Your networking and cybersecurity kit

What is my IP?

Your public IPv4 and IPv6, provider and approximate location, and whether your VPN or WebRTC leak your real IP.

IP address lookup

Who owns this IP? ASN, announced prefix, country, reverse DNS, RPKI and abuse contact. IPv4 and IPv6.

Continuous ping

Does your connection drop? Live latency, loss, jitter and outages, plus a ping output analyzer.

Visual traceroute

Paste your tracert or traceroute and see which networks and countries it crosses and where delay appears.

Speed test

Download, upload, latency and bufferbloat with a clear verdict: good for video calls, 4K or gaming?

Subnet calculator

Network, broadcast, hosts, mask and wildcard. With step-by-step guide, map, diagnosis and configuration.

VLSM calculator

Split a network between departments without waste. Paste your list from Excel.

VLAN planner

Subnet, gateway and DHCP per VLAN, best-practice review and Cisco, MikroTik and Linux configuration.

IPv6 calculator

Compress, expand, split a /48 into /64s and generate EUI-64 addresses.

Ranges, routes and AllowedIPs

Range → CIDR, route summarization, WireGuard exclusions and overlap detection.

Network inventory

Python, PowerShell and Bash scripts that sweep your network and compare it with your plan.

Subnetting practice

Unlimited exercises in three levels and timed exams to share with your class.

Hash generator

MD5, SHA-1, SHA-256, SHA-512 and CRC32 of text and files, download verification and HMAC.

Encode and decode

Base64, hex, URL, HTML, binary and Unicode, with auto-detection.

Hash identifier

Which hash is this? bcrypt, Argon2, /etc/shadow, NTLM… and whether it is fit for passwords.

Metadata cleaner

See what your photos and documents reveal (GPS, phone, author, company) and download them clean. Nothing is uploaded.

Invisible text

Hide messages in an emoji or text and detect hidden characters: prompt injection, Trojan Source and watermarks.

TOTP generator

Secrets and QR for your authenticator, the live code, and why a 2FA code fails.

Password generator

Random passwords and Spanish passphrases with cryptographic randomness.

Password analyzer

Password X-ray, automatic breach check and cracking time depending on how each service stores it.

Vault audit

Load your browser or password manager export: breached, reused, similar and weak, with an action plan. Nothing is sent.

Password policy

Audit your policy against NIST 800-63B and generate the configuration for AD and Linux.

JWT decoder

Read, verify the signature (HS, RS, ES, EdDSA) and detect alg none, weak secrets and endless tokens.

Create a test token

Sign HS256/384/512 tokens with random secrets to test your API.

OAuth and PKCE

PKCE, authorization URL, code exchange with curl and response checks.

OIDC provider auditor

Review the configuration of Google, Microsoft, Keycloak… according to RFC 9700.

Cron generator

Explain, validate and build expressions; next runs by time zone and conversion to systemd, Windows, Kubernetes and GitHub.

Scheduled task auditor

Detect persistence and malware in crontab and Task Scheduler, with a weekly run map.

Hardening audit

Read-only collectors for Linux and Windows: an A–F grade and a tailored remediation script.

SSH auditor

Review sshd_config or sshd -T and generate a hardened configuration for your OpenSSH version.

Everything about a domain

DNS records, propagation across six resolvers and RDAP registration data: registrar, expiry, locks and DNSSEC.

Can your domain be spoofed?

SPF with the real lookup count, DMARC, DKIM, MX, MTA-STS and DNSSEC, with the records to publish.

Is it phishing? Email headers

Message path with source IP, SPF/DKIM/DMARC, real sender and spoofing signs. Nothing is sent.

What do I patch first?

Paste your scanner report: CVEs ordered by confirmed exploitation (CISA KEV), likelihood (EPSS) and severity (CVSS).

CVSS 3.1 and 4.0 calculator

The score explained in plain language and which mitigations would lower it in your environment.

Did someone get into your server?

auth.log, journalctl, Apache/Nginx or Windows events: brute force, logins after an attack and what happened next.

IOC extractor

IPs, domains, URLs and hashes from any report, even defanged, ready to block or share.

How hardened is your website?

HSTS, CSP, clickjacking, cookies, CORS and version leaks with an A+–F grade and the configuration for your server.

OWASP pentest checklist

64 OWASP WSTG tests with how to perform them, evidence notes and a report.

Down for everyone or just you?

Your connection, DNS, whether it answers from your browser and its official status, with a verdict and next steps.

Live service status

Microsoft 365, AWS, Google, Cloudflare, GitHub, Slack, ChatGPT and 60 more on one screen.

Availability (SLA) calculator

99.9% = 8 h 45 min of downtime a year. Check whether you comply this month and compute serial or redundant systems.