open source · self-hosted · built in Rust

Network intelligence,
laid bare.

Stop switching between SSL Labs, dig, ifconfig.co, and security header scanners. Everything you need to understand a domain — in one place.

Built for DevOps, SRE, and security engineers who need IP context, DNS health, TLS details, HTTP security headers, and email security posture in the same workflow. Start with lens for a single A+–F health grade, or go deep with the individual tools. Self-hostable, open-source, no account needed.

ip.netray.info

IP Lookup

// IP enrichment API
ifconfig-rs

Enter any IP — or nothing, to see your own. Get geolocation, ASN, reverse DNS, and network classification: cloud provider, VPN, Tor exit node, or known botnet. Works from the browser or curl.

  • Geolocation, ASN & reverse DNS for any address
  • Cloud provider, VPN, Tor & botnet detection
  • JSON, YAML, TOML, CSV — plain text for scripts
  • Batch lookups and field filtering for automation
Open tool ↗
dns.netray.info

DNS Inspector

// DNS, refracted.
prism

Query multiple DNS resolvers at once and stream results as they arrive. Spot resolver disagreements, trace delegation chains, and audit your domain's full DNS health in one shot.

  • Query, Check, Trace, Compare, Auth, DNSSEC modes
  • Cloudflare, Google, Quad9, Mullvad & more
  • dig-inspired query language with tab completion
  • Streaming results — no waiting for all resolvers
Open tool ↗
tls.netray.info

TLS Inspector

// TLS inspection & analysis
tlsight

Catches what openssl s_client buries in noise. Full certificate chain, protocol version, cipher strength, and DNS cross-validation — including broken and expired certs.

  • Full chain: expiry, algorithm, completeness
  • DANE/TLSA validation & CAA record cross-check
  • Multi-IP consistency — detects CDN cert mismatches
  • Intentionally inspects broken & expired certs
Open tool ↗
http.netray.info

HTTP Inspector

// HTTP Header Inspector
spectra

Inspect CSP, HSTS, CORS, cookies, and security headers for any URL. Three concurrent probes — HTTPS chain, HTTP port-80 upgrade, and CORS with an evil origin — give you the full picture in one request.

  • Content Security Policy analysis and scoring
  • HSTS validation including preload eligibility
  • CORS probing with simulated cross-origin requests
  • Cookie attribute audit and security header scoring
Open tool ↗

Learn

Guides on the protocols and concepts behind the tools.