Rumskrot Beacon
The network engineer's toolbelt for iPhone and iPad. Nineteen native diagnostics and audits — TLS audit, domain audit, cert dashboard, diagnose wizard, plus the classics — all running on-device, with zero third-party SDKs and zero telemetry.
iPhone
The Network Engineer’s Toolbelt
Nineteen native diagnostics and audits — all on-device, zero telemetry
SSL Labs in Your Pocket
Protocol matrix, HSTS, cert health — graded A+ to F, computed on-device
Triage in One Tap
Ping → DNS → TCP → TLS → HTTP. Diagnose pinpoints what’s broken
Audit a Domain’s DNS Posture
MX, SPF, DKIM, DMARC, CAA, BIMI — one verdict for the whole stack
Never Miss a Cert Expiry
Every audited host, sorted by urgency — tap to drill into the source run
Chain Tools into One-Tap Recipes
Curated presets or your own — drives Shortcuts and Siri
Watch the Network Breathe
Per-packet RTT plus trends across every previous run against the same host
Every Probe You’ve Ever Run
Recall, re-render, re-run — all on-device, no cloud, no accounts
iPad
The Network Engineer’s Toolbelt
SSL Labs in Your Pocket
Triage in One Tap
Audit a Domain’s DNS Posture
Never Miss a Cert Expiry
Chain Tools into One-Tap Recipes
Watch the Network Breathe
Every Probe You’ve Ever Run
Features
Diagnose Wizard
Runs ping, DNS, TCP, TLS, and HTTP in sequence and tells you exactly which step in the path is broken.
TLS Audit
SSL Labs–style A+ to F grade, computed on-device. Protocol matrix, HSTS, cert health, the works.
Domain Audit
MX, SPF, DKIM, DMARC, CAA, BIMI in one tap. Posture verdict: Secure, Partial, or Misconfigured.
Cert Dashboard
Every host you’ve audited, sorted by expiry urgency. Never miss another cert renewal.
Templates
Chain N tools into a one-tap recipe. Curated presets like “API endpoint health check”, or build your own. Drives Shortcuts and Siri.
curl, Built In
Full HTTP request builder. Method picker, headers, body editor, and a one-tap “Copy as curl”.
MTR
Continuous traceroute with per-hop loss percentages and RTT sparklines. Watch the path live.
Ping with Trends
Per-packet RTT, loss %, min / max / avg / stddev — plus trends across every previous run against the same host.
DNS, WHOIS, ASN
Every record type with TTL and parsed RDATA, IPv4 / IPv6 PTR, parsed WHOIS, IP-to-ASN lookups — all from your device.
HTTP Probe & Port Scan
Status, headers, redirect chain, and a full timing breakdown. TCP port scan with service-name hints over a single port, range, or list.
TLS Inspector
Full certificate chain, negotiated version, cipher, ALPN, system trust verdict, days-remaining, SANs, and SHA-256 fingerprint.
mDNS / Bonjour
Discover AirPlay, Chromecast, SSH, HTTP(S), printers, HomeKit, SMB and workstations on your LAN, with TXT records.
Subnet & My Network
CIDR ↔ netmask, first / last host, broadcast, wildcard. Plus active path, every interface, public IPs, and constraint flags.
Run History & Saved Targets
Every probe is recorded. Bookmark hosts, pin them to the home screen, and re-run any past result with one tap.
App Intents Everywhere
Drive any probe from Shortcuts, Siri, automations, or other apps — output round-trips through the same history view.
Privacy-First by Design
Everything runs on-device. Zero analytics, zero crash trackers, zero third-party SDKs. No accounts, no sign-up, no email.
About
Rumskrot Beacon is built natively in Swift on top of Network.framework, the dnssd C API, and Swift Concurrency — no third-party SDKs, no relays, no servers. Every probe runs from your device. ASN and WHOIS go directly to public lookup services from your device, with no Beacon proxy in between.
If you reach for Beacon during outages, it pairs naturally with the rest of the toolbelt: Rumskrot Terminal for SSH, and Rumskrot Remote for VNC remote-desktop control of your Macs.
Free. No IAP, no ads, no premium tier. If Beacon saves you an oncall page, that’s worth more than a subscription would be.