About XGM
XGM is a free set of DNS, email security, TLS, web and developer tools, with guides that explain the results and a public API for scripts. No account is needed to run a check.
Principles
Privacy-first
Browser-based tools keep your input on your device. Server checks send only the domain, host or IP they need, and analytics start only after you accept them.
Practical diagnostics
XGM focuses on DNS, SSL, web, security and developer workflows that people actually need.
Original guides
Every tool has a guide, and in-depth guides cover topics such as DMARC enforcement, the SPF lookup limit, MTA-STS, HSTS preloading and subdomain takeover.
Build in public
The platform improves step by step instead of waiting forever for a perfect launch.
From tiny tools to useful systems
First we ship simple utilities. Then we connect them into stronger workflows: diagnostics, infrastructure checks, security dashboards, guides and automation helpers.
Trust
Free tools
Every tool works without an account. The same checks are available through a free public API and an MCP server for AI assistants.
Clear boundaries
Legal, privacy and disclaimer pages explain what XGM can and cannot do.
No secret input
Users are reminded not to paste private keys, passwords, tokens or confidential data.
Operational transparency
Public status and changelog pages show that the platform is actively maintained.
Every tool deserves context
XGM guides explain common use cases, mistakes and safe workflows before users run DNS, SSL, email, web, developer or text utilities.