1,930 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid per-image alt-text quality audit — per-img verdicts (missing/decorative/present), length scoring (3-125 chars ideal), 'image of X' redundant-prefix detection, keyword-stuffing detection (>3 comma phrases), ALL-CAPS...
Paid cookie banner UX + dark-pattern audit — 19-CMP fingerprint + Accept/Reject parity + Manage-preferences link + pre-ticked toggles + cookie-wall + Reject click-depth + CCPA Do-Not-Sell + granular categories, cookie_ba...
Paid page weight audit — HTML+CSS+JS+image+font byte breakdown (compressed + uncompressed) + per-category bytes + third-party resource ratio + render-blocking resource count + HTTP/2/3 ALPN detection + transfer-vs-uncomp...
Paid mobile/responsive viewport meta audit — viewport tag (width=device-width,user-scalable), apple-mobile-web-app-capable, theme-color, format-detection, apple-touch-icon + manifest.json detection, touch-icon coverage,...
Paid comprehensive DNS audit — parallel A/AAAA/MX/NS/TXT/CAA/SOA/DS queries via Cloudflare DoH, email-auth rollup (SPF/DKIM/DMARC + bulk-sender Gmail/Yahoo compliance), nameserver diversity, CAA policies, DNSSEC DS hint,...
Paid main-content markdown extractor for RAG ingestion — strips noise (script/style/nav/aside/header/footer/ads/comments), picks <main>/<article>/content div, converts headings/paragraphs/lists/code/links/images/tables t...
Paid subdomain enumeration via HackerTarget hostsearch + urlscan fallback — discovered subdomains with IP + total count + dedup + top-subdomain-prefix frequency + takeover-risk heuristics (disposable-cloud/known-vulnerab...
Paid OpenAPI 3.x / Swagger spec diff — accepts two URLs (url_a + url_b) or two inline payloads (spec_a + spec_b) as JSON or YAML, reports breaking changes (removed paths, removed operations, type/format changes, enum nar...
Paid WAF/IDS/CDN-edge fingerprint detector — 28-vendor catalog (Cloudflare/Fastly/Akamai/Imperva/Sucuri/CloudFront/ALB/Azure-FrontDoor/Vercel/Netlify/StackPath/KeyCDN/BunnyCDN/F5-BIGIP/Barracuda/Citrix-NetScaler/ModSecur...
Paid per-cookie security-flags deep audit — parses every Set-Cookie individually for SameSite (Strict/Lax/None/missing/Lax-by-default-heuristic) + Secure + HttpOnly + Path + Domain (broad-domain detection) + Max-Age + Ex...
Paid CORS policy audit — baseline GET captures all Access-Control-* response headers (ACAO/ACAC/ACAM/ACEH/ACMA/ACRPN/ACEP/ACEN), dangerous-combo detection (ACAO=* + ACAC=true, ACAO='null', attacker-origin echo), prefligh...
Paid JavaScript sourcemap exposure audit — fetches every external <script src> + probes inline-script //# sourceMappingURL= references + tries each .map URL via HEAD to surface public source-leak risk, sourcemaps_referen...
Paid JavaScript tracker/network fingerprint classifier — scans inline+external+meta+noscript for ~100 analytics/ad-pixel/session-replay/chat/heatmap/a-b-test/social-pixel/consent/tag-manager signatures across 10 categori...
Paid CDN-edge fingerprint detector — 24-vendor catalog (Cloudflare/CloudFront/Fastly/Akamai/Vercel/Netlify/Google Cloud CDN/Azure Front Door/StackPath/BunnyCDN/KeyCDN/Cloudflare Workers/F5/WordPress VIP/Rackspace/Edgecas...
Paid structural-diff between two URL snapshots — fetches both with 10s timeout, extracts 17 comparable dimensions (title/description/canonical/OG title/desc/image/h1-count/heading-count/image-count/link-count/word-count/...
Paid DNSSEC chain-of-trust audit via x402
Paid Certificate Transparency log auditor (cycle 85, x402 $0.001) - GET ?domain=<DOMAIN> queries crt.sh for issued certificates and reports issuer distribution, certificate records, first/last-seen timestamps and an A-F...
Paid rate-limit policy inference + adaptive burst probe — parses RFC 9239 RateLimit-* + X-RateLimit-* + X-Rate-Limit-* + Retry-After + vendor-specific headers (GitHub/Shopify/Anthropic/OpenAI) + optional N-request burst...
Paid AI/LLM crawl-policy synthesis (x402 $0.001) - GET ?domain=<DOMAIN> reads robots.txt, llms.txt, agents.txt and ai.txt, resolves policy for 40+ AI-bot User-Agents, and returns allow/block counts plus an A-F llm_crawl_...
Paid auth-method discovery — WWW-Authenticate header + RFC 8414 oauth-authorization-server + OpenID Connect discovery + JWKS + RFC 8705 oauth-protected-resource + login-form introspection, surfaces bearer/basic/oauth2/oi...
Paid JavaScript framework + build-tool fingerprint — 11 detection surfaces (generator meta + data-* attrs + __NEXT_DATA__/__NUXT__/__remixContext + SPA root mount points + build-output paths /_next/_nuxt/_astro/build + J...
Paid agent cost calculator — detects auth scheme (Bearer/ApiKey/session_cookie/none) + rate-limit headers + CORS policy + cache max-age + compression + paid-API indicators (Stripe/Gumroad/pricing/checkout); returns estim...
Paid page-archaeology — detects parked domains, thin content, stale copyright (>5y), auto-generated patterns, missing author bylines; returns is_parked + is_thin + is_stale + classification (human_curated/auto_generated/...
Paid CAPTCHA + bot-management vendor detection (cycle 94) — page-level fingerprint of 11 vendors (reCAPTCHA v2/v3/enterprise + hCaptcha + Cloudflare Turnstile + Cloudflare challenge page + Arkose Labs + GeeTest + DataDom...