ronutz

Roadmap

What's on the roadmap

The tools we're planning and considering for the toolbox. This page is generated from the live build catalogue, so it's always current: a tool appears here the moment it's queued and moves into the shipped count the moment it ships. No dates, just direction and rough priority.

64shipped152planned

Built for more than a browser tab

Two directions sit behind this toolbox, both intentions rather than promises, and neither with a date.

API access

The tools already run behind a small, versioned internal API. One day, the same deterministic engines could answer a request, not just fill a browser tab.

Open engine

Each tool is a self-contained, documented module, built so it could be released to self-host: dropped straight into your own build and CI pipelines, running inside your own environment with nothing leaving it.

Neither is committed. What makes them possible is that the tooling has been built from the ground up expecting them: deterministic cores, no hidden state, a clean API surface, machine-readable docs. So if the time comes, opening these up is a step, not a rewrite.

Growth here has a measured ceiling, not a vague one. The hosting platform caps how many static files one Worker may carry, and this site's own arithmetic — roughly a hundred files per tool-and-article pack, across sixteen languages — is checked against that cap on every build. Today there is room for hundreds more tools, and the expansion path beyond a single Worker is already designed, so the roadmap below is constrained by judgment, not by hosting.

Security & WAF

  • CSP evaluatorevaluate / gradeCSP Level 3 (W3C)
  • Path traversal decoderdecode / normalizeRFC 3986OWASP Path Traversal
  • ASM / Advanced WAF inspectoridentify / structure / explain + deep / fingerprint / diff / cohortF5 BIG-IP ASM / Advanced WAF
  • SQL injection pattern explainerdecode / annotateOWASP SQL Injection
  • XSS payload explainerdecode / annotateOWASP XSS
  • AWAF scanner-XML explainerexplain (deterministic)F5 Advanced WAF generic scanner XML (schema pending)
  • F5XC Web App Scanning report explainerexplain (deterministic)F5XC Web App Scanning public API
  • WAF evasion normalizerdefensive canonicalization only
  • ASM violation / signature explainerdecode / explainF5 BIG-IP ASM / Advanced WAF
  • ASM support-ID decoderdecodeF5 BIG-IP ASM
  • JWT registered-claims explainerexplain (deterministic)RFC 7519IANA JWT Claims registry
  • JWT / bearer cookie extractordecode (deterministic)RFC 6265RFC 6750RFC 7519
  • WebAuthn/passkey attestation explainerexplain (deterministic)W3C WebAuthn Level 2FIDO2 CTAP2

F5 LTM, iRules & platform

  • iControl REST path explainerexplainF5 iControl REST
  • iControl REST stats decoderdecodeF5 iControl REST
  • F5 Ethernet trailer decoderdecode / explainF5 Ethernet trailer (f5ethtrailer)
  • F5 TCP RST cause explainerexplainF5 BIG-IP RST cause
  • Virtual-server match-order explainerexplain (deterministic)F5 LTM virtual server selection
  • Health-monitor timing calculatorcalculate / explainF5 LTM monitors
  • F5 HSL and log-profile explainerexplainF5 BIG-IP High-Speed Logging
  • SNAT port-exhaustion calculatorcalculate / explainF5 SNAT automap / SNAT pool
  • Route-domain / partition decoderdecode / explainF5 route domains / partitions
  • tmsh <-> iControl REST path mapperconvert / explainF5 iControl REST
  • HA / failover explainerexplainF5 device service clustering
  • SSL Orchestrator troubleshooting flowexplainF5 SSL Orchestrator

F5 GTM, AFM & APM

  • iQuery protocol explainerexplain / troubleshoot (static)F5 BIG-IP DNS (GTM) iQueryF5 Device Trust / CMI

F5 automation (AS3 / DO)

  • FAST template explainerexplain (deterministic)F5 Application Services Templates
  • Cloud Failover Extension (CFE) explainerexplain (deterministic)F5 Cloud Failover Extension
  • iApps legacy pointerexplainF5 iApps / AS3 / FAST

F5 Distributed Cloud (XC)

  • F5XC HTTP LB route explainerexplain (deterministic)ves.io.schema.views.http_loadbalancer
  • F5XC API path & object explainerexplain (deterministic)F5 Distributed Cloud API

F5OS platform (VELOS / rSeries)

  • F5OS RESTCONF path explainerexplain (deterministic)F5OS RESTCONFOpenConfig YANG
  • F5OS tenant config explainerexplain (deterministic)F5OS f5-tenants YANG
  • F5OS error-catalog lookupreference (vendored snapshot)F5OS VELOS & rSeries

Fortinet FortiGate & FortiOS

  • FortiOS packet sniffer builderbuild (deterministic)FortiOS diagnose sniffer packet
  • FortiOS debug flow builderbuild (deterministic)FortiOS diagnose debug flow
  • FortiGate policy match-order explainerexplain (deterministic)FortiOS firewall policy
  • FortiOS CLI config explainerdecode / explainFortiOS CLI reference
  • FortiGate session-table decoderdecode / explainFortiOS diag sys session list
  • FortiGate VDOM explainerexplainFortiOS VDOMs
  • FortiOS route-lookup explainerexplainFortiOS routing
  • FortiGate NP7 / SOC offload explainerexplainFortiGate NP7 / SOC4

Fortinet security, VPN & SD-WAN

  • Security-profile / inspection-mode explainerexplainFortiOS security profiles
  • SSL/SSH inspection explainerexplain (config only)FortiOS SSL/SSH inspection
  • IPsec phase1/phase2 mismatch checkerexplain / compare (deterministic)RFC 7296FortiOS IPsec VPN
  • SD-WAN rule / SLA explainerexplain (deterministic)FortiOS SD-WAN
  • SD-WAN SLA target calculatorcalculateFortiOS SD-WAN health-check
  • SSL-VPN / Agentless-VPN explainerexplainFortiOS SSL-VPN
  • FortiGate log decoderdecode / explainFortiOS log reference
  • ZTNA tag / posture explainerexplainFortiOS ZTNA
  • FortiGuard category lookuplookup (vendored)FortiGuard web-filter / app-control categories

Fortinet ecosystem & identity

  • FortiWeb policy / signature explainerdecode / explainFortiWeb
  • FortiADC LB-method / health-check explainerexplainFortiADC
  • FortiManager ADOM / policy-package explainerexplainFortiManager
  • FortiSASE component explainerexplainFortiSASE
  • SCIM 2.0 provisioning explainerexplainSCIM 2.0RFC 7644

Netskope SSE / SASE

  • PAC file explainer + validatorparse / validatePAC (FindProxyForURL)
  • SSE / SASE single-pass architecture explainerexplainNetskope One platform
  • Netskope steering-method explainerexplainNetskope One steering
  • Netskope DLP concept explainerexplainNetskope One DLP
  • Cloud Confidence Index (CCI) explainerreference (vendored)Netskope Cloud Confidence Index
  • Netskope Private Access (ZTNA) explainerexplainNetskope One Private Access
  • Netskope log / event field referencedecode / reference (vendored)Netskope SkopeIT events
  • Netskope SSO / SCIM integration explainerexplainSAML 2.0OIDCSCIM 2.0

Extreme switching & fabric (EXOS / VOSS / SPB)

  • EXOS (Switch Engine) config explainerdecode / explainExtremeXOS / Switch Engine CLI
  • Fabric Connect / SPB explainerdecode / explainIEEE 802.1aq (SPB)IS-IS
  • Universal switch OS-name mapperreference (vendored)Extreme Universal switches
  • VOSS (Fabric Engine) config explainerdecode / explainVOSS / Fabric Engine ACLI
  • I-SID / VSN decoderdecodeSPBM I-SID / VSN
  • EXOS <-> VOSS concept mapperconvert / explainExtremeXOSVOSS
  • Fabric Attach explainerexplainExtreme Fabric Attach

Extreme NAC & cloud (ExtremeControl / Platform ONE)

  • ExtremeControl NAC policy explainerexplainExtremeControl
  • Downloadable ACL (dACL) explainerdecode / explainExtremeControl dACL
  • Platform ONE / XIQ / Site Engine mapexplainExtreme Platform ONEExtremeCloud IQ

PKI

  • Certificate chain builder & validatororder / validate (offline)RFC 5280
  • X.509 advanced analysisdecode / explain (local)RFC 5280
  • OCSP / CRL decoderdecode / explainRFC 6960RFC 5280
  • Key / cert / CSR match + SPKI fingerprintcompare / fingerprintRFC 5280RFC 7469
  • ACME flow explainerexplain (deterministic)RFC 8555RFC 9773

Protocol & packet decoders

  • Syslog message parserdecode / explainRFC 5424RFC 3164
  • Linux tcpdump builderbuild (deterministic)tcpdump(8)pcap-filter(7)
  • Layered packet decoderdecode-only (spine)
  • TCP decoderdecode-onlyRFC 9293
  • UDP decoderdecode-onlyRFC 768
  • BPF / tcpdump filter explainerexplain (deterministic)pcap-filter (BPF)
  • DHCP decoderdecode-onlyRFC 2131
  • DNS message decoderdecode-only (local)RFC 1035
  • ICMP decoderdecode-onlyRFC 792RFC 4443
  • NTP packet decoderdecode-onlyRFC 5905
  • VXLAN decoderdecode-onlyRFC 7348
  • GENEVE decoderdecode-onlyRFC 8926
  • QUIC header decoderdecode-only (header-only)RFC 8999RFC 9000
  • Layer-nesting explainerexplain (static)
  • OSPF decoderdecode-onlyRFC 2328
  • BPDU / STP decoderdecode-onlyIEEE 802.1DIEEE 802.1Q
  • PPPoE decoderdecode-onlyRFC 2516
  • LLDP / CDP decoderdecode-onlyIEEE 802.1AB
  • IPsec decoderdecode-onlyRFC 4301RFC 4303

Networking & addressing

  • dig command builderbuild / generate (local)RFC 1035RFC 6891RFC 4034
  • MAC / OUI lookuplookup (vendored)IEEE OUI registry
  • traceroute / tracepath output explainerdecode / explainRFC 792RFC 1393
  • Protocol-number registrieslookup (vendored)IANA Protocol Numbers
  • CIDR advanced planningcalculate / explain (local)RFC 4632
  • IP multicast groupslookup / explainRFC 5771
  • ASN / prefix originanalyze / explainRFC 4271RFC 6480

HTTP & web

  • HTTP message decoderdecode / explainRFC 9110RFC 9112
  • Meta, Open Graph & JSON-LD inspectorparse / explainHTML Living StandardOpen Graph protocolschema.org
  • Set-Cookie explainerdecode / explain / flagRFC 6265bis
  • CORS preflight explainerexplainFetch CORS protocolRFC 9110
  • HAR analyzerdecode / explain / flagHAR 1.2
  • HTTP methods comparisonexplainRFC 9110
  • HTTP method overrideexplainRFC 9110
  • OpenAPI / Swagger explainerexplain / validateOpenAPI 3.1OpenAPI 3.0

Web front-end & CSS

  • Color contrast & formatcompute / convertWCAG 2.1CSS Color 4
  • CSS specificity calculatorcompute / explainCSS Selectors 4CSS Cascade 5
  • HTML structure & DOM explainerparse / explainHTML Living StandardWCAG 2.1
  • CSS selector testermatch / explainCSS Selectors 4

TLS & transport

  • MTU / MSS referencecalculate / referenceRFC 1191RFC 879
  • Bits / bytes / throughputconvert

Logging & SIEM formats

  • CEF decoder (ArcSight)decode / explainArcSight CEF
  • Splunk HEC event explainerexplain / validateSplunk HTTP Event Collector
  • LEEF decoder (QRadar)decode / explainIBM QRadar LEEF

Encoding

  • Charset equivalencyconvert / explainUnicodeRFC 3629
  • Number base & bitwise calculatorconvert / compute
  • Unicode / hidden-character inspectorinspect / revealUnicodeUTS #39UTR #36RFC 3629

Hashing

  • Webhook signature verifierverifyRFC 2104HMAC

Text & utilities

  • Cron expression explainerexplainPOSIX crontabVixie cron extensions
  • chmod permission calculatorconvert / explainPOSIX file mode bitschmod(1)
  • Expect script explainerexplainExpect / Tcl
  • Password entropyanalyze (analyzer-only)
  • jqtransform
  • Semantic JSON diffcompare
  • YAML validator & footgun checkvalidate / explain
  • ANSI escape decoderdecode / explainECMA-48 / ANSI X3.64 SGR + control sequences
  • Bash special-variable explainerexplainBash special parameters (Bash manual)
  • Expect pattern testertestExpect / Tcl
  • JSON Schema validatorvalidate
  • Log parserparse / explain
  • sedtransform
  • awktransform

Python

  • Python playgroundevaluateCPython (via Pyodide / WASM)
  • requirements.txt explainerdecode / explain (local)PEP 508PEP 440
  • Python traceback explainerdecode / explain (local)CPython traceback format
  • pyproject.toml explainerdecode / explain / validate (local)PEP 621PEP 518PEP 508
  • Wheel filename & PEP 440 version explainerdecode / explain (local)PEP 427PEP 440

Cloud-native & containers

  • Kubernetes NetworkPolicy explainerexplainKubernetes NetworkPolicy
  • Kubernetes RBAC explainerexplainKubernetes RBAC
  • kubeconfig explainerdecode / explainKubernetes kubeconfig

Infrastructure as code (Terraform / Ansible)

  • Terraform plan (JSON) explainerexplainTerraform JSON plan format
  • Terraform state explainerdecode / explainTerraform state format (v4)
  • HCL to JSON converterconvertHashiCorp HCL2Terraform JSON configuration syntax
  • Ansible Vault decryptordecrypt (deterministic)Ansible Vault payload format (AES-256-CTR, PBKDF2-HMAC-SHA256)

Have an idea?

Every tool here started the same way: someone needed a small, specific thing and could not find it at the worst possible moment, the digital cousin of being one console cable short at 2am with the maintenance window closing. If the one you are reaching for is not here yet, propose it. Worth a scroll through the list first, though, in case that exact adapter is already on my bench half-built.

Suggest a tool