Free tools.
Single-purpose utilities for network engineers. Everything runs in your browser — nothing is sent to the server.
Paste sshd, nginx, WireGuard, nftables, sysctl, or fail2ban configs. Get a prioritized hardening report — severity-ranked findings, patches as unified diffs, citations to the playbook.
Walk a twelve-question interview. Get a STRIDE-style threat model with assets, adversaries, gaps, and recommended controls. Markdown export.
Reachability and latency from the RouteHarden test fleet to common destinations. Tokyo, Frankfurt, London egress points; refreshed on a cron.
Search every RouteHarden post — 94 engineering write-ups. Get a synthesized answer with citations to the originals. BM25 retrieval, AI synthesis.
Convert iptables-save dumps to nftables, or OpenVPN client configs to WireGuard skeletons. Browser-side; nothing leaves your machine.
Drag-and-drop network designer. Drop VPS / client / router nodes, draw tunnels between them, and download per-node WireGuard configs.
Eight questions. Get a ranked reading list across all 94 RouteHarden posts, tailored to your role, stack, and threat model.
Eight live in-browser checks: egress IPv4/IPv6, WebRTC, DNS resolver fingerprint, TLS version, HTTP protocol, clock skew, cookies. Downloadable report.
Convert CIDR notation to network address, broadcast, netmask, and host counts. Computed locally.
Build server + client config templates from your network parameters. Paste in your generated keys.