629 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid JavaScript sourcemap exposure audit — fetches every external <script src> + probes inline-script //# sourceMappingURL= references + tries each .map URL via HEAD to surface public source-leak risk, sourcemaps_referen...
Paid CDN-edge fingerprint detector — 24-vendor catalog (Cloudflare/CloudFront/Fastly/Akamai/Vercel/Netlify/Google Cloud CDN/Azure Front Door/StackPath/BunnyCDN/KeyCDN/Cloudflare Workers/F5/WordPress VIP/Rackspace/Edgecas...
Paid deep TLS handshake probe — TLS version (1.0/1.1/1.2/1.3) + cipher suite classification (aead-strong/strong-fs/weak/legacy-fs) + ALPN negotiation (h2/http1.1) + Alt-Svc h3 HTTP/3 endpoint discovery + key_exchange gro...
Paid cache-freshness strategy audit — probes HTML page + /favicon.ico + /robots.txt + /sitemap.xml + first stylesheet URL + first script URL; for each captures Cache-Control directives + ETag + Last-Modified + Age + Vary...
Paid form security + accessibility audit — per-form action analysis (empty/#/javascript:/data:/mixed-content http-on-https), method (GET with passwords = credential-in-URL), enctype (text/plain CRLF injection), target=_b...
Paid deep Content-Security-Policy analyzer — parses ALL 4 CSP delivery mechanisms (header + meta + report-only variants), classifies each source value (wildcard/scheme/host/nonce/hash/unsafe-inline/unsafe-eval/strict-dyn...
Paid HTTP-method policy + dangerous-method exposure audit — OPTIONS Allow/DAV/ACAO/ACAM + TRACE echo-back + CONNECT + PUT/DELETE/PATCH write exposure + 4 method-override header sniffing (X-HTTP-Method-Override/X-Method-O...
Paid per-cookie security-flags deep audit — parses every Set-Cookie individually for SameSite (Strict/Lax/None/missing/Lax-by-default-heuristic) + Secure + HttpOnly + Path + Domain (broad-domain detection) + Max-Age + Ex...
Paid WAF/IDS/CDN-edge fingerprint detector — 28-vendor catalog (Cloudflare/Fastly/Akamai/Imperva/Sucuri/CloudFront/ALB/Azure-FrontDoor/Vercel/Netlify/StackPath/KeyCDN/BunnyCDN/F5-BIGIP/Barracuda/Citrix-NetScaler/ModSecur...
Paid security.txt RFC 9116 deep audit — path discovery tries /.well-known/security.txt then /security.txt, parses all fields with line-continuation support, strict Contact format validation (mailto: + https://), strict E...
Paid deep HTTP redirect chain analyzer — per-hop latency_ms + headers (server/content-type/cache-control/x-cache/cf-ray/cf-ipcountry/vary/set-cookie count/hsts) + status sub-type classification (301/302/303/307/308) + cr...
Paid main-content markdown extractor for RAG ingestion — strips noise (script/style/nav/aside/header/footer/ads/comments), picks <main>/<article>/content div, converts headings/paragraphs/lists/code/links/images/tables t...
Paid security exposure-surface audit — HSTS preload-list membership via hstspreload.org API + HSTS header detection, RFC 9116 security.txt presence+format-validity (Contact/Expires/Canonical/Preferred-Languages), 18-path...
Paid server/fingerprint/debug/cache response-header audit — Server + X-Powered-By info-leak detection, framework-version-disclosed (X-AspNet-Version/X-Generator/X-Drupal-Cache), debug-headers-in-prod (X-Debug/X-Runtime),...
Paid cookie banner UX + dark-pattern audit — 19-CMP fingerprint + Accept/Reject parity + Manage-preferences link + pre-ticked toggles + cookie-wall + Reject click-depth + CCPA Do-Not-Sell + granular categories, cookie_ba...
Paid affiliate-program presence detection — 17-path landing-page probe with content signals + 16-network fingerprint (ShareASale/CJ/Impact/PartnerStack/Awin/Rakuten/ClickBank/Refersion/FirstPromoter/Tolt/LemonSqueezy/Gum...
Paid legal/ethical disclosure completeness audit — Terms/Privacy/Cookie/Affiliate/AI-policy links + FTC affiliate language detection + EU AI Act Art. 50 AI-disclosure detection + CCPA 'Do Not Sell' link + gdpr_legal_comp...
Paid composite agent-trustworthiness score — security headers (HTTPS/HSTS/CSP/XFO/XCTO/RP/PP) + discoverability (robots/sitemap/llms.txt/security.txt) + standards (structured data/lang/cookie consent) rollup with A-F gra...
Paid GDPR/CCPA cookie consent audit (CMP detection, cookie categorization, security attrs) via x402
Paid Permissions-Policy header audit (browser feature gating, high-risk feature detection, source allowlist) via x402
Paid HTTP security header audit (CSP/HSTS/X-Frame-Options/etc) via x402
Paid machine-API discovery rollup — link rel=alternate (oembed/atom/rss/jsonfeed) + HTTP Link header + JSON-LD Action/EntryPoint/Service + declared-spec-path probes (/llms.txt, /openapi.json, /swagger.json, /graphql, /.w...
Paid comprehensive SEO audit (title length, meta description, canonical, robots, viewport, OG/Twitter, JSON-LD, hreflang, favicon, sitemap + A-F grade) via x402
prompt-injection risk scan: detects instruction override, tool abuse and secret exfiltration phrases before an agent consumes untrusted text.