Runs entirely in your browser. Configs are analyzed locally via WebAssembly — your config and its findings are never uploaded or stored. Same open-source engine you can read and run yourself.
Loading analysis engine…
No config handy? Load a sample:
Segmentation policy (optional) — prove zones can't reach each other
Declare zones and must_not_reach rules; RuleHawk proves isolation or returns the concrete witness packet the ACL wrongly permits — audit-grade evidence.