HTTP

Build an Apache .htaccess draft with routing, caching, headers, and access rules plus warnings to resolve before server testing.

Convert a supported .htaccess subset into a reviewable NGINX draft with explicit warnings for unsupported or non-equivalent directives.

Check ACME HTTP-01 retry readiness with a weighted evidence review of the public challenge route and a clear fix-before-retry verdict.

Measure API error-budget burn from status counts or access logs, project the compliance window, and spot policy-breaking failure rates.

Estimate API retrieval time and payload from page size and endpoint limits while accounting for latency, concurrency, rate ceilings and retry reserve.

Check a public page for ad-network signatures and ads.txt seller alignment with confidence bands, fetch warnings, and focused follow-ups.

Check alternative certificate DCV proofs across DNS and web paths, including CSR-derived values and per-host mismatch or transport evidence.

Draft an Apache virtual host for static files, PHP-FPM applications, or reverse proxies with TLS safeguards and activation checks.

Test HTTP APIs from your browser with cURL import and authentication while inspecting exposed headers, timing, response text and CORS failures.

Estimate CDN cache-hit savings from origin traffic and request costs, with break-even hit rates and setup-cost payback for each scenario.

Review CORS response headers for unsafe origin trust and credential use, then catch cache or private-network combinations that need priority fixes.

Draft a Content Security Policy header with nonce, hash, or allowlist script trust plus report-only rollout checks and blocker warnings.

Check a Content-Security-Policy header for risky script sources and missing baseline directives, with reporting and rollout blockers explained.

Model hit rate for fixed or sliding cache TTLs and compare target reachability with origin load, latency savings, and freshness pressure.

Check a public URL or pasted headers for gzip, Brotli, or identity compression with cache-variation checks and measured byte savings.

Build an HAProxy backend block from server rows with health checks and TLS trust choices, then review capacity limits and deployment warnings.

Build an HTML starter document with semantic body structure and escaped metadata, then review script loading choices and publication warnings.

Analyze NGINX, Apache, or ALB access logs locally for endpoint P95 and 5xx rates with clear parse-gap evidence and SLA findings.

Audit pasted HTTP security headers for browser policy, session protection and exposure risks with local scoring and a prioritized fix order.

Build reciprocal hreflang clusters from locale and URL rows with HTML, sitemap, or HTTP output plus self-reference and duplicate checks.

Check a public URL’s HTTP headers across redirects and review security, cache behavior, browser state and cross-origin exposure.

Trace a public HTTP redirect chain hop by hop to identify loops and HTTPS downgrades, compare timing and generate a replayable cURL command.

Generate page-matched JSON-LD for common article, product, organization and FAQ pages with a property audit and copy-ready script tag.

Estimate weighted load balancer pool capacity from measured backend RPS and routing weights, with bottleneck and N+ failure-reserve checks.

Build search and social meta tags from page facts with canonical and robots checks, preview-image warnings, and escaped copy-ready HTML.

Audit an NGINX proxy block for unsafe forwarded headers and trust-boundary gaps with checks for WebSocket, timeout and upstream TLS risks.

Generate an NGINX server block for static sites, PHP-FPM apps, or reverse proxies with TLS routing plus safety and activation checks.

Compare OAuth redirect URI registrations with observed requests to find exact-match drift, unsafe schemes and wildcard or nested-redirect risk.

Generate Open Graph and X card tags for a public page with useful image hints, article fields, and crawler-focused review warnings.

Preview social share cards from pasted HTML or a public URL and check metadata fallbacks, image fit and canonical identity with advisory scores.

Compare OpenAPI operations with test evidence to measure scoped coverage and find missing routes, unmatched rows or duplicate operation IDs.

Review pasted or current-request proxy headers, trace the trusted edge from the right, and flag spoofable client-IP evidence and disclosure clues.

Validate RSS 2.0 or Atom 1.0 XML locally with format detection and line-aware errors plus empty-feed warnings and clear repair guidance.

Plan API retry waits with capped backoff, Retry-After floors, jitter envelopes, caller-budget checks, and shared-client pacing.

Generate a robots.txt policy with crawler-specific path rules and sitemap declarations plus import checks and warnings before publication.

Check Set-Cookie headers for SameSite delivery and find Secure or HttpOnly gaps, prefix mistakes, partitioned-cookie issues and flow breakage.

Extract page and child-sitemap URLs from XML, text files or a public source and produce a normalized crawl list with row-level audit evidence.

Turn same-host URLs or paths into sitemap XML with normalization and exclusion checks, then review protocol limits before publishing.

Estimate TLS handshake CPU demand from request rate, connection reuse, full and resumed costs, surge traffic, and the available core budget.

Check a suspicious URL with Safe Browsing and SURBL plus weighted string clues, then review every source's scope and gaps before choosing a safer next step.

Encode or decode URL text by context, handle form-style plus signs and nested escapes, and check round-trip or double-encoding risks locally.

Parse a URL or query string locally, inspect components and duplicate parameters while masking token-like values for a safer review copy.

Build a campaign URL with consistent UTM tags while preserving useful query values and flagging naming, channel, or length issues.

Decode percent-encoded URLs or text, inspect characters and query structure, and clean trackers or duplicate parameters without fetching the destination.

Encode URL components, complete links, form values, or paths with context-aware percent escapes, UTF-8 byte details, and local query checks.

Parse a User-Agent string or header block into a readable browser profile with device, crawler and Client Hints evidence for reliable triage.

Build a web app manifest with scoped launch paths and icon entries plus install markup and static readiness checks before browser testing.

Detect visible server and application clues at a public URL, including CDN or proxy evidence across redirects and a clear confidence score.

Size a WebSocket node pool from peak connections and measured per-node limits with bottleneck, N+ reserve and scale-out checks.

Build a shell-quoted wget command for single downloads or recursive retrieval, with import parsing and warnings for risky options.

Identify your current browser session, check storage and graphics readiness, and review privacy exposure before sharing a support report.

Build a shell-ready cURL command from request fields or an existing command with body validation and safe quoting, plus credential warnings.

Turn one cURL HTTP request into code for eight mainstream clients with local parsing, default secret redaction and compatibility warnings.