1,930 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid rate-limit policy inference + adaptive burst probe — parses RFC 9239 RateLimit-* + X-RateLimit-* + X-Rate-Limit-* + Retry-After + vendor-specific headers (GitHub/Shopify/Anthropic/OpenAI) + optional N-request burst...
Paid JavaScript sourcemap exposure audit — fetches every external <script src> + probes inline-script //# sourceMappingURL= references + tries each .map URL via HEAD to surface public source-leak risk, sourcemaps_referen...
Paid DNSSEC chain-of-trust audit via x402
Paid AI/LLM crawl-policy synthesis (x402 $0.001) - GET ?domain=<DOMAIN> reads robots.txt, llms.txt, agents.txt and ai.txt, resolves policy for 40+ AI-bot User-Agents, and returns allow/block counts plus an A-F llm_crawl_...
Paid Certificate Transparency log auditor (cycle 85, x402 $0.001) - GET ?domain=<DOMAIN> queries crt.sh for issued certificates and reports issuer distribution, certificate records, first/last-seen timestamps and an A-F...
Paid structural-diff between two URL snapshots — fetches both with 10s timeout, extracts 17 comparable dimensions (title/description/canonical/OG title/desc/image/h1-count/heading-count/image-count/link-count/word-count/...
Paid auth-method discovery — WWW-Authenticate header + RFC 8414 oauth-authorization-server + OpenID Connect discovery + JWKS + RFC 8705 oauth-protected-resource + login-form introspection, surfaces bearer/basic/oauth2/oi...
Paid page-archaeology — detects parked domains, thin content, stale copyright (>5y), auto-generated patterns, missing author bylines; returns is_parked + is_thin + is_stale + classification (human_curated/auto_generated/...
Paid JavaScript framework + build-tool fingerprint — 11 detection surfaces (generator meta + data-* attrs + __NEXT_DATA__/__NUXT__/__remixContext + SPA root mount points + build-output paths /_next/_nuxt/_astro/build + J...
Paid CDN edge-coverage audit — 5 anycast probe points (Cloudflare/Google/Quad9/OpenDNS/CIRA), per-tenant reachability + edge diversity + PoP region detection + cdn_coverage_score A-F grade via x402
Paid CAPTCHA + bot-management vendor detection (cycle 94) — page-level fingerprint of 11 vendors (reCAPTCHA v2/v3/enterprise + hCaptcha + Cloudflare Turnstile + Cloudflare challenge page + Arkose Labs + GeeTest + DataDom...
Paid DNT/GPC policy probe (cycle 96) — fetches target URL 3x (baseline, with DNT:1, with Sec-GPC:1); compares Set-Cookie count + body size to detect server-side honoring of privacy signals; probes 5 common privacy-policy...
Paid agent cost calculator — detects auth scheme (Bearer/ApiKey/session_cookie/none) + rate-limit headers + CORS policy + cache max-age + compression + paid-API indicators (Stripe/Gumroad/pricing/checkout); returns estim...
Paid OpenAPI/Swagger/AsyncAPI/GraphQL/Postman/JSON-Schema spec format + version detector (cycle 98) — probes 9 conventional spec paths (/openapi.json + /openapi.yaml + /swagger.json + /swagger.yaml + /.well-known/openapi...
Paid Client Hints + Permissions-Policy probe (cycle 97) — captures Accept-CH (RFC 7231 §5.3.7) + Critical-CH (RFC 9981) request lines for Server Hints, parses Permissions-Policy header for feature gating intent; per-hint...
Paid subdomain-takeover risk audit (cycle 100) — discovers subdomains via HackerTarget hostsearch, resolves CNAME chain (max 8 hops) via Cloudflare DoH, fingerprints 30+ known-vulnerable service providers (AWS S3, CloudF...
Paid multi-formula readability analysis — 5 formulas (Flesch Reading Ease + Flesch-Kincaid Grade + Gunning Fog + Coleman-Liau + SMOG) computed from extracted main-content text, returns main_text_preview + word/sentence/s...
Paid SVCB/HTTPSSVC (RFC 9460+9461) deep parser (cycle 170, x402 $0.001) - probes 11 conventional _<port>._<proto>.<domain> SVCB endpoints (_443._tcp + _443._tcp.www + _443._tcp.api + _80._tcp + _25._tcp + _587._tcp + _85...
Paid MTA-STS (RFC 8461) policy+record cross-validator (cycle 174, x402 $0.001) - accepts ?domain=<DOMAIN>; actively probes _mta-sts.<domain> TXT (RFC 8461 SS3.1) via DoH + https://mta-sts.<domain>/.well-known/mta-sts.txt...
Paid JWKS (RFC 7517 + RFC 8414) JWK Set inspector (cycle 173, x402 $0.001) - accepts ?jwks_url=<URL> OR ?jwks=<JWK_SET_JSON> OR ?url=<PAGE> (auto-discovers jwks_uri via /.well-known/openid-configuration + /.well-known/oa...
Paid RPKI Route Origin Validation (ROV) auditor per RFC 6811 (cycle 172, x402 $0.001) - accepts ?prefix=<CIDR> [auto-resolves announcing ASN via RIPEstat prefix-overview] OR ?prefix=<CIDR>&asn=ASxxxx OR ?asn=ASxxxx; call...
Paid x402 seller leaderboard / ranking auditor (cycle 173, x402 $0.001) - accepts ?url=<X402_CATALOG_URL> (defaults to our /.well-known/x402) + ?top=<N> (default 25, max 100); clusters all payable endpoints by payTo, com...
Paid DNS SRV (RFC 2782) record mapper + service-discovery auditor (cycle 174, x402 $0.001) - accepts ?domain=<DOMAIN> + ?service=<SVC> + ?proto=<tcp|udp|tls> OR shorthand ?q=<SVC>.<PROTO>.<DOMAIN>; actively probes Cloudf...
Paid META-API cost projector for THIS service (cycle 98) — given calls_per_day + route list (or "all") + period (daily|weekly|monthly), pulls the live x402 price catalog and projects aggregate_daily_cost_usd + aggregate_...