H
HTTPSense

Infra Inspector

Aggregate infrastructure intelligence from all tools — security, DNS, performance, SEO, and more.

What is an Infra Inspector?

An infrastructure inspector aggregates data from multiple analysis tools — redirects, headers, SSL/TLS, DNS, meta tags, WHOIS, and tech stack — into a single scored intelligence report. Instead of running each check individually and cross-referencing results, the Infra Inspector correlates signals automatically and produces categorised insights with an overall infrastructure grade.

HTTPSense's Infra Inspector runs all inspectors behind the scenes and synthesises their findings into categories like Security, Performance, DNS Health, SSL Configuration, and SEO Readiness. Each category receives a score and individual insights are flagged by severity, giving you a comprehensive infrastructure health check in one click.

How to Use the Infra Inspector

  1. Enter a URL in the search bar and click Inspect Infrastructure.
  2. Review the Overview tab for the overall grade and category-score bars.
  3. Click into individual category tabs (Security, DNS, Performance, SEO, Reliability, Infrastructure) to see insights filtered by area — Infrastructure now surfaces detected CDN, hosting provider, framework, and CMS.
  4. Check the Signals tab for the projected signal data — HSTS attributes, HTTP/3 advertisement, cookie flags, CAA records, DNSSEC validation, NS-provider diversity, IPv4 /24 spread, plus a Tech Stack card with CDN, hosting provider, primary IPs, framework, and CMS.
  5. Use the Raw tab to Copy JSON or Download the complete report for scripting or archival.

How the Infra Inspector Works

When you submit a URL, the Infra Inspector orchestrates seven sub-inspectors — Redirect, Headers, SSL, DNS, Meta, WHOIS, and TechStack — reusing recent cached snapshots where possible and running the rest live. Each sub-inspector returns its native result, which the Infra engine projects into a compact signal set. The TechStack pass adds CDN, hosting provider, framework, and CMS fingerprints derived from the headers, HTML, and DNS that were already collected, so the extra cost is mostly local processing.

A rule-based grading model with fixed per-category denominators evaluates each signal and emits an “insight” with severity (good, info, warning, error, or critical), a title, and a detail string. Categories — Security, DNS, Performance, SEO, Reliability, Infrastructure — each have a fixed maximum, so a missing sub-inspector reduces the score honestly instead of silently shrinking the scale. When that happens you'll see a Partial result banner listing which inspectors did not respond.

Infra Inspector is mostly domain-level — DNS, SSL, WHOIS apply to the host — but redirect-chain and header signals are URL-level, so the exact URL you submit matters for those.

Key Features

  • Seven-inspector aggregation — Redirect, Headers, SSL, DNS, Meta, WHOIS, TechStack — projected into a single signal set.
  • Six scored categories — Security, DNS, Performance, SEO, Reliability, Infrastructure — each with a fixed maximum so partial runs grade fairly.
  • TechStack-powered Infrastructure category — surfaces CDN, hosting provider, framework, and CMS detected from headers, HTML, and DNS so cross-signal context lives next to your scoring.
  • HSTS attribute scoring — Detects max-age, includeSubDomains, and preload and flags preload-eligibility.
  • HTTP/3 detection — Reads the Alt-Svc header to surface whether the server advertises QUIC.
  • Cookie-flag hardening — Confirms every Set-Cookie carries Secure, HttpOnly, and SameSite.
  • CAA & DNSSEC validation — Pulls live CAA records and DNSSEC enabled/validated state from the DNS engine, not just WHOIS strings.
  • NS-provider & IP-subnet diversity — Counts unique nameserver registered bases and unique IPv4 /24 subnets to flag single-provider risk.
  • Cross-signal insights — “Cert outlives domain”, “HSTS preload-eligible”, “Multi-provider DNS”, “HTTP/3 available”, “Cookie flags hardened”, “CDN detected”, “Hosting provider identified”.
  • Partial-result transparency — When a sub-inspector fails, the response's incomplete flag and missing list make the gap visible instead of hiding it.
  • Copy & download — One-click copy on domain, final URL, nameservers, issuer, and registrar; full JSON export from the Raw tab.

Common Use Cases

  • Site reliability engineers — Get a single-page health check covering DNS, SSL, headers, and performance before deployments.
  • Security teams — Identify security gaps across the entire infrastructure stack without running separate tools.
  • Technical SEO auditors — Assess redirect chains, meta tags, and security headers that affect search rankings in one report.
  • Engineering managers — Generate a high-level infrastructure scorecard for stakeholder reviews and compliance documentation.

Frequently Asked Questions

Why does Infra Inspector grade my site differently than Header or SSL Inspector?

It combines signals from multiple inspectors and applies cross-cutting rules (HTTPS redirect quality, mixed-content hints, DNS/SSL alignment) that single-tool grades do not consider.

Why does it take longer than other tools?

It chains seven sub-inspectors (Redirect, Headers, SSL, DNS, Meta, WHOIS, TechStack) and reuses recent snapshots when available. Total time is the sum of the slow ones rather than a single network round-trip.

How are insights categorised?

Each insight is tagged with one of six categories — Security, DNS, Performance, SEO, Reliability, Infrastructure — and a severity (good, info, warning, error, critical). Each category has a fixed maximum score so partial results still grade fairly.

What does the "partial result" banner mean?

If a sub-inspector failed (e.g. WHOIS timeout, DNS unreachable), the response includes an `incomplete` flag and a `missing` list. The score uses fixed denominators per category so the grade reflects the gap honestly instead of silently shrinking the scale.

Can I customise the grading rules?

Not in this version. The ruleset is curated and updated as best practices evolve. Custom rule sets are on the roadmap.

Is it free? Do I need to sign up?

Yes, the Infra Inspector is free with no signup or API key.

How does Infra Inspector relate to TechStack Inspector?

Infra Inspector runs a TechStack pass internally and projects only the high-signal fields — CDN, hosting provider, framework, CMS, primary IP, IPv6 readiness, HTTP version — into the Infrastructure category. For the full technology taxonomy, JS libraries, and analytics tags, open the dedicated TechStack Inspector via the link in the Signals tab.