Command centre

Network & security tools, built for engineers.

A growing set of fast, no-signup utilities for working network and security engineers — calculators, decoders, hashers, generators. Everything on this page runs in your browser. Nothing you type leaves your device.

Global view

Internet status, at a glance.

A live picture of internet health — submarine cable status, BGP route-leak hot zones, and major Internet Exchange Points. The data feeds light up as we bring our Phase 2 backend online; the map below is a preview of what's landing.

Synthetic feed · live telemetry lands in Phase 2
Internet Exchange Submarine cable BGP advisory · Phase 2
38 Internet Exchanges tracked
710 Submarine cables (TeleGeography)
7 Australian peering hubs
0 Live BGP advisories · Phase 2

World map: world-atlas (Natural Earth, public domain). Submarine cables: TeleGeography submarinecablemap.com, licensed CC BY-SA 4.0.

Australia · 39 AU-landing cables · outage feed lands in Phase 2
Australian IXP AU-landing cable Outage · Phase 2
8 Australian peering hubs (cities)
0 Carrier-neutral peering points
39 AU-landing submarine cables
0 Live AU outages tracked · Phase 2

Phase 2 outage feeds: NBN Co · Telstra · Optus · TPG · Aussie Outages. Aggregator runs on the Oracle VM (Phase 2). See the Coming Soon section for the full Phase 2 tool list.

IPv4

Subnet / CIDR Calculator

Enter any IPv4 prefix in CIDR notation — get the network address, broadcast, usable host range, mask, wildcard mask, and host count instantly.

IPv4

VLSM Subnet Planner

Allocate variable-length subnets from a parent prefix in optimal address order. Provide a list of required host counts; the planner picks prefixes that fit and assigns them sequentially.

Identity

JWT Decoder

Paste a JSON Web Token to inspect its header and payload. Decoding happens entirely client-side — your token never leaves the browser. Signature verification requires the issuer's key and isn't performed here.

Cryptography

Hash Generator

Compute SHA-1, SHA-256, SHA-384, or SHA-512 over any text. Uses the browser's Web Crypto API — your input never leaves the page.

Cryptography

HMAC-SHA256 Generator

Compute a keyed-hash message authentication code (HMAC) using SHA-256. Useful for signing webhook payloads, validating signed cookies, or testing an API integration locally.

Encoding

Base64 Encode / Decode

Quick conversion to and from Base64 for credentials, embedded images, API tokens, and anything else that needs round-trip-safe transport.

Encoding

URL Encode / Decode

Percent-encode and decode strings — the right operation for URL query parameters, path components, and form values.

Security

Password Generator

Cryptographically-secure passwords drawn from crypto.getRandomValues. Choose your length and which character classes to include.

Identifiers

UUID v4 Generator

Generate cryptographically-random version-4 UUIDs (RFC 4122). Handy for primary keys, idempotency tokens, and correlation IDs.

IPv4

IP Address Converter

Convert any IPv4 address between dotted-quad, decimal (32-bit integer), hexadecimal, and binary representations.

Encoding

Text ↔ Hex ↔ Binary

Convert strings between ASCII, hexadecimal, and binary. Useful for embedded debugging, byte-pattern analysis, and CTF-style puzzles.

Phase 2 — landing soon

Backed by our own network.

Tools that need a server vantage point — BGP visibility, traceroute, port reachability, WHOIS — are being built on an ionet-operated, Australian-hosted endpoint. Rate-limited, captcha-gated, and fair-use friendly.

Phase 2

BGP Looking Glass

show ip bgp, route-server views, AS-path inspection, and prefix lookups from our network. Powered by hyperglass at lg.ionet.com.au.

Phase 2

Traceroute / MTR

Layer-3 path tracing with hop-by-hop loss and latency, run from our PoP and rendered as a clean visualisation.

Phase 2

TCP Port Reachability

Check whether a single well-known port on a target is reachable. Captcha-gated, authorisation-gated, rate-limited — not a port scanner.

Phase 2

DNS / DNSSEC Lookup

Authoritative DNS queries with DNSSEC validation, plus reverse DNS, NS-walk, and zone consistency checks.

Phase 2

WHOIS / RDAP

Domain and IP registration data via the modern RDAP protocol, with WHOIS fallback for legacy records.

Phase 2

ASN / Prefix Lookup

Autonomous System lookup, prefix announcements, peer relationships, and hijack alerts.

Phase 2

SSL / TLS Inspector

Certificate chain, expiry, key strength, supported ciphers, and HSTS / CAA / OCSP checks.

Phase 2

HTTP Security Headers

CSP, HSTS, X-Frame-Options, Referrer-Policy and friends — graded the way Mozilla Observatory does it, for any URL.

Open call

Have a tool you wish existed? Tell us.

This page is a living toolkit, written by working engineers. If there's a calculation, decode, or lookup you reach for every week and the rest of the internet has buried in a popup-laden mess — let us build a clean, fast version of it here.

Suggest a tool →
The tools you use every day shape how you think. We'd rather you reached for ours than a tab full of ads.