# WEDOS.tools

> WEDOS.tools is a free, standards-driven website diagnostics platform that helps developers, sysadmins, and business owners analyze, optimize, and secure their domains. Submit a URL, get a comprehensive audit report by email covering DNS, SSL/TLS, HTTP headers, email deliverability, SEO, AI/GEO readiness, performance, and caching. Optional 7-day performance monitoring is available.

WEDOS.tools is operated by WEDOS Internet, a.s., one of the largest hosting providers in Central Europe, based in the Czech Republic. The platform is free to use and privacy-focused: submitted data is not publicly shared or disclosed to third parties.

The audit engine is built upon RFC and ISO/IEC best practices. It evaluates DNS integrity (RFC 1034/1035), email security (SPF, DKIM, DMARC, MTA-STS per RFC 8461, TLS-RPT per RFC 8460, BIMI), DNSSEC including algorithm modernity (RFC 8624), HTTP response headers, SSL/TLS configuration, modern transport (HTTPS/SVCB records per RFC 9460), content security (security.txt per RFC 9116), SEO signals, AI/GEO readiness for answer engines like ChatGPT, Claude, Perplexity, Google AI Overviews, and Bing Copilot, Core Web Vitals hints, and cache behavior across GET/HEAD/POST with HIT/MISS/UNCACHEABLE detection.

Each report is delivered to the user's email with human-readable explanations and actionable recommendations. Results are presented in a web-based viewer with both a friendly "User" mode for non-technical readers and a detailed "Dev" mode exposing raw DNS records, certificate aliases, BGP prefixes, and HTTP hardening headers.

## Main Services

- [Free Website Audit](https://wedos.tools/): Submit a URL and email address to receive a comprehensive diagnostics report covering DNS, SSL/TLS, HTTP, email, SEO, AI readiness, performance, and cache
- [Performance Monitoring (7 days)](https://wedos.tools/): Optional extended monitoring over a 7-day window for availability and performance trends
- [Client Diagnostic Tool](https://wedos.tools/info): Live diagnostics of the visitor's own browser and network environment (IPv4, IPv6, User-Agent)

## What We Audit

- **DNS integrity** (RFC 1034/1035): A, AAAA, CNAME, SOA, MX, NS, NS ASN mapping, CAA, TLSA/DANE
- **Email authentication**: SPF with IP coverage analysis, DKIM selector scan, DMARC policy evaluation (reject/quarantine/none)
- **Email security (2026 standards)**: MTA-STS (RFC 8461), TLS-RPT (RFC 8460), BIMI with VMC detection
- **DNSSEC**: DNSKEY, DS, RRSIG, AD flag, algorithm modernity per RFC 8624 (flags deprecated RSASHA1, MD5, DSA)
- **Modern transport**: HTTPS/SVCB resource records (RFC 9460), HTTP/3 alpn advertisement, ECH detection
- **SSL/TLS configuration**: certificate validity, issuer, TLS version, HTTP-to-HTTPS redirect, Subject Alternative Names
- **HTTP fetch journey**: Multi-protocol fallback matrix (HTTP/3 to HTTP/2 to HTTP/1.1, HTTPS to HTTP) with forensic logging
- **HTTP headers**: CDN/WAF detection, protocol version, OS fingerprinting, security headers analysis
- **Content security**: security.txt validation per RFC 9116 (Contact, Expires fields), CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy
- **SEO signals**: title and meta description length analysis with pixel width estimation, heading hierarchy (H1-H6), content length, lang attribute, canonical URL, hreflang with x-default, breadcrumbs schema, viewport and mobile-friendliness, image alt coverage with lazy-loading and WebP/AVIF detection, link architecture with internal/external ratio, Core Web Vitals performance hints
- **AI/GEO readiness**: llms.txt detection, AI crawler rules in robots.txt (GPTBot, ClaudeBot, Claude-User, Claude-SearchBot, PerplexityBot, Google-Extended, Bingbot, CCBot, Applebot-Extended, Meta-ExternalAgent, Amazonbot, YouBot), sitemap presence, JSON-LD structured data (Article, FAQ, HowTo, Organization, Person), Open Graph completeness, semantic HTML, E-E-A-T author signals, answer-shape content patterns, canonical URLs, indexability directives
- **Network and routing**: ASN lookup, IPv4/IPv6 connectivity, anycast detection, RIPE RPKI route origin validation, BGP prefix visibility
- **Cache behavior**: HIT/MISS/UNCACHEABLE detection across GET/HEAD/POST, forced variants (revalidate, bypass, cache-buster), asset sampling, vendor signal parsing for Cloudflare, Fastly, Akamai, CloudFront, StackPath, Bunny CDN, WEDOS Protection

## Technology Stack

WEDOS.tools is a queue-based audit platform. The frontend is built with PHP and Bootstrap 5; the backend consists of a bash worker pool that runs audit modules in parallel (typical audit completes in around 10 seconds). The HTTP fetch layer uses a custom curl build with HTTP/3 QUIC support and quictls OpenSSL for modern TLS inspection. Results are stored as JSON in MySQL and rendered through a PHP report viewer.

## Who Operates This

- [WEDOS Internet, a.s.](https://wedos.com/): Parent company, one of the largest hosting providers in Central Europe
- [About WEDOS](https://vedos.cz/en/vedos-wedos-historie/): Company history and background
- [Contact](https://vedos.cz/en/kontakty/): Support and business contact
- [Terms of Use](https://vedos.cz/en/podminky/): Legal terms governing the service
- [Certification](https://vedos.cz/en/certifikace/): Compliance and certifications
- [Privacy Policy](https://wedos.com/wp-content/uploads/2023/05/The-Principles-for-the-Processing-the-Personal-Data.pdf): Personal data processing principles (GDPR)

## What This Service Is Not

WEDOS.tools is an audit and diagnostics platform, not:

- A penetration testing service (no active exploit attempts are performed)
- A DDoS protection or mitigation service (see WEDOS Global Protection for that)
- A hosting provider or domain registrar (see [wedos.com](https://wedos.com/) for hosting and domain services)
- A PCI DSS or ISO 27001 compliance certification authority (the audit aligns with these standards but does not issue certificates)

## Optional

- [WEDOS.com hosting services](https://wedos.com/): Shared hosting, VPS, dedicated servers, domain registration
- [WEDOS Global Protection](https://wedos.global/): Anycast DNS and CDN with WAF protection
- [WEDOS.online Service Availability Monitoring](https://wedos.online/): Uptime monitoring service
- [WEDOS Facebook](https://www.facebook.com/wedos): Company news and announcements
- [WEDOS on X](https://x.com/wedos): Short-form updates
- [WEDOS on LinkedIn](https://www.linkedin.com/company/wedos/): Business and professional updates