1,157 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid JWT algorithm-confusion + kid-injection + JWKS-header-hijack probe (cycle 153) - forges 12 forged-JWT attack classes (alg:none variants + kid-injection variants + jku/jwk/x5u attacker-controlled) and (when public_ke...
Paid CSP permissive-source budget scorer (cycle 154) - quantifies aggregate attack-surface allowed by the policy. Parses header + meta + report-only delivery mechanisms, classifies every source value as high (script-src...
Paid OWASP API Security Top 10 (2023) one-call composite audit (cycle 151, x402 $0.001) - fetches target URL + probes 24 conventional API paths in parallel via ThreadPoolExecutor, runs all 10 OWASP 2023 category checks:...
Paid CSP x Live-Script mapper (cycle 156, x402 $0.001) - fetches target HTML, extracts every <script src=...> URL, and maps each against the target's declared CSP script-src + default-src allow-list. Reports which runnin...
Paid OAuth 2.0 / OIDC authorization endpoint hardening audit (cycle 159, x402 $0.001) - actively probes an issuer's OAuth/OIDC authorization endpoint against the 10 canonical misconfiguration classes defined by RFC 9700...
Paid SMTP credential-leak probe (cycle 158, x402 $0.0005) - actively probes each MX host on ports [25, 465, 587] for credential-handling vulnerabilities. Per-port: opens TCP, reads banner, sends EHLO, captures AUTH mecha...
Paid CDN edge cache-key constructor analyzer (cycle 158, x402 $0.0005) - actively probes the CDN edge cache across 9 variation dimensions (Accept-Language, Accept-Encoding, User-Agent, Cookie, Authorization, Origin, Refe...
Paid DKIM key-rotation freshness audit (cycle 157, x402 $0.001) - probes 25 common DKIM selectors in parallel via DoH, parses per-selector v/k/p/h/s/t/n tags, computes SHA-256 fingerprint of each public key, and scores r...
Paid AWS S3 bucket public-read ACL + listability probe (cycle 155, x402 $0.001) - resolves target domain + derives 8 conventional bucket-name candidates (apex + hyphen_to_dot + -backup/-backups/-prod/-staging/-dev/-asset...
Paid OpenAPI/Swagger security-smell linter per OWASP API Top 10 (2023) (cycle 160 restored 2026-10-17, x402 $0.001) - accepts GET ?url=<TARGET> (walks 6 candidate paths /openapi.json+/openapi.yaml+/swagger.json+/swagger/...
Paid QUIC spin-bit privacy-leak audit (cycle 164, x402 $0.001) - actively probes RFC 9000 SS15.2 / RFC 9312 spin-bit privacy behavior. Per RFC 9312 SS3.2 the spin bit is the second-most-significant bit of byte 0 of long-...
Paid CDN edge-runtime fingerprint + cold-start probe (cycle 163, x402 $0.001) - actively probes for serverless edge-compute runtimes (Cloudflare Workers/Vercel Edge Functions/Fastly Compute@Edge/Akamai EdgeWorkers/CloudF...
Paid Trusted Types policy enforcement audit (cycle 164, x402 $0.001) - actively audits W3C Trusted Types policy enforcement by examining 9 axes: (1) CSP require-trusted-types-for 'script' directive presence (the ENFORCEM...
Paid WebTransport handshake + endpoint reachability probe (cycle 165, x402 $0.001) - actively probes RFC 8441 + RFC 9290 + RFC 9221 WebTransport readiness across 8 axes: (1) Alt-Svc h3/h3-NNN advertise parse (HTTP/3 requ...
Paid x402 buyer receipt history (cycle 191, leak-closed cycle 193) - per-buyer call ledger + spend + 60-day by_day_series from the local access log. RE-gated: advertised at $0.001 but served free. via x402
Paid x402 buyer CLI template generator (cycle 191, leak-closed cycle 193) - GET ?route=&rounds=N returns a pre-filled runnable Python httpx+eth_account snippet that pays for one chosen route. RE-gated: it was advertised...
Paid HTTP/2 frame-anatomy trace (cycle 180, x402 $0.001) - accepts GET ?host=<HOST> (default www.cloudflare.com); opens fresh TCP+TLS 1.2+ with ALPN [h2, http/1.1]; sends the 24-byte client connection preface PRI * HTTP/...
Paid JS bundle fingerprint (cycle 192, x402 $0.001) - GET ?url=<PAGE>[&max_scripts=N default 8 max 25] OR ?sample=react|vue|jquery|webpack|alpine|svelte|lodash|angular OR POST {url,max_scripts}. Reads first ~4 KB of each...
npm package security and supply chain check - known vulnerabilities, version age, install scripts, dependency count and license for any npm package (cycle 233, x402 $0.01) - GET ?package=<NAME> OR ?name=<NAME> OR ?packag...
CVE vulnerability lookup by id - full CVE record with description, CVSS base score and severity, CWE weakness, affected products and versions, references, published and modified dates, and the fix. Security vulnerability...
Paid IP geolocation via dual-source consensus (cycle 133, x402 $0.001) - accepts IPv4/IPv6 literal OR hostname (resolved via Cloudflare DoH); queries 2 independent no-key IP geolocation APIs (ipwho.is + ipinfo.io); retur...
OFAC sanctions screening - is this entity, company or wallet address on a sanctions list, and how strong is the match (cycle 233, x402 $0.01) - GET ?name=<ENTITY NAME> OR ?names=<A,B,C> OR ?address=<0xADDRESS> OR ?sample...
Paid Service Worker + scope security audit (cycle 153) - discovers SW via /sw.js + /service-worker.js + /worker.js + <link rel=serviceworker> + .register() calls, fetches the SW body, audits 11 risk classes (R1 eval/new...
Paid QUIC 0-RTT replay-risk probe (cycle 163, x402 $0.001) - actively probes whether target's QUIC implementation accepts 0-RTT early data + what replay-protection is implemented + whether it's safe to send 0-RTT. 7 axes...