Is my config uploaded?

No. The configuration is tokenised and analysed entirely in your browser.

Does it replace nginx -t?

No. nginx -t validates against your installed modules and files. This tool catches structural and best-practice issues first.

Are include files followed?

No. Paste each file separately, since included files aren't available to the browser.

Which security headers does it expect?

Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options or a frame-ancestors CSP, and a Referrer-Policy.

Does it work offline and on mobile?

Yes. Once the page has loaded it keeps working without a network connection, and the layout is responsive so it stays usable on phones and tablets.

Nginx Config Analyzer

Analyse nginx.conf for syntax, security and performance issues.

Support

Works Offline

Privacy First

No Login

No API

nginx.conf

Paste a server block or full config

Analysis

Syntax, security and performance checks

Server blocks

Locations

Errors

Warnings

General No `server_tokens off;` — add it to hide the nginx version banner.
General Compression is not enabled — consider `gzip on;` (or brotli) for text responses.
General Proxying without `X-Forwarded-For` / `X-Real-IP` headers — the backend will only see nginx's IP.
General No Upgrade/Connection headers set — WebSocket traffic through this proxy will fail.

About the Nginx Config Analyzer

Paste an Nginx configuration to check brace balance and missing semicolons, then review server and location blocks for missing server_name, plain HTTP without a redirect, outdated SSL protocols, missing security headers, wide-open CORS, unsafe proxy_pass headers, autoindex and server_tokens exposure, and gzip or caching opportunities.

Examples

Missing header

server { listen 443 ssl; }

Output

Warning: no Strict-Transport-Security header

Keyboard shortcuts

Copy the main outputCtrl / ⌘ + Shift + C
Download the resultCtrl / ⌘ + S
Share this toolCtrl / ⌘ + Shift + S
Reset the inputsAlt + R
Open the tool search paletteCtrl / ⌘ + K

Related tools

.htaccess Redirect Generator

Dev Utilities

Generate Apache .htaccess redirect and rewrite rules.

Bash Alias Generator

Dev Utilities

Create shell aliases for Bash, Zsh or Fish with correct quoting.

Chmod Calculator

Dev Utilities

Unix permission calculator: checkboxes, octal, and symbolic.

Cron Expression Builder

Dev Utilities

Build cron expressions visually with a human-readable description.

Crontab to Human Readable

Dev Utilities

Translate whole crontab files into plain English, line by line.

Docker Compose Validator

Dev Utilities

Check docker-compose.yml for errors, bad ports and risky settings.

Frequently asked questions

Version 1.0.0 · Updated 2026-08-19 · Runs entirely in your browser