Free Tools
Instant, no-signup checks for any domain. Run one now — then let Merlonix watch it (and every client domain) continuously, with alerts before anything breaks.
- SecuritySSL & DNS CheckerCheck any domain's SSL certificate expiry, issuer, and live DNS records instantly — free, no signup.Run the free check →
- SecuritySSL Certificate Expiry MonitorSee exactly when any domain's TLS certificate expires and how many days are left — before the 47-day certificate cliff.Run the free check →
- SecuritySecurity Headers CheckerGrade any site's HTTP security headers — HSTS, Content-Security-Policy, X-Frame-Options and more — with an A–F score, free, no signup.Run the free check →
- SecurityEmail Authentication CheckerCheck any domain's SPF, DMARC, MTA-STS and BIMI — and whether the policies are actually enforced, not just published — to see if it can be spoofed. Free, no signup.Run the free check →
- HealthBroken Link CheckerCheck any page for broken links and insecure (mixed-content) resources instantly — free, no signup. Then let Merlonix crawl the whole site continuously.Run the free check →
- SecurityBlacklist CheckerSee if a domain's mail IPs are on the major DNS blocklists (Spamhaus, SpamCop, Barracuda…) instantly — free, no signup. Then monitor continuously with Merlonix.Run the free check →
- Due diligenceWebsite Acquisition DD CheckBuying a website? Run a free technical due-diligence snapshot — domain transfer & expiry risk, SSL, DNS resilience, and email spoofability — instantly, no signup.Run the free check →
- AI visibilityAI Agent-Readiness CheckerScan any domain for llms.txt, AI-crawler access in robots.txt, and schema.org structured data — is your site ready for answer engines?Run the free check →
- AI visibilityAI Answer-Presence CheckerEnter your brand and a buyer question — we ask the real AI answer engines live and show whether they cite you.Run the free check →
- AI visibilityMCP Server Health CheckerPaste your MCP endpoint — we run a real Model Context Protocol handshake and report if it is up, its protocol version, latency, and the tools it exposes to agents.Run the free check →
- AI visibilityOpenAPI → MCP ConverterTurn your REST API into an MCP server AI agents can call. Paste your OpenAPI/Swagger spec — we generate the MCP tools, a manifest, and a runnable server. Free, no signup.Run the free check →
Paid one-time report · $15
Get a snapshot →Vendor Security Snapshot
A point-in-time, externally observed security snapshot of any vendor's domain — cert posture, DNS, email auth, headers — delivered as a PDF to your inbox. No account, no subscription.
One check is a snapshot. Monitoring is the protection.
A one-time check only tells you about today. The certificate that lapses three weeks from now, the DNS record that drifts, the answer engine that stops citing you — Merlonix re-checks on a schedule and alerts you before it costs a client.