Knowledge base · TOPIC-20

What a browser AI network scanner cannot measure

Short answer: browser security boundaries limit raw DNS, route/interface, native-process, certificate, and cross-origin observations. A browser result can be useful without being complete.

Cross-origin controls can prevent JavaScript from reading a response even when the network reached the destination. The Scanner therefore distinguishes challenge and incomplete from unavailable; it does not ask for credentials or turn missing evidence into a definitive failure.

Tivor Open Probe Public Beta adds a local, open-source, read-only evidence path. V0.1 supports local context plus governed OpenAI DNS, TCP, certificate-validated TLS, anonymous HTTPS, and repeated short-window sampling. For Claude it supports governed DNS, TCP, and TLS only. It does not measure WebSocket, SSE, long-lived connections, proxy/PAC inheritance, IPv4-versus-IPv6 paths, HTTP versions, QUIC, or provider-wide root cause.

Use the browser Scanner for a quick no-install view. Use Open Probe when browser evidence is insufficient and you can run a local CLI. Neither product repairs the network, changes routes, silently uploads results, or computes a commercial reliability score. Related: browser works but the AI agent fails.