Category Checker
Check how websites are categorized across security and web filtering platforms.
One search, five verdicts.
Category Checker queries Microsoft Global Secure Access, FortiGuard, Cisco Umbrella, Zscaler, and Netskope for how they categorize a domain — side by side, so you can spot mismatches before they turn into a broken access policy or a support ticket.
Check every provider at once
One domain, five providers, checked in parallel. No more logging into five different consoles to confirm a categorization decision.
Built for Global Secure Access rollouts
Purpose-built for admins validating category-based access policies before they go live — catch mismatches between providers before users do.
Also included
- Deep-linkable results — share a checked domain via URL
- Recent lookups remembered locally, never sent anywhere
- Provider-based architecture, ready for real API integrations
- Dark and light themes, system-aware by default
Supported providers
Every provider below is currently mocked with sample data. The provider abstraction is built so a real API integration is a one-file change — see ARCHITECTURE.md.
Microsoft Global Secure Access
Category signal used by Microsoft Entra Internet Access web filtering policies.
FortiGuard
FortiGuard Web Filter's category database, used across Fortinet's security portfolio.
Cisco Umbrella
Cisco Umbrella's DNS-layer category intelligence.
Zscaler
Zscaler's URL categorization used by its Zero Trust Exchange.
Netskope
Netskope's cloud-native web and CASB category classification.
Frequently asked questions
Is Category Checker affiliated with Microsoft, FortiGuard, Cisco, Zscaler, or Netskope?
No. Category Checker is an independent MSNugget tool. It is not affiliated with, endorsed by, or sponsored by any of the providers it queries.
Are the provider results live data?
Not yet. Category Checker currently ships with mock providers that return deterministic sample data, so the interface and provider architecture can be validated before real API integrations are wired in.
Do you store the domains I check?
No lookup history is sent to a server or stored in a database. Recent lookups are kept only in your browser's local storage so you can quickly re-check a domain.
How do I add a real provider integration?
Each provider implements the same CategoryProvider interface. Swap a mock provider's checkCategory function for an authenticated API call and register any secrets as server-only environment variables — no UI changes are required.
Why might providers disagree on a domain's category?
Each vendor maintains its own crawler and classification pipeline, so categories, update frequency, and taxonomy names can differ. That disagreement is exactly what Category Checker is built to surface.