cloudek.Contact
CLOUDEK · FREE IT UTILITIES

Free tools for
the whole IT estate.

Browser-based helpers for Microsoft 365, Azure, email, networking, security and server administration. Each tool has its own page, a plain explanation and clear limits. Most calculations stay on your device. Optional public DNS queries go to Cloudflare only after you click. Some tools also offer an optional Explain with AI button; see where Cloudek AI is heading.

✓ No sign-in✓ Individual tool pages✓ Privacy notes included
Read the email DNS guideRead the subnetting guide
BROWSE BY TASK

Find the right tool

Choose a topic or search by the problem you are working on. Search and filters run locally in this page.

All tools are shown.

Start with a task

These small diagrams are conceptual previews; each tool page explains its actual inputs and limits.

Conceptual preview · not a result
EMAIL & DNS

Review a domain’s mail records

Explore the MX and email DNS checker.

Explore tool
Conceptual preview · not a result
NETWORK & IP

Plan an IPv4 network range

Explore the IPv4 subnet calculator.

Explore tool
Conceptual preview · not a result
TOKEN SAFETY

Inspect JWT claims locally

Explore the JWT claims inspector. Decoding does not validate a token.

Explore tool
Conceptual cue · not a result
NETWORK UTILITY

IP address lookup and blocklist check

See your public IP address, then look up any IP address or domain: reverse DNS, forward-confirmed reverse DNS, network owner and ASN, and a check against a small set of public DNS blocklists.

Open this tool
Conceptual cue · not a result
EMAIL HEALTH

Email domain health score and DMARC report analyzer

Enter a domain to get a score out of 100 with an A-F grade, a fix-first list and a breakdown of every check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT and name servers, plus BIMI, CAA, DNSSEC and Microsoft 365 hints. Then drop DMARC aggregate reports or .eml messages on the page to analyse them locally.

Open this tool
Conceptual cue · not a result
COST PLANNING

Microsoft 365 licence cost calculator

Pick a Microsoft plan and enter your seat counts to see monthly and annual totals at Microsoft's published list prices, then test an unused-seats what-if and a downgrade what-if. Every price is editable.

Open this tool
Conceptual cue · not a result
SERVICE DESK

IT ticket reply writer for MSPs

Paste a support ticket or email. The page detects the kind of request, lists the clarifying questions to ask and builds a reply template with fill-in fields. An optional AI draft is available.

Open this tool
Conceptual cue · not a result
LICENSING

Windows Server licensing calculator

Work out how many Windows Server core licences a Hyper-V host needs, how many full Standard sets you would stack for your VMs, whether Datacenter is cheaper, and how many CALs and RDS CALs to plan for. Rules for Windows Server 2022 and 2025 were checked against Microsoft sources on 1 November 2026, and the price fields start at Microsoft's published list prices, which you can edit.

Open this tool
Conceptual cue · not a result
PUBLIC DNS

MX lookup and email DNS checker

Look up a domain’s public MX, SPF, DMARC, MTA-STS, TLS reporting and DNSSEC records, plus its addresses, aliases (CNAME), nameservers and CAA policy. Add up to three DKIM selectors, a custom TXT name or an SRV pair for targeted lookups.

Open this tool
Conceptual cue · not a result
EMAIL HEADERS

Email header analyzer

Paste the raw headers of a message to trace each hop and find the slowest one, read SPF, DKIM and DMARC, spot a spoofed From or Reply-To, and decode Microsoft 365 spam headers (SCL, SFV, CAT, PCL, BCL) in plain English.

Open this tool
Conceptual cue · not a result
LOCAL CERTIFICATE TOOL

CSR and private key generator

Generate a PKCS#10 certificate signing request and matching password-encrypted private key in your browser, or decode an existing CSR locally.

Open this tool
Conceptual cue · not a result
COST PLANNING

SIEM log volume and cost estimator

Estimate monthly and annual SIEM log ingestion and storage cost from GB per day by source, then model filtering or cheaper storage to see how SIEM costs could be reduced.

Open this tool
Conceptual cue · not a result
LOCAL AI GOVERNANCE

AI agent audit log checker

Check pasted JSON audit log entries for the fields an AI agent audit trail needs, with a plain-English report and a suggested schema.

Open this tool
Conceptual cue · not a result
READ-ONLY QUERY HELPER

KQL and PowerShell query helper (read-only)

Describe what you want to find. Pick a reviewed read-only template for Entra, Defender, Sentinel, Azure, Exchange Online or Microsoft Graph, fill in the fields and copy the query. An optional AI draft is available for requests the templates do not cover.

Open this tool
Conceptual cue · not a result
LOCAL SCRIPT REVIEW

PowerShell script risk reviewer

Paste a PowerShell script to see which risky patterns it contains, on which lines, why they matter and a safer alternative, with a risk score you can check by hand.

Open this tool
Conceptual cue · not a result
LOCAL IDENTITY REVIEW

Entra Conditional Access policy reviewer

Paste one Conditional Access policy or a whole export (Microsoft Graph identity/conditionalAccess/policies or the portal JSON view) to check it against common good practice, with a coverage summary across the set.

Open this tool
Email authentication and delivery review Discuss a bounded, user-authorized review of one test message and its reported SPF, DKIM and DMARC results Free email header analyzer Trace a pasted header block hop by hop, check DMARC alignment and decode Microsoft 365 spam headers, all in your browser Free email-header reviewer Review pasted authentication results locally; this is separate from the send-a-test-email pilot Email test and report-draft workspace Prepare a test reference and assemble reviewed findings into a local draft. You send the test email yourself; this page does not send or search for email Controlled Microsoft 365 test-message review Search the fixed Cloudek Inbox for your exact test subject, confirm one match, then view redacted Authentication-Results Secure password-share pilot Synthetic marker demo only. Do not enter real passwords or customer secrets Secure file-request pilot Fixed synthetic marker demo only. Do not upload real files or customer data
Privacy and accuracy

Most utilities work locally in your browser. The public DNS checker and the Email Health Check send only the requested DNS record names to Cloudflare after you start a lookup; the files you drop on the Email Health Check are read in your browser and never uploaded. The TLS helper prepares an external Qualys link only after an authorization confirmation and your click. Thirteen tools (SPF, DKIM, DMARC, email authentication results, website security headers, the log redactor, the SIEM cost estimator, the AI agent audit log checker, the Microsoft error code explainer, the PowerShell script risk reviewer, the Conditional Access policy reviewer, the Email Health Check and the SPF lookup counter) also offer an optional “Explain with AI” button, and the query helper and the IT ticket reply writer offer an optional AI draft; only if you press it, the masked text shown in its preview is sent to our AI service. Each tool explains what it does not verify; confirm consequential results with authoritative systems.