Vulnerability data, scanning and audit services. A listing here is not an endorsement of the scanner’s accuracy.
Polygon PoS: Full smart-contract security scan of an ERC-20 token: honeypot, buy/sell/transfer tax, mintable, proxy, hidden owner, self-destruct, pausable, blacklist/whitelist, tax-modifiable, owner and creator share, cr...
BNB Smart Chain: Full smart-contract security scan of an ERC-20 token: honeypot, buy/sell/transfer tax, mintable, proxy, hidden owner, self-destruct, pausable, blacklist/whitelist, tax-modifiable, owner and creator share...
Resolve ONE DNS record type for a domain -- the cheapest, narrowest domain-check endpoint. For all record types at once, use /domain/intelligence. For a bundled DNS+TLS+headers audit, use /web/audit (raw) or /security/po...
LP (liquidity pool) lock/burn audit reusing the same GoPlus data as token-risk - checks whether liquidity is locked, burned, or freely held by a single wallet, a rug-pull signal token-risk does not cover. No qualitative...
Security audit for an EVM token: rug-pull, honeypot, and trading risk signals.
Website security headers audit: HTTPS, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and cookie flags, with a score.
Know Your Merchant (KYM) trust score: pass a merchant domain and get a deterministic 0-100 trust score with a band (high/medium/low/very_low/avoid) and human-readable reasons. Live signals: domain age from the RDAP regis...
Check Python packages from PyPI before you pip install or bump versions. Send {"packages":["requests==2.25.0","flask>=2.0"]} or {"requirements":"<requirements.txt text>"}, up to 50 packages. Per package: latest release a...
Validate and normalize a JSON audit-event export before reconciliation. Check up to 100 supplied metadata events for duplicate IDs, malformed timestamps and invalid digests. Returns normalized events and an integrity rec...
TLS certificate of a domain: whether it is valid, issuer, subject, valid-from and expiry dates, days left, all SAN hostnames, TLS version and cipher. Use for uptime/expiry monitoring or security checks.
Fetch URL and return all HTTP response headers plus security audit (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy). Returns security_score 0-100 and missing headers list. Built f...
Screen one address against sanctions and scam blocklists — Genesis402 / UnyKorn Operator Network
Check dependencies before your coding agent installs them: up to 20 packages per call (npm, PyPI, crates.io, Go, Maven, NuGet, RubyGems), one decision each: ALLOW, CAUTION or BLOCK with reasons. Catches hallucinated pack...
CVE and package vulnerability check (OSV, CISA KEV) for npm, PyPI, Maven, Go, crates.io, NuGet, RubyGems: severity, CVSS, fixed versions, exploited status, safe upgrade. Typical call $0.005: $0.005 per package or CVE, mi...
Recent normalized changes (breaking, deprecation, security, release) for one tracked API/SDK or all of them.
Phishing URL and fake-website check for Africa: compares a link or domain with the official domains of about 130 tax authorities (SARS, KRA, FIRS, GRA), central banks, government services, banks, mobile money (M-Pesa, MT...
Single-CVE priority verdict from today's AIS ranked set (score, rank, factors) — or unlock every CVE route with an AIS CVE key ($19/30d): https://aislabs.ai/gateway/
One call, whole outside view of a domain: DNS records, email authentication grade (SPF, DMARC, MTA-STS), TLS certificate expiry and chain, post-quantum key exchange (X25519MLKEM768), HTTPS security headers, and a to-do l...
Up to 10 public hostnames in one call: post-quantum TLS (X25519MLKEM768), certificate expiry, chain validity and what to fix.
Inspect a Base address at a finalized block: bytecode fingerprint, EIP-1967 storage candidates, reported owner and ERC-165 interfaces. Returns raw evidence and unknowns; no security score or safety guarantee.
Use when: is this link a phishing or scam site? Check a URL for phishing/scam signals: MetaMask eth-phishing-detect + Phishing.Database blocklists, RDAP domain age, punycode and brand-lookalike detection, HTTPS reachabil...
Details of a CVE vulnerability (e.g. CVE-2021-44228) from the official CVE Program (MITRE CVE Services): title, description, severity and CVSS vectors, affected products and versions and references, with MITRE's required...
Validate a Spanish Social Security affiliation number (12 digits: province, number, control) and return the province of registration. Computed locally; nothing stored.
Invisible bot protection. Score form submissions 0-100 based on behavioral signals. No CAPTCHAs.