1,930 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid agent cost calculator — detects auth scheme (Bearer/ApiKey/session_cookie/none) + rate-limit headers + CORS policy + cache max-age + compression + paid-API indicators (Stripe/Gumroad/pricing/checkout); returns estim...
Paid multi-formula readability analysis — 5 formulas (Flesch Reading Ease + Flesch-Kincaid Grade + Gunning Fog + Coleman-Liau + SMOG) computed from extracted main-content text, returns main_text_preview + word/sentence/s...
Paid JavaScript framework + build-tool fingerprint — 11 detection surfaces (generator meta + data-* attrs + __NEXT_DATA__/__NUXT__/__remixContext + SPA root mount points + build-output paths /_next/_nuxt/_astro/build + J...
Paid auth-method discovery — WWW-Authenticate header + RFC 8414 oauth-authorization-server + OpenID Connect discovery + JWKS + RFC 8705 oauth-protected-resource + login-form introspection, surfaces bearer/basic/oauth2/oi...
Paid AI/LLM crawl-policy synthesis (x402 $0.001) - GET ?domain=<DOMAIN> reads robots.txt, llms.txt, agents.txt and ai.txt, resolves policy for 40+ AI-bot User-Agents, and returns allow/block counts plus an A-F llm_crawl_...
Paid CDN edge-coverage audit — 5 anycast probe points (Cloudflare/Google/Quad9/OpenDNS/CIRA), per-tenant reachability + edge diversity + PoP region detection + cdn_coverage_score A-F grade via x402
Paid Certificate Transparency log auditor (cycle 85, x402 $0.001) - GET ?domain=<DOMAIN> queries crt.sh for issued certificates and reports issuer distribution, certificate records, first/last-seen timestamps and an A-F...
Paid DNSSEC chain-of-trust audit via x402
Paid JavaScript sourcemap exposure audit — fetches every external <script src> + probes inline-script //# sourceMappingURL= references + tries each .map URL via HEAD to surface public source-leak risk, sourcemaps_referen...
Paid structural-diff between two URL snapshots — fetches both with 10s timeout, extracts 17 comparable dimensions (title/description/canonical/OG title/desc/image/h1-count/heading-count/image-count/link-count/word-count/...
Paid CDN-edge fingerprint detector — 24-vendor catalog (Cloudflare/CloudFront/Fastly/Akamai/Vercel/Netlify/Google Cloud CDN/Azure Front Door/StackPath/BunnyCDN/KeyCDN/Cloudflare Workers/F5/WordPress VIP/Rackspace/Edgecas...
Paid deep TLS handshake probe — TLS version (1.0/1.1/1.2/1.3) + cipher suite classification (aead-strong/strong-fs/weak/legacy-fs) + ALPN negotiation (h2/http1.1) + Alt-Svc h3 HTTP/3 endpoint discovery + key_exchange gro...
Paid CORS policy audit — baseline GET captures all Access-Control-* response headers (ACAO/ACAC/ACAM/ACEH/ACMA/ACRPN/ACEP/ACEN), dangerous-combo detection (ACAO=* + ACAC=true, ACAO='null', attacker-origin echo), prefligh...
Paid per-cookie security-flags deep audit — parses every Set-Cookie individually for SameSite (Strict/Lax/None/missing/Lax-by-default-heuristic) + Secure + HttpOnly + Path + Domain (broad-domain detection) + Max-Age + Ex...
Paid OpenAPI 3.x / Swagger spec diff — accepts two URLs (url_a + url_b) or two inline payloads (spec_a + spec_b) as JSON or YAML, reports breaking changes (removed paths, removed operations, type/format changes, enum nar...
Paid WAF/IDS/CDN-edge fingerprint detector — 28-vendor catalog (Cloudflare/Fastly/Akamai/Imperva/Sucuri/CloudFront/ALB/Azure-FrontDoor/Vercel/Netlify/StackPath/KeyCDN/BunnyCDN/F5-BIGIP/Barracuda/Citrix-NetScaler/ModSecur...
Paid JavaScript tracker/network fingerprint classifier — scans inline+external+meta+noscript for ~100 analytics/ad-pixel/session-replay/chat/heatmap/a-b-test/social-pixel/consent/tag-manager signatures across 10 categori...
Paid comprehensive DNS audit — parallel A/AAAA/MX/NS/TXT/CAA/SOA/DS queries via Cloudflare DoH, email-auth rollup (SPF/DKIM/DMARC + bulk-sender Gmail/Yahoo compliance), nameserver diversity, CAA policies, DNSSEC DS hint,...
Paid Open Graph + Twitter Card spec validator — required OG detection (og:title/type/image/url), recommended (description/site_name/locale/image:width/image:height/image:alt), og:type enum validation (website/article/boo...
Paid main-content markdown extractor for RAG ingestion — strips noise (script/style/nav/aside/header/footer/ads/comments), picks <main>/<article>/content div, converts headings/paragraphs/lists/code/links/images/tables t...
Paid page weight audit — HTML+CSS+JS+image+font byte breakdown (compressed + uncompressed) + per-category bytes + third-party resource ratio + render-blocking resource count + HTTP/2/3 ALPN detection + transfer-vs-uncomp...
Paid subdomain enumeration via HackerTarget hostsearch + urlscan fallback — discovered subdomains with IP + total count + dedup + top-subdomain-prefix frequency + takeover-risk heuristics (disposable-cloud/known-vulnerab...
Paid mobile/responsive viewport meta audit — viewport tag (width=device-width,user-scalable), apple-mobile-web-app-capable, theme-color, format-detection, apple-touch-icon + manifest.json detection, touch-icon coverage,...
Paid server/fingerprint/debug/cache response-header audit — Server + X-Powered-By info-leak detection, framework-version-disclosed (X-AspNet-Version/X-Generator/X-Drupal-Cache), debug-headers-in-prod (X-Debug/X-Runtime),...