HSTS Header Checker - Online Strict‑Transport‑Security
Fetch a site’s HSTS header and validate its syntax, max‑age, and subdomain flags. Ensure your site enforce HTTPS.
UD5 Toolkit
Check if a URL is allowed or disallowed for any crawler. Paste or fetch any robots.txt to inspect rules instantly.
/.Fetch or paste a robots.txt, then test a URL path.
/robots.txt) that tells search engine crawlers and other bots which pages or sections of the site they are allowed or disallowed to crawl. It follows the Robots Exclusion Protocol (REP).* wildcard matches any character sequence, and $ forces an exact end-of-path match.<meta name="robots" content="noindex"> tag or an X-Robots-Tag: noindex HTTP header. For complete protection, combine both robots.txt disallow and noindex tags.* character serves two purposes in robots.txt: (1) As a user-agent value, User-agent: * means the rules apply to all bots that don't have a more specific block. (2) In path patterns, * matches any sequence of characters. For example, Disallow: /*.pdf$ blocks all PDF files regardless of directory. Combine with $ for precise matching.User-agent: * Disallow: /This tells every bot (
*) that the entire site (/) is disallowed. Note that well-behaved bots respect this, but malicious bots may ignore robots.txt entirely.Crawl-delay: 10 means 10 seconds between crawls. Googlebot does not support Crawl-delay — use Google Search Console to adjust crawl rate. Bingbot and YandexBot do respect it. Use it sparingly; setting it too high can slow down indexing./robots.txt to your domain: https://yourdomain.com/robots.txt. If you see a 404 error, your site doesn't have one — which means all bots are allowed to crawl everything. Use this tool to fetch and inspect any site's robots.txt instantly.* (wildcard for any character sequence) and $ (end-of-path anchor). It does not support full regular expressions, character classes, or alternation. For more granular control, use meta robots tags or HTTP headers on individual pages.Disallow: with no path (means nothing is blocked — use Disallow: / to block all); (3) Relying solely on robots.txt for hiding sensitive content (use authentication instead); (4) Wrong path format — paths are case-sensitive and prefix-matched; (5) Not testing — always use a tester like this one before deploying!User-agent: line starts a new block. You can target specific bots with tailored rules. Example: block Googlebot-Image from your /images/ folder while allowing all other bots. You can also group multiple user-agents together by listing them on consecutive lines before the rules — they'll share the same Allow/Disallow directives.Fetch a site’s HSTS header and validate its syntax, max‑age, and subdomain flags. Ensure your site enforce HTTPS.
Toggle a screen wake lock to prevent the device from dimming or sleeping. See the lock state and learn the API.
Request and release a screen wake lock to keep the device awake. See the lock state in real time. Perfect for recipes or presentations.
Observe your cat after giving catnip and mark behaviors. See if they carry the gene. Fun science.
Enter child's stats and compare to typical rear-facing, forward-facing, and booster seat requirements. Reference tool.
Compare your password against a built‑in list of the 10,000 most common passwords. Instant warning if it appears.
See a live VU meter of your microphone's input level. Test if your mic is working and adjust gain. Privacy‑friendly.
Play a frequency sweep from 20Hz to 20kHz. See where your hearing cuts off. Headphones needed.
Reverse entire text, flip letters, or reverse word order. Fun for puzzles and creative writing. Instant transformation without data leaving your browser.
Play a sweep from 20Hz to 20kHz. Test your speakers and your hearing. Simple and effective. Web Audio API.
Paste a CSV and write a simple expression to filter rows (e.g., age > 30). See the filtered table and export. Client‑side.
Build a basic Nginx server block for a static site, reverse proxy, or PHP. Fill in the blanks and copy the config.
Hash passwords using the bcrypt algorithm with configurable cost factor. Also verify a password against a stored hash. All local.
Tap key for 15 seconds, calculates BPM. Quick resting heart rate check. Manual, no hardware.
Turn your normal message into 2000s SMS language (e.g., 'you' → 'u', 'great' → 'gr8'). Choose intensity level. Pure fun.
Select an emoji that matches your mood and log it to a simple calendar. Self‑awareness tool. Local only.
Tap short/long on the screen to create Morse characters, and see the decoded text appear.
Log practice sessions, note the tunes played, metronome BPM, and duration. Monitor progress on the pipes.
Design a custom CSS toggle switch (checkbox). Adjust size, colors, icons. Copy the pure CSS code. No JavaScript.
Enter Braille dot numbers (1‑6) or paste Unicode Braille to decode into English text. Companion to text‑to‑Braille.
Paste or type text and have it read aloud with natural voices. Control speed and pitch. Uses browser's built‑in TTS.
Paste text and see a sorted count of all emojis used. Find your most‑used emoji. Fun analytics. All local.
Convert English text to Braille (Grade 1 and simple Grade 2 contractions). Educational tool to understand Braille representation. Local only.
Play pure tones at various frequencies to estimate your hearing range. Simple and educational.
Select your bin type and get a custom instruction on securing it with bungees, straps, or locks.
Type or paste text and have it read aloud by your browser's speech synthesis engine. Control voice, pitch, and rate. No download, works offline.
Spin a wheel to assign weekly chores to children. Customizable tasks. Ends arguments.
Get an endless supply of clean, family‑friendly knock‑knock jokes. Click for a new one. No ads, just laughs.
Write upside down text using Unicode flipped characters. Copy and paste to surprise friends. Completely frontend and instant.
Tap any key to the beat of a song and the tool calculates the BPM. Also shows average and millisecond delay for loops.