SATools is a set of diagnostic tools aimed at sysadmins: no ads, no signup. Scan a single domain and get a graded report card, or run any individual check on its own. Every scan produces a shareable, permanent link, so a result pasted into a ticket keeps showing what was true at the time it ran rather than silently re-running on each view.

The checks cover DNS (records, nameserver delegation, cross-resolver consistency, DNSSEC chain validation), email authentication (SPF including the RFC 7208 ten-lookup budget, DKIM key strength, DMARC, MTA-STS and TLS-RPT), TLS certificates sourced from Certificate Transparency logs, HTTP security headers and redirect behavior, WHOIS via RDAP, and a “what’s my IP” network view. Each finding explains why something is wrong and how to fix it, rather than only passing or failing it.

Internally every check is a single object implementing a shared interface, and registering it once gives it a standalone page, a slot in the combined report card, and a JSON result inside a stored scan. The report card runs every applicable check against one shared context, so DNS lookups needed by more than one check are fetched only once.

It runs on React Router in framework mode on Cloudflare Workers, with D1 for scan storage. SATools is also the planned public home for SSL Tracker. The site is deployed at satools.dev but currently access-restricted while it is still being built out, so there is no public link yet.