ARC Labs
Free
Connectivity Scanner
Is your endpoint actually reachable, secure, and fast?
Paste a URL or hostname and get a graded report on DNS, TCP, TLS, redirects, latency, and security headers — with prioritized fixes you can paste into a PR. Free, open source, no account required to start.
Connectivity report · api.example.com
- DNS + TCPReachable
- TLSTLSv1.3 · 64d
- HSTS / CSPCSP missing
- TTFB182 ms
- Overall gradeB+
What it does
- DNS, TCP, HTTP reachability and redirect-chain resolution
- TLS handshake, protocol version, hostname match, and expiry window
- Connect latency and time-to-first-byte
- HSTS, CSP, nosniff, frame, referrer, and Permissions-Policy checks
- HTTP→HTTPS upgrade, version-banner leak, and unsafe CORS detection
- Markdown / JSON export, CLI, and GitHub Action
How it works
- 1Paste a URL or hostname (example.com, https://api.example.com, example.com:8443).
- 2We resolve DNS, open TCP, complete a TLS handshake, follow redirects, and time the response.
- 3You get a letter grade plus per-category checks and copy-pasteable fixes.
- 4Gate deploys with the CLI or GitHub Action using --min-grade.
Who it’s for
Engineers and operators who need a clear-eyed read on whether a public endpoint is up, using modern TLS, and sending the headers a production service should send — before a customer or crawler finds out the hard way.
What’s next
- Scan engine + UI + CLI — shipped
- GitHub Action + SSRF-guarded redirects — shipped
- Shareable report permalinks
- SVG status badge
Need a human to read this report?
The report is the start. Studio turns findings into a plan with owners. Thirty minutes to see if that's worth it.