Vulnerability data, scanning and audit services. A listing here is not an endorsement of the scanner’s accuracy.
Change audit: ecosystem.json: Audit JSON changes and validate before/after for ecosystem.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and i...
Change audit: debugsettings.json: Audit JSON changes and validate before/after for debugsettings.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed pat...
Change audit: GitHub Action: Audit JSON changes and validate before/after for GitHub Action. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and int...
Change audit: chutzpah.json: Audit JSON changes and validate before/after for chutzpah.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and int...
Change audit: chisel-slices.json: Audit JSON changes and validate before/after for chisel-slices.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed pat...
Change audit: dockerd.json: Audit JSON changes and validate before/after for dockerd.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and intro...
Change audit: sarif-2.0.0.json: Audit JSON changes and validate before/after for sarif-2.0.0.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths a...
Change audit: JSON-e templates: Audit JSON changes and validate before/after for JSON-e templates. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths a...
Change audit: openHAB: Audit JSON changes and validate before/after for openHAB. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/reso...
Full Wazuh custom-rule load audit: every rule that passes wazuh-analysisd -t but is dropped at load, with the fix.
Portfolio risk math API — audit caller-supplied positions, volatilities, and correlation matrix with deterministic exposure and variance evidence.
New vulnerabilities in one place: CISA Known Exploited Vulnerabilities from the last 14 days (due dates, ransomware use), CVEs published in the last 24 hours (CVSS, severity, CWE, vendor/product), and reviewed GitHub adv...
Domain & email audit — SPF, DMARC, DKIM, MX, TLS certificate, HSTS and security headers, scored 0-100
Scan a URL for phishing or malware using heuristic signals (Google Safe Browsing, RDAP domain age, known IOC corpus) plus VirusTotal multi-engine analysis. Returns an async analysis ID to poll. Call before an agent click...
DNS lookup, WHOIS lookup. Domain intelligence in one call: DNS records (A, AAAA, CNAME, MX, NS, TXT, CAA), DNSSEC status, registrar, registration and expiry dates with domain age in days (RDAP/WHOIS), and email authentic...
Security scan of an Android APK build: SHA-256 checksum, VirusTotal malware verdict, signing certificates and permissions, plus findings such as a debuggable build, cleartext traffic, unguarded exported components, a pac...
Signing certificate history of an Android app: which certificate signed which releases and where the signing key changed. A key change means a newer build is not an update of the older one but a different app under the s...
Every Android app signed by one signing certificate: look up a SHA-256 certificate fingerprint to find all packages and publishers that key has signed. Finds repackaged apps and related malware families, since a key that...
Revisión de seguridad de un paquete de ficheros (Python, web, JSON) sin ejecutar nada: importaciones y llamadas prohibidas, escritura, red y credenciales. Un tipo de fichero que el gate no sabe leer se declara como no ve...
Verifica una entrega web (HTML, CSS, JavaScript) sin ejecutarla: 86 reglas de seguridad, sintaxis de JavaScript y recursos externos. Determinista, sin modelo. Lo que NO se pudo comprobar se declara aparte y nunca cuenta...
Audits the JSON-LD structured data on one public web page: P1 for no schema or missing required properties, P2 for a low rich-result score, each with the properties to add. Call it when a page is missing rich results in...
Batch dependency vulnerability check — check ordered exact package versions in OSV with deduplicated CVE enrichment, explicit completeness, and CISA KEV known-exploited signals.
Smart contract security check before you approve or pay an address: reads the bytecode, behind proxies too, for privileged functions (mint, pause, blacklist, upgrade), dangerous opcodes and protocol type, and checks whet...
DNS email security audit — SPF, DMARC, DKIM, BIMI, and MTA-STS check for domain spoofing and deliverability risk. Agent-friendly dns email security screen at micropayment pricing.