Vulnerability data, scanning and audit services. A listing here is not an endorsement of the scanner’s accuracy.
Audit a real request against the OpenAPI document it should satisfy. Matches the operation the way a router would, checks every path, query and header parameter against its declared schema, validates the body against the...
Audit a real response against what the OpenAPI document promises for that operation. Resolves the declared status exactly, by range such as 2XX, or through default, checks declared response headers are present, and valid...
Use when you need a domain lookup, whois, dns records or certificate transparency data for osint, security or due diligence. Do not use for historical whois, registrant personal data (redacted by registries) or port and...
Inspect SSL/TLS certificate for any domain. Returns valid boolean, days_remaining, issuer, valid_from, valid_to, subject_alt_names (SANs), fingerprint_sha256, and protocol version. Default port 443. Use for certificate e...
SSL/TLS certificate check: expiry, issuer, SANs, chain validity, hostname match, negotiated protocol/cipher, and weak-algo warnings for a public HTTPS host. Clean JSON.
ICS threat actors by sector. Pass ?sector=energy. Returns all groups targeting that sector from live MITRE ATT&CK ICS STIX data. Covers energy, water, manufacturing, oil-and-gas, chemical, transportation, nuclear.
Audit your own delimited data against a contract you declare, and get one pass/fail plus the exact row and clause of every breach. Checks types, required values, enums, numeric bounds, lengths, patterns, uniqueness, comp...
Audit telemetry attributes against a contract, and against the thing a schema cannot see: cardinality. Reports missing required attributes, undeclared attributes, an attribute appearing as two types across the batch, and...
For a URL and a technology, passively detects the tech and its version (headers, meta generator, script URLs - read-only, no probing), looks that version up in public CVE databases (OSV/NVD), and reports known CVEs plus...
PageAudit: technical SEO audit of one page (score, issues, headers, JSON-LD), paid per call
Is this vendor or domain safe? One call runs cert, DNS, email security, ransomware leak-site listing and vendor status checks and returns a verdict (safe, caution, risk, incomplete). $0.04 USDC on Base. Not charged if ev...
Live scored geopolitical threat feed: name, category, severity, coordinates, and source URL for every active tracked threat.
Check an exact npm or PyPI package version immediately before installation using current registry, vulnerability, malicious-package, withdrawal/deprecation, and verified provenance evidence. Returns ALLOW, REVIEW, BLOCK,...
Partnership pipeline — Record quality audit + Equal-width histogram: Record quality audit + Equal-width histogram for supplied partnership pipeline records (qualified_partners, active_partners). Up to 200 rows; 2 indepen...
Compare a fixed list of ten security-relevant response headers across two releases and name the specific reverts. Reports a header removed, added or changed, and separately a reduced Strict-Transport-Security max-age, dr...
IOC feed from Telegram CTI channels. Filters: ip (exact lookup), type(ip|domain|url|md5|sha1|sha256|cve), severity, min_confidence, since, tlp, tag, channel, limit, offset. Returns items[] with iocs[], ttps[], confidence...
Evaluate supplied absorption observations under a declared band-gap model with fit-window sensitivity. No universal band-gap or integrated-device performance claim.
CISA KEV + NVD CVE check: is this software+version actively exploited?
INSTANT DELIVERY — field-tested passive audit method for agent-marketplace auth: curl-level recipes (OAuth discovery sweep, token TTL probing, refresh-rotation testing, DPoP proof
Packaging usage — Record quality audit + Trailing mean series: Record quality audit + Trailing mean series for supplied packaging usage records (packages_sent, material_grams). Up to 200 rows; 2 independent reports using...
Bitcoin chain-tip orphan + valid-fork stream (10min cadence). For exchange confirmation-policy tuning, cross-chain bridge safety windows, finality auditors. branch_length >= 2 = unusual reorg risk.
Check a public website's security hygiene before your agent links to it, recommends it, or sends data to it. One URL in, deterministic JSON out: HTTPS and redirect chain, HSTS, CSP, X-Frame-Options, X-Content-Type-Option...
Screen a person or company name against OFAC SDN, EU consolidated, and UK sanctions lists. Returns matches with details and an audit receipt.
SKILL.md Review: Safe and Within the Limits — Reviews a SKILL.md file before you install, buy or publish it and lists every problem with a fixed code, the place and a fix, then gives one verdict. It checks the front matt...