks (PCI-DSS 4.0, ISO 27001, SOC 2).

Starting in 2024, Google and Yahoo enforce strict authentication requirements for bulk senders. Domains lacking a valid SPF record, aligned DKIM cryptographic signature, and an explicit DMARC policy face immediate delivery throttles or automatic routing into user Spam folders. Implementing DMARC with a p=reject or p=quarantine policy preserves domain reputation and guarantees legitimate deliverability.

Yes, absolutely. All diagnostics executed on Gulf Nados WebTools are strictly non-destructive and passive. Our engines perform standard public network protocol queries—inspecting HTTP response headers, reading public DNS zones, verifying TLS handshake parameters, and validating RFC 9116 security policies—without probing vulnerabilities or disrupting production workloads.

Live Audits Activity Feed

Total Platform Scans: 8
Audited Host Security Grade Health Score HTTP Status Latency Audit Time Action
gulfnados.com
F
0%
HTTP 206 245 ms 2026-11-04 13:11:50 Report →
tools.gulfnados.com
A
90%
HTTP 200 26 ms 2026-11-04 13:09:21 Report →
tools.gulfnados.com
A
90%
HTTP 200 30 ms 2026-11-04 13:08:56 Report →
tools.gulfnados.com
A
90%
HTTP 200 42 ms 2026-11-04 13:08:53 Report →
github.com
B
90%
HTTP 206 698 ms 2026-11-04 13:06:23 Report →
tools.gulfnados.com
A
90%
HTTP 200 37 ms 2026-11-04 13:06:13 Report →
tools.gulfnados.com
A
90%
HTTP 200 36 ms 2026-11-04 13:06:03 Report →
tools.gulfnados.com
A
90%
HTTP 200 33 ms 2026-11-04 13:05:54 Report →