Free Tool

Free Firewall Rule Scanner

Paste your firewall rules and get instant analysis. Detect shadow rules, redundant policies, overlaps, and compliance issues in seconds.

or paste directly
Max 500 rules

Your rules are analyzed in memory only. We never store your configuration data.

Don't have rules handy?

Comprehensive Rule Analysis

Shadow Rules

Find rules that never match traffic because earlier rules already handle it.

Redundant Rules

Identify duplicate or near-identical rules that can be consolidated.

Overlapping Rules

Detect rules with overlapping criteria that may cause unexpected behavior.

Conflicting Rules

Find rules with matching criteria but different actions (allow vs deny).

Multi-Vendor

Supports Palo Alto, Fortinet, Check Point, Cisco ASA, and OPNsense.

Privacy First

Rules are analyzed in memory only. We never store your configuration data.

Need More Than a Free Scan?

FwChange provides continuous firewall monitoring, change management, compliance reporting, and JIRA integration.