Crios vs DnsQuery

Know every device on your home Wi-Fi - and exactly what to do about the risks. Crios scans your network in one tap, identifies each device by name, maker and model, draws a live map of your Wi-Fi, and turns what it finds into plain-language advice anyone can act on. No jargon. No guesswork. Just answers. WHO IS ON MY NETWORK - One-tap discovery finds every connected device, including phones and laptops with no open ports - Reveals names, makers, models, vendors and device types - Spots unknown or unexpected devices that may be piggybacking on your Wi-Fi - Live network map shows how everything connects at a glance FIX THE RISKS, NOT JUST FIND THEM - Plain-language security advice for every device Crios finds - Flags weak router settings, exposed services and outdated firmware - Step-by-step guidance to close ports, change defaults and lock things down - Prioritizes what matters most so you fix the biggest risks first DEEP DEVICE INTELLIGENCE - Port scanner detects open TCP and UDP services on any device - MAC address vendor lookup identifies manufacturers instantly - Hostname, IP, and NetBIOS details for every endpoint - Ping, traceroute, DNS lookup, Wake-on-LAN and Whois built in WI-FI AND ROUTER TOOLS - Signal strength meter helps you place your router for best coverage - Speed test measures download, upload and latency - Channel analyzer spots crowded Wi-Fi channels slowing you down - Router admin shortcuts jump straight to your gateway settings SMART HOME AND IOT READY - Recognizes smart TVs, cameras, thermostats, speakers, printers and consoles - Custom labels and notes let you name every device your way - History tracks new arrivals and departures over time - Alerts when an unknown device joins your network BUILT FOR EVERYONE - Designed for curious homeowners, renters, parents and small business owners - No account required, no ads, no tracking of your network data - Works offline once your scan completes - Beautiful, fast, native iOS experience with full iPad and Dark Mode support PRIVACY FIRST Crios only scans networks you are connected to. Your data stays on your device. We never sell, share or upload your scan results. Whether you are hunting a mystery device, hardening your smart home, or just curious what is really on your Wi-Fi - Crios gives you the map, the answers, and the fix. Download Crios today and take back control of your network.

DnsQuery — inspect DNS, verify DNSSEC DnsQuery is a wire-level DNS tool for engineers, sysadmins, and curious network nerds. Send a query to any resolver — public, private, or your router — and see the full response: parsed answer sections, every flag, the raw bytes annotated by region, and an independent, end-to-end DNSSEC chain-of-trust walk that doesn't just take the resolver's word for it. Query and inspect - Hand-picked list of public resolvers (Cloudflare, Google, Quad9, OpenDNS, AdGuard) with IPv4 and IPv6 addresses, plus your configured system resolver on macOS, plus custom resolvers you define yourself. - Send over UDP, TCP, DNS-over-TLS (DoT), DNS-over-HTTPS (DoH), or DNS-over-QUIC (DoQ). - Control the individual query flags that matter: Recursion Desired (RD), DNSSEC OK (DO) for RRSIG / DNSKEY / NSEC records, and Checking Disabled (CD) to bypass upstream validation. - 18+ record types including A, AAAA, MX, SRV, CAA, SSHFP, TLSA, DNSKEY, DS, RRSIG, NSEC, NSEC3. - Color-coded hex dump of query and response bytes with a legend — see at a glance where the header, labels, compression pointers, and RDATA live. - Extended DNS Errors (RFC 8914) surfaced prominently when the upstream resolver tells you why something failed. Validate DNSSEC yourself - Full chain-of-trust walk from the IANA root trust anchors (KSK-2017 and KSK-2024) down to your answer, step by step. Every DS match, DNSKEY verification, and RRSIG check is shown with the key tag and algorithm. - Handles positive answers, NXDOMAIN and NODATA via full RFC 5155 NSEC3 three-proofs (closest encloser + next closer + wildcard), CNAME chains, insecure delegations, and NSEC3 opt-out. - Enforces RFC 6840 algorithm-downgrade protection and RFC 5011 key-revoke rules — won't silently accept a stripped-stronger-algo response. - Split-horizon aware: when a zone publishes both internal and external KSKs with two DS records in the parent, validation succeeds for whichever view your chosen resolver sees, helping you troubleshoot internal zones without fighting the tool. - Clear verdict at the top: Secure, Insecure (unsigned delegation), Bogus (with the specific zone and failure reason), or Indeterminate. Sync and share - Query history and your custom resolver list sync across your Mac, iPad, and iPhone through iCloud Key-Value storage (signed into the same Apple ID). No servers, no accounts, no tracking. Who it's for If you know what an RRSIG is, you're the target audience. Use it to debug a DNSSEC rollover that went sideways, verify a new resolver's behaviour, inspect what a malicious DNS rebinding might look like, or just satisfy curiosity about what actually travels over port 53. Privacy No analytics, no telemetry, no account required. All queries go directly from your device to the resolver you chose. History is stored in your own iCloud, not ours. From the maker of DnsEditor