Vulnerability data, scanning and audit services. A listing here is not an endorsement of the scanner’s accuracy.
NPM package info API: package registry lookup for npm, PyPI and Cargo with latest version, age, license, deprecation, weekly downloads and OSV vulnerabilities. Dependency check before install.
AI readiness website audit API. Is this website ready for AI agents? Score 0-100, grade A-F and verdict with category scores (agent access, readable content, discovery, agent interfaces, speed/HTTPS), the top 5 prioritiz...
BTC Volatility Risk Premium — DVOL minus Parkinson realized vol (72h). Positive = sell-vol opportunity, negative = buy-vol. Response includes regime classification (LOW/MID/HIGH), raw inputs for audit (DVOL, RV_72h, RV_6...
npm package info, package risk. Reports package existence, latest version and release, age, version count, npm weekly downloads, licenses, deprecation and known advisory severity. ok means no listed flags, not a safety g...
Package vulnerability lookup API. Is this package version safe to install? Known vulnerabilities (CVE/GHSA ids, severity, CVSS score, fixed-in versions) and malicious-package flags for one npm, PyPI, Go, crates.io, Packa...
Inspect the TLS certificate of any public host: subject, issuer, validity window, days remaining, SANs, and SHA-256 fingerprint.
RFC 8785 key-sorted JSON canonicalization + SHA-256 hash + Merkle leaf + HMAC-SHA256 audit signature
Security headers check for a public website: HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookie flags, HTTP to HTTPS redirect, TLS version and certificate expiry. Returns a gr...
MAC/OUI vendor lookup via api.macvendors.com (keyless). Input MAC or OUI → vendor + normalized OUI.
Vulnerabilities being actively exploited according to CISA's KEV catalog: CVE, vendor, product, name, description, date added, remediation due date and ransomware use; the latest N days or search by vendor/product (Micro...
TLS certificate of a domain: issuer, validity dates, days until expiry, names covered (SAN), whether it matches the domain and is trusted, TLS version and cipher. For uptime and security monitoring.
Check up to 50 CVE IDs against CISA's Known Exploited Vulnerabilities (KEV) catalog. Returns membership, vendor/product, exploitation evidence, ransomware-use status and remediation guidance from CC0 data. Not listed doe...
Estimate password strength with Dropbox's zxcvbn: score 0-4, estimated guesses and crack time for online and offline attacks, weak patterns found (dictionary, dates, sequences...) and tips. Evaluated in memory, never sto...
Technical inspection of a URL: status, redirects, time to first byte and total time, bytes, compression, content type, cache policy, server, CDN, cookies set, security headers present and all response headers.
Officers and roles of a Norwegian company from the official Bronnoysund Register Centre (Enhetsregisteret), by organisation number. Lists every registered role: CEO (daglig leder), board chair, members, deputies, employe...
Deterministic pre-purchase readiness and payment-metadata audit for public agent endpoints
Website audit. Full website audit of one URL from a single load in a real browser: WCAG 2.1 A/AA accessibility violations with axe-core (rule, impact, elements, fix link), page speed (first byte, FCP, LCP, layout shift)...
Loyalty rewards: Preview a gift certificate by LOYAL-XXXXXX code without claiming (face value, expiry, program). Onchain loyalty on Base: brands launch rewards in minutes, customers earn with every purchase, AI agents au...
Change audit: BOSH Ops File: Audit JSON changes and validate before/after for BOSH Ops File. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and int...
Loyalty rewards: List gift certificates issued by the authenticated merchant with optional status filter. Onchain loyalty on Base: brands launch rewards in minutes, customers earn with every purchase, AI agents automate...
Change audit: project.json: Audit JSON changes and validate before/after for project.json. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and intro...
Change audit: .cryproj (generic): Audit JSON changes and validate before/after for .cryproj (generic). Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed pat...
Change audit: lgtm.yml: Audit JSON changes and validate before/after for lgtm.yml. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introduced/re...
Change audit: docker bake: Audit JSON changes and validate before/after for docker bake. Uses a pinned SchemaStore definition on this PC. Reports JSON pointers and rule violations, added/removed/changed paths and introdu...