Free tools
Check one thing, right now, for free
Each of these answers a single question in a few seconds — no account, no card, nothing stored. They're the one-off version of checks Monitelia runs continuously.
DMARC, SPF & DKIM checker
Check whether your domain can be spoofed. Reads your live DMARC, SPF, DKIM and BIMI records and tells you what's missing.
Run it →
DMARC & SPF record generator
Get the exact DNS records to paste. Reads the senders your current SPF already trusts, counts them against the ten-lookup limit, and gives you the next safe DMARC stage.
Run it →
SSL certificate checker
See who issued your certificate, when it expires, what it covers, and which TLS version your server negotiates.
Run it →
Meta tags checker
Check a page's title, meta description, H1, canonical, robots directives and Open Graph tags — with the length limits that get you truncated.
Run it →
Lookalike domain checker
Generate the typo, homoglyph and IDN variants of your domain an attacker would register — and see which ones already resolve.
Run it →
HTTP security headers checker
Grade the security headers your server actually sends — HSTS, CSP, nosniff, frame protection — and see exactly what to add.
Run it →
Redirect chain checker
Follow the full redirect chain hop by hop. Find loops, needless extra hops, and 302s that should be 301s.
Run it →
Broken link checker
Check every link on a page and find the ones that 404 or time out — before a reader does.
Run it →
robots.txt & sitemap checker
Read your robots.txt, catch rules that block search engines entirely, and verify every sitemap it declares actually loads.
Run it →
DNS record checker
See every DNS record for a domain — A, AAAA, MX, NS, TXT, SOA — plus whether DNSSEC is signing your answers.
Run it →
Email blacklist checker
Check whether your mail server's IP is on Spamhaus, SpamCop, Barracuda or SORBS — the reason legitimate mail silently stops arriving.
Run it →
Subdomain finder
Discover a domain's subdomains from Certificate Transparency logs — the same forgotten staging boxes and admin panels an attacker enumerates first.
Run it →
WHOIS & domain age
See when a domain was registered, when it expires, its registrar and transfer-lock status — via RDAP, the structured successor to WHOIS.
Run it →
hreflang checker
Validate a page's hreflang tags — catch malformed language codes, a missing x-default and duplicate targets that quietly break international SEO.
Run it →
Structured data checker
Extract a page's JSON-LD structured data, list its schema.org types, and catch the JSON syntax errors that silently void a whole block.
Run it →
AI visibility checker
Score how ready a page is to be read and cited by ChatGPT, Perplexity, Claude and Google AI — crawler access, llms.txt, schema, entity signals and content shape, scored in one pass.
Run it →
Accessibility checker (WCAG)
A fast WCAG quick-check — missing lang, images without alt, unlabelled form fields, empty links, zoom-blocking viewport and more. The free front door to the European Accessibility Act (EN 301 549 / WCAG 2.1 AA).
Run it →
Spelling & grammar checker
Check a page's spelling and grammar — Ukrainian and English alike, language auto-detected. Clean copy is a trust and conversion signal, and it's what AI answer engines quote.
Run it →
These are snapshots. Problems arrive on their own schedule.
A certificate expires at 3am; a lookalike domain is registered on a Saturday. The product runs these checks on a schedule and tells you when something changes.
Start free