Category Checker
Check how websites are categorized across security and web filtering platforms.
What is Category Checker?
Category Checker is a free MSNugget tool that looks up how a website or domain is categorized by Microsoft Global Secure Access web content filtering — part of Microsoft Entra Internet Access. Global Secure Access administrators write filtering policies against web categories (like "Social Media," "Streaming Media," or "Business"), and getting that category wrong for even one domain can silently block a business-critical site or leave a risky one reachable. Paste a domain, get its current category back in seconds, and confirm your policy will do what you expect before you ship it.
The tool is architected around a pluggable CategoryProvider interface, so it isn't limited to Microsoft's data forever — additional security and web-filtering platforms can be added as real credentials become available, without changing how the results are displayed.
Real Microsoft Global Secure Access data
Category Checker calls the Microsoft Graph API that backs Entra Internet Access web content filtering, so what you see here is the same category Global Secure Access would use to allow or block that domain — not a guess.
Built for Global Secure Access rollouts
Purpose-built for admins validating category-based access policies before they go live — confirm a domain's web category before writing a filtering policy rule around it, instead of finding out after a user is unexpectedly blocked.
Also included
- Deep-linkable results — share a checked domain via URL
- Recent lookups remembered locally, never sent anywhere
- Provider-based architecture, ready for more real API integrations
- Dark and light themes, system-aware by default
Supported providers
Microsoft Global Secure Access is the only provider wired to a real API today, and returns real data whenever this deployment has Microsoft Graph credentials configured (deterministic sample data otherwise, so the tool still works without a Global Secure Access tenant). Every provider shares the same pluggable interface — see ARCHITECTURE.md.
Planned, not yet wired up: FortiGuard, Cisco Umbrella, Zscaler, Netskope. They'll appear here once real API credentials for one of them are available — see the About page for why we don't fake results from a vendor's protected lookup page in the meantime.
Frequently asked questions
What is Microsoft Global Secure Access web content filtering?
Web content filtering is a feature of Microsoft Entra Internet Access (part of Global Secure Access) that lets administrators allow or block internet traffic based on the category of the destination website — for example blocking "Gambling" or "Adult Content" tenant-wide, or blocking "Social Media" for specific groups. Those policies only work as intended if the category assigned to a domain matches what the administrator expects.
How do I check a website's Global Secure Access category?
Type or paste a domain or URL into the search box above and select "Check Category." Category Checker normalizes the input to a bare domain and looks up its Global Secure Access web category, showing the result, status, and when it was checked.
Are the results real, live data?
When this deployment has Microsoft Graph credentials configured, yes — Category Checker calls the same Microsoft Graph API that Global Secure Access itself uses to categorize a domain. Without those credentials configured, it falls back to deterministic sample data so the tool stays usable for evaluation and demos.
What does it mean if a domain shows "Uncategorized"?
It means Microsoft's web categorization service doesn't currently have a category on file for that domain — this is common for newly registered, low-traffic, or very niche domains. An uncategorized domain isn't necessarily unsafe; it just hasn't been classified yet, which is worth knowing before you write a filtering policy that assumes every domain has a category.
Do I need a Global Secure Access license to use Category Checker?
No — anyone can use the tool. Whether you see real Microsoft data or sample data depends on whether the person running this deployment has configured Microsoft Graph credentials tied to a tenant with Global Secure Access web content filtering enabled.
Is Category Checker free to use?
Yes. Category Checker is a free tool from the MSNugget family, with no account or sign-up required.
Do you store the domains I check?
No lookup history is sent to a server or stored in a database. Recent lookups are kept only in your browser's local storage so you can quickly re-check a domain.
Will FortiGuard, Cisco Umbrella, Zscaler, or Netskope be added?
Possibly — the provider architecture already supports it. They're not wired up today because each requires either a paid API subscription we don't have, or would mean scraping a vendor's bot-protected public lookup page, which isn't something we're willing to build. See the About page for details.
How do I add a real provider integration?
Every provider implements the same CategoryProvider interface. Implement checkCategory with an authenticated API call, register any secrets as Cloudflare Worker secrets, and register the provider in the registry — no UI changes are required. src/lib/providers/microsoft-gsa.ts is a working example.
Is Category Checker affiliated with Microsoft?
No. Category Checker is an independent MSNugget tool. It is not affiliated with, endorsed by, or sponsored by Microsoft or any other provider it queries.