Runs entirely in your browser. Configs are analyzed locally via WebAssembly — your config and its findings are never uploaded or stored. The same open-source RuleHawk engine you can read and run yourself.
Loading analysis engine…
No config handy? Load a sample:
Segmentation policy (optional) — prove zones can't reach each other
Declare zones and must_not_reach rules; the audit checks isolation against the rulesets you supply, or returns the concrete witness packet the ACL wrongly permits. Routing and NAT are not modeled.