WebSocket Probe
Send a WebSocket Upgrade handshake and verify the Sec-WebSocket-Accept response, subprotocols, and extensions.
Monitor WebSocket Probe automatically
Send a WebSocket Upgrade handshake and verify the Sec-WebSocket-Accept response, subprotocols, and extensions. NetTests can run this check on a schedule, preserve historical results, compare changes over time, and alert you the moment something breaks.
Start monitoring free → See all monitoring productsFrequently Asked Questions
What does the WebSocket Probe check?
It sends a HyperText Transfer Protocol (HTTP) Upgrade request (Connection: Upgrade, Upgrade: websocket, Sec-WebSocket-Key) and verifies that the server responds with a valid 101 Switching Protocols status. The result shows the negotiated subprotocol, accepted extensions (e.g. permessage-deflate), and the computed Sec-WebSocket-Accept header for validation.
What is the WebSocket handshake?
A WebSocket connection starts as a HyperText Transfer Protocol (HTTP)/1.1 request with an Upgrade header. The client sends a base64-encoded random nonce as Sec-WebSocket-Key. The server concatenates it with a fixed magic Globally Unique Identifier (GUID), computes Secure Hash Algorithm 1 (SHA-1), base64-encodes the result, and returns it as Sec-WebSocket-Accept. This tool verifies the computation to confirm the server is a real WebSocket endpoint.
What are WebSocket subprotocols?
Subprotocols are application-level agreements on the message format over the WebSocket connection: graphql-ws, stomp, mqtt, chat, etc. The client proposes subprotocols via Sec-WebSocket-Protocol; the server picks one and echoes it back. If no match, the server may omit the header or close the connection.
How do I test a WebSocket behind authentication?
Add an Authorization header in the form. WebSocket connections can carry HyperText Transfer Protocol (HTTP) headers during the initial Upgrade handshake — Bearer tokens and Application Programming Interface (API) keys work the same way as in regular HTTP. Cookie-based auth is not directly testable here, but most token-based WebSocket APIs accept an Authorization header.
Related Report Tools
These tools and monitors cover the same area — worth checking if you're already here.
Network Tools
-
HTTP Request
Send HyperText Transfer Protocol (HTTP) requests with custom method, headers, body, and authentication — inspect the full response.
-
HTTP Request Timing
Load a Uniform Resource Locator (URL) in headless Chromium and stream every fetched resource with size and timing.
-
HTTP Quick Check
The simplest possible check: fetch the page, confirm it returns 2xx.
-
Synthetic Monitoring (Browser Flow)login
String together navigate/click/fill/assert browser steps in one session — cookies and login state persist across the whole flow.
-
CDN Check
Which CDN served a URL, from which edge, whether it was a cache hit — and how much sooner the first byte arrived than at the origin.
-
CORS Tester
Test any Uniform Resource Locator (URL) for Cross-Origin Resource Sharing (CORS) with a custom method, headers, and body — see exactly why a browser would allow or block the request.
-
Dead Link Checker
Crawl a website and find broken internal links — renders JavaScript (JS) pages with a headless browser.
-
IP Blacklist Check
Check an IPv4 address against 49 major Domain Name System (DNS) blacklists (Spamhaus, SORBS, Barracuda, SpamCop, etc.).
-
Network Path Monitor
Continuous traceroute with per-hop loss and Round-Trip Time (RTT) statistics.
-
Traceroute
Trace the path packets take to a destination host, hop by hop.
-
Ping Scanner
Ping many hosts in parallel and report which are alive.
-
Ping Host
Send Internet Control Message Protocol (ICMP) echo requests and report round-trip time (RTT) and packet loss.
-
IP Geolocation
Resolve a domain or Internet Protocol (IP) address to its city, country, Autonomous System Number (ASN)/org, and coordinates — with a map.
-
IPv4 ↔ IPv6
Convert IPv4 to/from IPv4-mapped IPv6 (::ffff:a.b.c.d).
-
MAC OUI Lookup
Look up a Media Access Control (MAC) address's first 3 octets in the IEEE Organizationally Unique Identifier (OUI) vendor database (curated subset).
Email / SMTP Diagnostics
-
Email Health
One-click domain scorecard — Blacklist, Mail Server, Web Server, and Domain Name System (DNS) checks graded Errors / Warnings / Passed.
-
Email Records Check
Consolidated Mail Exchange (MX), Sender Policy Framework (SPF), Domain-based Message Authentication, Reporting & Conformance (DMARC), and DomainKeys Identified Mail (DKIM)-selector lookup for an email domain.
-
SPF Record Checker
Look up and validate a domain's Sender Policy Framework (SPF) Text (TXT) record.
-
Email Blacklist Check
Resolve a domain's Mail Exchange (MX) hosts to Internet Protocol (IP) addresses and check each against 49 IP blacklists plus the domain itself against 9 domain blacklists.
-
SMTP Banner Probe
Connect to a Simple Mail Transfer Protocol (SMTP) server, capture its banner + EHLO capabilities, and test STARTTLS.
Packet Generation & Testing
-
TCP/UDP Connection Testerlogin
Check Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) port reachability; optionally send a payload and read the reply.
-
TLS Handshake Inspector
Inspect a server's Transport Layer Security (TLS) handshake: version, cipher, Application-Layer Protocol Negotiation (ALPN), full cert chain.
-
HTTP Availability Check
Probe a list of hostnames (max 16) for HyperText Transfer Protocol (HTTP) and HyperText Transfer Protocol Secure (HTTPS) availability.
-
HTTP Latency
Send N HyperText Transfer Protocol (HTTP) HEAD requests to a Uniform Resource Locator (URL) and report min/median/mean/max/stddev latency. From this server's vantage.
-
Path MTU Probe
Discover the path Maximum Transmission Unit (MTU) to a host by sending increasingly large pings with the Don't Fragment (DF) bit set (binary search).
IP & Subnet Utilities
Routing & BGP
TLS / SSL Auditing
-
TLS/SSL Quick Scanlogin
Probe which Transport Layer Security (TLS) protocol versions a server accepts and show the cipher each negotiates.
-
TLS/SSL Deep Scanlogin
Full chain validation, Online Certificate Status Protocol (OCSP) stapling, Signed Certificate Timestamp (SCT) count, and per-Transport Layer Security (TLS)-version cipher matrix.
-
TLS/SSL Certificate Expiration
Days remaining before a server's Transport Layer Security (TLS) certificate (and its full chain) expires.
-
Domain Certificate Audit
Search Certificate Transparency logs for every Secure Sockets Layer (SSL) certificate ever issued to a domain — reveals subdomains, issuers, and historical issuance.
HTTP/2 & WebSocket
-
HTTP/2 Probe
Negotiate HTTP/2 via Application-Layer Protocol Negotiation (ALPN) and decode the server's SETTINGS frame (window size, max streams, etc.).
-
WebSocket Probe
Send a WebSocket Upgrade handshake and verify the Sec-WebSocket-Accept response, subprotocols, and extensions.
-
HTTP/2 Stress Testerlogin
Benchmark HTTP/2 server performance — measure requests per second, latency distribution, and concurrent stream throughput under sustained load.
Encoding & Conversion
-
Hex ↔ Text
Convert UTF-8 text to a hex string, or parse a hex string back to text (separators :/.- ignored).
-
Binary ↔ Text
Convert UTF-8 text to 8-bit binary, or parse a binary string back to text.
-
Case Converter
Convert text between common casings: UPPER, lower, Title, snake_case, kebab-case, camelCase.
-
Number Base
Convert a number between decimal, binary, octal, and hexadecimal representations.
-
Unix Timestamp
Convert between Unix epoch seconds and International Organization for Standardization (ISO)/Request for Comments (RFC) datetime formats (Coordinated Universal Time (UTC)).
-
IPv4 ↔ Decimal
Convert between dotted IPv4 notation, 32-bit decimal, hex, and dotted binary.
-
JWT Decoder
Decode a JSON Web Token (JWT) into its header and payload (no signature verification — that needs the signing key).