shucky.io is a free, privacy-first security toolkit that runs in your browser. Use the probe and lookup tools only against systems you own or are explicitly authorized to test. Everything is provided “as is,” with no warranty — you are responsible for how you use it. No accounts, no cookies, no tracking.
By accessing or using shucky.io (the “Service”), you agree to these Terms of Service and to our Privacy Policy. If you do not agree, do not use the Service.
shucky.io is a free, browser-based collection of network and security utilities — for example IP and DNS lookups, subnet and hash tools, a password generator, breach checks, and an HTTP/header probe. It is provided for informational and educational purposes only. Results are best-effort and may be incomplete or inaccurate; they do not constitute professional security advice.
You may use the Service only for lawful purposes and in accordance with these Terms. In particular:
You are solely responsible for your use of the Service and for ensuring you are authorized to query any target you enter.
The Service is provided “AS IS” and “AS AVAILABLE,” without warranties of any kind, express or implied, including but not limited to accuracy, reliability, availability, fitness for a particular purpose, or non-infringement. Security-related output is informational only and is not a guarantee that any system is secure or insecure.
To the maximum extent permitted by law, shucky.io and its operator shall not be liable for any direct, indirect, incidental, consequential, or special damages, or any loss of data, arising out of or relating to your use of — or inability to use — the Service, even if advised of the possibility of such damages. Your sole remedy for dissatisfaction with the Service is to stop using it.
The Service uses no accounts, no cookies, and no tracking or analytics. Some tools query third-party services on your behalf; when you use them, your public IP and the values you enter may be visible to those providers. See the Privacy Policy for details.
Some tools rely on third-party data and APIs — for example the CISA Known Exploited Vulnerabilities catalog, the NIST National Vulnerability Database, Have I Been Pwned, public DNS resolvers, the bash.ws DNS-leak-test service, and certificate-transparency logs. The probe, SSL, and DNS-leak tools are also protected by Cloudflare Turnstile, a privacy-focused bot check that loads only when you run those tools. shucky.io is not affiliated with, and does not endorse, these providers, and is not responsible for their content, accuracy, or availability. Their own terms may apply.
These Terms may be updated from time to time. Changes take effect when posted on this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised Terms.
These Terms are governed by, and construed in accordance with, the laws applicable in the operator’s place of residence, without regard to conflict-of-law principles. Nothing in these Terms limits any rights you may have that cannot be waived under applicable law.
Questions about these Terms? Contact [email protected].