HTTP

Generate sitemap XML from same-host URLs or paths, normalize lastmod and crawl hints, review exclusions, and catch protocol limits before publishing.

Generate a web app manifest with launch URLs, scope checks, install markup, icon asset ledgers, and warnings for PWA install readiness.

Build an Apache .htaccess draft for redirects, headers, caching, CORS, and access rules with warnings and copy-ready output before staging.

Check ACME HTTP-01 retry readiness by testing the host, token body, redirects, IPv6, cache, CDN or WAF, and backend sync evidence.

Measure API error-budget burn from status counts or access-log snippets, with SLO projections, status-code policy checks, and burn guardrails.

Plan an API pagination window from item count, page size, rate limits, latency, workers, retry reserve, and payload risk checks.

Check a public web page for ad-network tags, ads.txt alignment, confidence scores, fetch warnings, and prioritized cleanup actions.

Check DNS, CNAME, HTTP, and HTTPS DCV proofs before a certificate retry, with CSR-hash handling, resolver evidence, and mismatch notes.

Generate an Apache vhost draft for static, PHP-FPM, or reverse-proxy sites, with TLS choices, module checks, and activation steps.

Test browser-visible HTTP API requests with cURL import, auth, body modes, CORS failure clues, response traces, and local saved presets.

Estimate CDN cache-hit savings from traffic, cacheable share, origin costs, CDN charges, payback, and break-even hit-rate checks.

Check CORS response headers against origin trust, credentials, caching, exposed headers, and private-network access with scored fixes.

Draft a Content Security Policy header with nonce, hash, or allowlist scripts, directive posture checks, and rollout warnings.

Check a Content-Security-Policy header for risky script rules, missing baseline directives, reporting gaps, and rollout fixes before enforcement.

Model cache TTL hit rate from request reuse, fixed or sliding expiry, purge loss, freshness pressure, target TTL, and latency savings.

Check gzip, Brotli, or identity compression for a URL or pasted headers, with cache-variation clues, byte-savings evidence, and request recipes.

Build an HAProxy backend block from server rows with health checks, TLS options, persistence notes, review warnings, and copy-ready output.

Build an HTML starter document with title, language, metadata, asset paths, and review notes before copying full-page or head markup.

Analyze NGINX, Apache, or ALB access logs in your browser, compare endpoint P95/P99 and 5xx signals, and export SLA findings.

Check pasted HTTP response headers for HSTS, CSP, cookies, cache, CORS, and disclosure risks with scoring, fix order, and JSON evidence.

Build hreflang clusters from locale and URL rows, then copy head tags, sitemap XML, or HTTP headers with self-reference audits.

Check a live URL's HTTP headers, redirect hops, cache semantics, cookies, CORS exposure, and hardening priorities from one report.

Trace an HTTP redirect chain hop by hop, catch loops, TLS issues, status changes, host handoffs, latency spikes, and replayable cURL.

Draft JSON-LD for Article, Product, Organization, and FAQ pages with page-match audit rows, property ledgers, and copy-ready script output.

Estimate load balancer pool capacity from backend RPS, weights, health, utilization targets, growth, and N+ reserve with bottleneck cues.

Build search and social meta tags from page facts, with canonical URL checks, robots warnings, preview image validation, and copy-ready markup.

Check an NGINX proxy block for forwarded-header gaps, spoofed-client risks, WebSocket handling, timeout mismatches, and fix order.

Generate an NGINX server block for static, PHP-FPM, or proxy sites with TLS redirects, upstream checks, HSTS cues, and deploy notes.

Check OAuth redirect URI registrations against observed requests, with exact-match drift, wildcard, fragment, HTTP, and open-redirect warnings.

Generate Open Graph and X card tags from page titles, URLs, images, article fields, and crawler warnings before copying head markup.

Preview social share cards from pasted HTML or a public URL, with Open Graph, X card, image, canonical, crawler, and platform score checks.

Compare OpenAPI operations against test evidence, find unmatched routes or IDs, and turn release-gate gaps into an owner-ready queue.

Check proxy and CDN header evidence from pasted logs or the current request, trace trusted hops, and flag spoofed client-IP risks.

Plan retry waits for rate-limited APIs with Retry-After floors, jitter options, timeout checks, and shared-client pacing warnings.

Generate a robots.txt draft with crawler groups, path rules, sitemap hints, import parsing, and publish warnings for safer crawl control.

Check Set-Cookie headers for SameSite delivery, Secure pairing, prefixes, partitioned cookies, and SSO or embedded-flow breakage.

Extract sitemap URLs from pasted XML, text files, or a public URL, then filter, de-duplicate, audit coverage, and export clean crawl lists.

Estimate TLS handshake CPU from request rate, connection reuse, full versus resumed costs, and surge peaks so edge capacity plans have room.

Check a suspicious URL against Safe Browsing, SURBL, and local URL-shape signals, then review scoped verdicts, coverage gaps, and follow-up links.

Encode or decode URL text by context, compare percent escapes and plus-as-space behavior, and catch round-trip problems before copying or opening.

Parse a URL or query string locally into components, query rows, masked sensitive values, length signals, and a rebuilt review URL before sharing.

Build a GA4 campaign URL from a landing page, keep or replace existing UTM tags, and catch missing fields, channel mismatches, and long links.

Decode percent-encoded URLs or text, inspect query pairs and character bytes, remove common trackers, and preview JSON, Base64, or QR handoffs.

Encode URL text for components, full links, form values, or paths with character maps and query checks before copying or sharing.

Parse a User-Agent string or header block into browser, OS, device, bot, token, and Client Hints evidence for support or log triage.

Detect a public URL's visible web server, CDN, or proxy from response headers, redirects, confidence scoring, and origin clues.

Size WebSocket node pools from peak sockets, memory, egress, descriptor limits, and N+ reserve with bottleneck and scale-out checks.

Build a wget command for downloads, mirrors, API fetches, and FTP pulls with shell-aware quoting, import parsing, and safety warnings.

Identify your current browser session with support-ready browser, storage, graphics, compatibility, and privacy exposure signals plus share cautions.

Build a paste-ready curl command for API requests, with shell-aware quoting, auth and body options, import parsing, and safety warnings.