1,930 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid Open Graph + Twitter Card metadata freshness + reachability probe (cycle 112) — fetches URL, extracts og:* + twitter:* meta tags, HEAD-probes each og:image / og:image:secure_url / twitter:image, returns per-image st...
Paid readability + per-paragraph reading-time estimator (cycle 110) — fetches URL, extracts paragraph-level text, then computes 6 readability formulas (Flesch, Flesch-Kincaid, Gunning Fog, SMOG, Coleman-Liau, ARI) + tota...
Paid JavaScript syntax-validity probe (cycle 114) — fetches the page HTML, extracts every inline <script> block + every external <script src=> (parallel fetch with 8s timeout + 500KB cap per script, max 20 externals), fo...
Paid CDN / edge-provider detection from response headers (cycle 116) — fetches target URL, inspects 25+ CDN-specific response headers (CF-Ray/CF-Cache-Status/CF-Request-Id + X-Amz-Cf-Id/X-Amz-Cf-Pop + X-Vercel-Id/X-Verce...
Paid DNS nameserver vendor fingerprint (cycle 116) — queries NS records via Cloudflare DoH, classifies each NS hostname against a 28-provider heuristic table (Cloudflare/AWS-Route53/Google-Cloud-DNS/NS1/Azure/Akamai-Edge...
Paid cookie name-prefix (__Secure-/__Host-) policy audit (cycle 115) — fetches page Set-Cookie headers, for each cookie: extracts Secure/Path/Domain/HttpOnly/SameSite attributes, flags __Secure- prefix and checks Secure...
Paid WebAuthn / Passkey policy audit (cycle 117) — non-authenticated scan of a sites passkey posture: (a) detects 13 vendor SDKs in HTML (SimpleWebAuthn/Corbado/Hanko/Stytch/Clerk/WorkOS/Auth0/Okta/Descope/Keycloak/Bitwa...
Paid AI training / retrieval crawler policy audit (cycle 117) — fetches /robots.txt + /llms.txt + /llms-full.txt + /meta-robots + probes 3 ai.txt paths (/.well-known/ai.txt + /.well-known/ai-crawler-policy + /ai.txt), cl...
Paid Web Vitals INP (Interaction-to-Next-Paint) heuristic estimate (cycle 118) — static-analysis proxy for INP p75 without a real browser: counts addEventListener + onclick/oninput/onkeydown/onsubmit handlers in inline +...
Paid x402 price-per-call optimizer (cycle 119, x402 $0.001) - fetches a target seller /s /.well-known/x402 catalog (or accepts raw catalog as POST body), extracts price-per-call from atomic-string or decimal forms, compu...
Paid single-endpoint quality benchmark (cycle 121, x402 $0.001) - given a target x402 endpoint URL, fetches the 402 envelope (without payment), parses out the description+price+network+asset, scores 9 metadata quality di...
Paid x402 marketplace trend scanner (cycle 120, x402 $0.001) - fetches a target /s /.well-known/x402 catalog (GET) or accepts raw catalog as POST body; computes per-asset + per-network + per-facilitator + per-scheme dist...
Paid SPF (RFC 7208) policy forensic analyzer (cycle 125, x402 $0.001) - parses every mechanism (+/-/~/? qualifiers) and modifier (redirect/exp), counts total_lookups (a=1, mx=1, ptr=5, exists=1, include=recursive) vs RFC...
Paid web typography + font-loading audit (cycle 127, x402 $0.001) - fetches target HTML, extracts font-family from body + h1-h6 via inline style= attributes, parses inline <style> blocks for @font-face rules + font-displ...
Paid BGP route-leak + prefix-hijack exposure probe (cycle 126, x402 $0.001) - resolves target host via Cloudflare DoH, queries RIPEstat prefix-overview for each IP, classifies announcing ASNs + holders, computes consensu...
Paid MTA-STS (RFC 8461) + TLSRPT (RFC 8460) policy audit (cycle 125, x402 $0.001) - probes _mta-sts.<domain> TXT (v=STSv1 + id) + smtp._mta-sts.<domain> HTTPS policy file (mode: enforce|testing|none + mx: + max_age: + id...
Paid dev-portal / VCS-dotfile / debug-surface exposure probe (cycle 127, x402 $0.001) - probes 39 conventional dev/debug/VCS-leak paths (/swagger-ui.html + /graphiql + /actuator + /.git/HEAD + /.env + /server-status + /p...
Paid live SMTP STARTTLS opportunistic-TLS probe (cycle 128, x402 $0.001) - resolves MX hosts via Cloudflare DoH, opens TCP to each on ports 25 + 587, reads SMTP banner, sends EHLO and parses capability list (STARTTLS/SIZ...
Paid seller x402 catalog bloat + consolidation scoring (cycle 121, x402 $0.001) - fetches a target /s /.well-known/x402 catalog (GET) or accepts raw catalog as POST body; computes thin-descriptions count (<60 chars), ver...
Paid OCSP stapling live responder-reachability probe (cycle 128, x402 $0.001) - opens TLS to target host, fetches leaf cert DER via getpeercert(binary_form=True), parses via cryptography.x509 to extract Authority Informa...
Paid internal link graph + PageRank-lite (cycle 132, x402 $0.001) - fetches target URL, extracts all same-domain <a href> anchors, fetches top 5 by anchor-text-length, builds an in-memory graph (nodes/edges), runs 20-ite...
Paid cookie partition consistency audit (cycle 130, x402 $0.001) - probes 6 conventional paths (apex/login/signup/api/cart/account), parses Set-Cookie from each, groups by cookie name across responses, flags inconsistenc...
Paid CDN cache-key probe via 4-variant request burst (cycle 134, x402 $0.001) - fetches target 4x with different dimensions (baseline, ?cb=12345, Accept-Language: fr, Accept-Encoding: identity), captures X-Cache/CF-Cache...
Paid HTTPS RR (RFC 9460 SVCB/HTTPS) resolver (cycle 132, x402 $0.001) - queries apex HTTPS record via Cloudflare DoH, parses SVCB wireformat per RFC 9460 §2.2 (SvcPriority + SvcParams), decodes 7 known SvcParamKeys (mand...