Vulnerability data, scanning and audit services. A listing here is not an endorsement of the scanner’s accuracy.
Signed proof of data integrity checks for events, logs and API results. Source authentication of a registered app; freshness checks. Tamper-evident receipts; offline verification with trusted key and original data. No pr...
Smart Contract Audit — Security review of a single contract
Full website audit in one call: accessibility (WCAG 2.1 A/AA via axe-core), on-page SEO, HTTP security headers and page speed / page weight, from a single browser load of one URL. Cheaper than four separate calls; if any...
Lumière PayCheck Business plan, 30 days: 25 agent keys, human review for anomalies, 365-day audit trail with CSV export.
Lumière PayCheck Builder plan, 30 days: 3 scoped agent keys, spend limits, signed receipts, 30-day replayable audit trail.
Smart Contract Audit — Security review of a single contract
Audit short landing-page copy for clarity, outcome, call-to-action, and readable length.
DJZS adversarial logic audit of a prediction-market trade intent. Deterministic verdict (PASS/WAIT/FAIL) with risk score, defect flags, verdict_hash, and on-chain Proof-of-Logic receipt. Out-of-scope requests are refused...
Security audit of a code snippet: static scan for hardcoded secrets (AWS, API and private keys, DB passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1), bare except and unverified...
Full passive security report for a public domain, the same report site owners buy at forgemesh.io/site-check: 23 checks across email authentication (SPF, DKIM, DMARC, MX), HTTPS (old TLS refused, TLS 1.3, certificate, HT...
Independent multi-agent security audit (OWASP ASI01-ASI10 coverage) of a counterparty agent or MCP server before you grant it tool access or spend authority. Findings are Merkle-committed and the audit report is signed....
Full site quality audit across SEO (titles, descriptions, canonical, Open Graph, JSON-LD…), accessibility (alt text, form labels, heading order, landmarks…) and security headers (HSTS, CSP, XCTO…) — scored 0-100 per sect...
SEO and AEO website audit. Returns an audit ID and status URL while processing, then a report URL when completed. Check status approximately every 30 seconds.
Composed wallet threat brief. Fans out to wallet_risk, wallet_anomaly, privacy_mixer_risk, budget_guardian, and wallet_persona and returns a 2-3 sentence security verdict + band (clean / watch / elevated / critical). Rep...
The deeper tier: everything in the standard audit plus the attack surface from Certificate Transparency logs (subdomains), the detected tech stack, and domain registration, in a longer graded report with a fuller remedia...
Full AI search visibility audit — AEO/GEO/SEO 4-layer strategy, AI inclusion check, schema gaps, llms.txt review, P1/P2/P3 roadmap. 2.50 USDC.
Hand over a domain and get one graded security & email-deliverability audit: SPF, DMARC, DKIM and MX (why your mail lands in spam), the web security headers, and the TLS certificate - every finding from a live probe, wit...
CVE vulnerability lookup. Returns security vulnerability records by CVE id or keyword from the NIST National Vulnerability Database and GitHub Security Advisories, each with CVSS score, severity, CWE weakness class, affe...
Email deliverability & domain security check — validates SPF, DKIM (multi-selector), and DMARC, detects spoofing and misconfigurations, and returns an A–F email security grade with transparent deductions. Anti-spam / ant...
Static security scan of a code snippet. Finds hardcoded secrets (AWS keys, private keys, API keys, DB connection strings with passwords), eval/exec, command injection, HTTP calls with no timeout, weak hashes (md5/sha1),...
pcmarts/open-release-demo-next v1.1.0 — release. open release demo example Security scan passed; signed download, 5-minute URL.
Audited AMERICAS exchange holiday calendars (9 venues): trading weeks, full-day closures, audit horizons, operator sources, provenance manifest.
WCAG 2.1 accessibility audit of a URL. Checks color contrast, alt text, form labels, ARIA roles, heading hierarchy, link text, language. Mostly deterministic.
Per-country conflict / instability signal from GDELT (?country=)