Tool Categories

Every check on BuildToolForge belongs to one of four categories, grouped by the kind of problem it solves. Pick the category that matches your situation to see everything inside it, with a short explanation of when each page is the right one to open.

DNS & Networking

DNS & Networking covers how a domain is found and how its email is trusted. The DNS lookup queries A, AAAA, CNAME, MX, TXT, NS, SRV and PTR records through public DNS-over-HTTPS resolvers, so you see what the internet sees rather than your local cache. The SPF, DKIM and DMARC checker reads the three email-authentication records together and explains exactly why messages land in spam. Start here after moving a site, changing a mail provider or adding a new domain. Because the answers come straight from public resolvers, you can also compare providers and spot a record that has not spread everywhere yet.

HTTP

HTTP is about the conversation between a client and a server. The status code reference explains every common response, from 200 and 301 to 404, 429 and 503, and when each one is the correct choice. The API rate limit calculator turns a request budget into safe delays and burst sizes, which helps when you design an integration or debug throttling. Open this category when an API misbehaves or a page returns an unexpected code. Both pages work without sending anything to a server, so you can use them with private API details.

Security

Security gathers the checks that protect a website and its users. The SSL certificate checker shows the issuer, expiry date, covered hostnames and chain; the security headers checker grades protections such as HSTS, X-Frame-Options and Referrer-Policy; the CSP generator builds a Content Security Policy step by step; and the JWT decoder reads tokens so you can see why a login fails. Use it before a launch, after a scan report or whenever a browser shows a warning. Together they cover the issues most security scanners report, with a clear note on what to change and where.

Encoding

Encoding handles data that has to travel safely through text-only channels. The Base64 encoder and decoder converts text and files for data URIs, email attachments and API payloads, and the URL encoder and decoder makes query strings and special characters safe for links. Reach for it whenever text arrives garbled or a link breaks because of a space, an ampersand or a non-Latin character. Everything is converted locally in your browser, including files, so nothing you encode or decode is uploaded.

Who uses these categories

Developers use them before and after deployments; system administrators and IT teams use them to troubleshoot domains, mail and certificates; SEO specialists check status codes and redirects; security reviewers check headers, policies and tokens; and site owners use them to confirm that a provider has made the change they asked for. The categories stay the same whoever you are, so you can find a page by the problem rather than by job title.

How each page works

Every page follows the same pattern: enter a domain, a URL or a value, run the check, read the verdict, then open the details. Each result links to an in-depth guide written from hands-on experience, so you can understand the cause instead of copying a fix you do not trust.

How to choose the right category

If you are unsure where to start, follow the symptom. A site that does not load points to DNS & Networking, an error code or a slow API to HTTP, a browser warning or a failed scan to Security, and garbled text to Encoding. You can also type the name of a task into the search box above, such as SSL, headers or Base64, to jump straight to the right page.

What comes next

The library grows steadily. JSON formatting, hashing, redirect and header inspection, DNS propagation, password generation and timestamp conversion are already on the roadmap, and each new addition will appear in the category it belongs to, with the same short verdict and in-depth guide as the existing pages.

Everything is free and needs no account. Where a check can run in your browser it does, so what you type stays on your device; checks that need an outside view, such as certificate and header scans, send only the domain you enter and store nothing.