Vulnerability data, scanning and audit services. A listing here is not an endorsement of the scanner’s accuracy.
Quick Solidity pre-audit check, $0.90 USDC on Base: send source or a verified contract address + chain; the same automated engine returns the verdict (grade, score, security and owner-trust risk), severity counts, the to...
Scan a website for GDPR compliance indicators: cookie consent, privacy policy, tracking scripts, security headers. Returns score A-F.
Notarize an AI agent decision, audit record, or any payload to Base mainnet. Submit SHA-256 hash + metadata; get a tamper-proof verifiable receipt immediately. Merkle proof and on-chain anchor_tx available free after bat...
Find known vulnerabilities for a package version on npm, PyPI, Maven, Go, Cargo or NuGet, from OSV. Returns CVEs with severity and the version that fixes each.
OT asset risk verdict. Pass ?vendor=siemens&model=s7-1500§or=energy&network=internet-facing. Returns risk_score (0-100), risk_level, escalate (boolean), recommended_action, active CVEs, and threat actors. Optional fi...
Full audit: Semgrep + ESLint + Bandit + npm audit (if packageJson provided).
Neutral third-party notarization of an AI audit result: we did not run the audit, we attest that a specified audit was performed and its findings match what's claimed - the credential a checkpoint can trust without re-ru...
Site audit: Audit one public http or https page: Lighthouse scores, DNS, SPF, DMARC, DKIM selectors, TLS, security headers and subdomains. Verza calls a render worker and does not fetch the page itself. An empty body is...
Security Header Check: Check a site's HTTP response headers against good practice (HSTS, CSP, X-Frame-Options and more) and grade it from A to F.
Notarize an AI agent decision, audit record, or any payload to Base mainnet. Submit SHA-256 hash + metadata; get a tamper-proof verifiable receipt immediately. Merkle proof and on-chain anchor_tx available free after bat...
Active ICS campaign tracker. Pass ?sector=electric&status=active. Returns campaigns currently targeting a sector with actor attribution, start date, targeted geography, TTPs in use, and CVEs being exploited. No free equi...
Quick API health check for agents: send one public API endpoint URL and get a 3-sample spot check for $0.09 USDC on Base: grade A-F, score, production-ready yes/no, median/p95 latency, success rate and the top 3 issues w...
Recurring public "State of OT Threat Intel — GCC" sitrep, human-reviewed before publish, sourced from the same intel.db pipeline as /ot/sitrep. Pass optional issue_date (YYYY-MM-DD) for a past edition; omit for the lates...
Review up to eight role evidence packets for JD/PAQ coverage, comparable scales, duty alignment, wage-basis issues and reuse restrictions. Produces a prioritized review queue, not salary recommendations.
Inspect the certificate returned by a live TLS handshake, including validity, issuer, subject, authorization, and SHA-256 fingerprint.
Returns a full decision journal entry — directional_bias, calibrated_confidence, anomaly_score, and agreement_score — plus a decision_id, combining signal, anomaly, and calibration checks into one auditable record for ag...
Is this domain trustworthy, or is it a phishing site / typosquat / scam? Pull the reputation signals an analyst checks before clicking anything: domain age, cert issuance history, hosting reputation, DNS topology, tech-s...
TLS certificate and handshake grade for a host
Xynaptic Skill — Crypto Token Audit: the complete pre-purchase method to audit a token — contract security, tokenomics, market state, risk metrics, order flow — with a BUY/CAUTION/AVOID decision grid. The skill text is r...
Review a passage for Maha Principle epistemic classifications with a model-backed audit, not factual certification, legal advice, or human verification. Save the job reference and retrieve the completed result; job accep...
Audit a URL's HTTP security headers over a single body-free (HEAD) request. Grades Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy and Permissions-Policy, flag...
One call audits a site: tech stack, TLS certificate, accessibility (WCAG, grade), GDPR cookies and trackers before consent, domain and email security, optional screenshot. Returns a sorted issue list, grades and each sec...
Generate production nginx server blocks with SSL, proxy_pass, WebSocket support, security headers, gzip, rate limiting.
Get corporate tax, VAT, personal income tax, capital gains, and social security rates for 45+ countries.