DB migration risk x402 REST
database migration risk scan for SQL migrations: flags destructive statements, unbounded updates and risky NOT NULL column additions.
0.02 USDC per call
per call
Security
1,159 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Deploy config risk x402 REST
deployment configuration risk scan for YAML, Docker Compose or Kubernetes snippets: flags privileged containers, latest tags, host networking and plaintext secrets.
0.02 USDC per call
per call
GitHub repo health x402 REST
public GitHub repository health check: archived status, recency, license, stars, forks, issues and risk flags for dependency or vendor review.
0.01 USDC per call
per call
npm package risk x402 REST checked
npm package risk report for coding agents: registry metadata, weekly downloads, license, repository, deprecation and install script risk signals.
0.015 USDC per call
per call
checked
LLM Red-Team Scanner x402 REST
Deterministic LLM red-team scan: prompt injection, jailbreak, system-prompt extraction and MCP tool abuse in agent prompts.
0.000896 USDC per call
per call
Cookie Flags x402 REST
Paid Set-Cookie security-attribute audit (per-cookie Secure/HttpOnly/SameSite/Max-Age/Size/Priority/Partitioned + issue flags + A-F grade) via x402
0 USDC per call
per call
x402 Buyer Receipt History x402 REST
Paid x402 buyer receipt history (cycle 191, leak-closed cycle 193) - per-buyer call ledger + spend + 60-day by_day_series from the local access log. RE-gated: advertised at $0.001 but served free. via x402
0 USDC per call
per call
Js Bundle Fingerprint x402 REST
Paid JS bundle fingerprint (cycle 192, x402 $0.001) - GET ?url=<PAGE>[&max_scripts=N default 8 max 25] OR ?sample=react|vue|jquery|webpack|alpine|svelte|lodash|angular OR POST {url,max_scripts}. Reads first ~4 KB of each...
0 USDC per call
per call
x402 Buyer Cli Template x402 REST
Paid x402 buyer CLI template generator (cycle 191, leak-closed cycle 193) - GET ?route=&rounds=N returns a pre-filled runnable Python httpx+eth_account snippet that pays for one chosen route. RE-gated: it was advertised...
0 USDC per call
per call
HTTP2 Frame Anatomy Trace x402 REST
Paid HTTP/2 frame-anatomy trace (cycle 180, x402 $0.001) - accepts GET ?host=<HOST> (default www.cloudflare.com); opens fresh TCP+TLS 1.2+ with ALPN [h2, http/1.1]; sends the 24-byte client connection preface PRI * HTTP/...
0 USDC per call
per call
CSP Trusted Types Policy x402 REST
Paid Trusted Types policy enforcement audit (cycle 164, x402 $0.001) - actively audits W3C Trusted Types policy enforcement by examining 9 axes: (1) CSP require-trusted-types-for 'script' directive presence (the ENFORCEM...
0 USDC per call
per call
Webtransport Probe x402 REST
Paid WebTransport handshake + endpoint reachability probe (cycle 165, x402 $0.001) - actively probes RFC 8441 + RFC 9290 + RFC 9221 WebTransport readiness across 8 axes: (1) Alt-Svc h3/h3-NNN advertise parse (HTTP/3 requ...
0 USDC per call
per call
QUIC Spin Bit Privacy x402 REST
Paid QUIC spin-bit privacy-leak audit (cycle 164, x402 $0.001) - actively probes RFC 9000 SS15.2 / RFC 9312 spin-bit privacy behavior. Per RFC 9312 SS3.2 the spin bit is the second-most-significant bit of byte 0 of long-...
0 USDC per call
per call
Cdn Edge Runtime Detector x402 REST
Paid CDN edge-runtime fingerprint + cold-start probe (cycle 163, x402 $0.001) - actively probes for serverless edge-compute runtimes (Cloudflare Workers/Vercel Edge Functions/Fastly Compute@Edge/Akamai EdgeWorkers/CloudF...
0 USDC per call
per call
Openapi Security Lint x402 REST
Paid OpenAPI/Swagger security-smell linter per OWASP API Top 10 (2023) (cycle 160 restored 2026-10-17, x402 $0.001) - accepts GET ?url=<TARGET> (walks 6 candidate paths /openapi.json+/openapi.yaml+/swagger.json+/swagger/...
0 USDC per call
per call
Cdn Edge Cache Key Analyzer x402 REST
Paid CDN edge cache-key constructor analyzer (cycle 158, x402 $0.0005) - actively probes the CDN edge cache across 9 variation dimensions (Accept-Language, Accept-Encoding, User-Agent, Cookie, Authorization, Origin, Refe...
0 USDC per call
per call
Oauth2 Authorization Hardening x402 REST
Paid OAuth 2.0 / OIDC authorization endpoint hardening audit (cycle 159, x402 $0.001) - actively probes an issuer's OAuth/OIDC authorization endpoint against the 10 canonical misconfiguration classes defined by RFC 9700...
0 USDC per call
per call
Smtp Credential Leak Probe x402 REST
Paid SMTP credential-leak probe (cycle 158, x402 $0.0005) - actively probes each MX host on ports [25, 465, 587] for credential-handling vulnerabilities. Per-port: opens TCP, reads banner, sends EHLO, captures AUTH mecha...
0 USDC per call
per call
DKIM Key Rotation Freshness x402 REST
Paid DKIM key-rotation freshness audit (cycle 157, x402 $0.001) - probes 25 common DKIM selectors in parallel via DoH, parses per-selector v/k/p/h/s/t/n tags, computes SHA-256 fingerprint of each public key, and scores r...
0 USDC per call
per call
CSP Permitted Script Mapper x402 REST
Paid CSP x Live-Script mapper (cycle 156, x402 $0.001) - fetches target HTML, extracts every <script src=...> URL, and maps each against the target's declared CSP script-src + default-src allow-list. Reports which runnin...
0 USDC per call
per call
Cloud S3 Bucket Exposure x402 REST
Paid AWS S3 bucket public-read ACL + listability probe (cycle 155, x402 $0.001) - resolves target domain + derives 8 conventional bucket-name candidates (apex + hyphen_to_dot + -backup/-backups/-prod/-staging/-dev/-asset...
0 USDC per call
per call
CSP Permissive Directive Budget x402 REST
Paid CSP permissive-source budget scorer (cycle 154) - quantifies aggregate attack-surface allowed by the policy. Parses header + meta + report-only delivery mechanisms, classifies every source value as high (script-src...
0 USDC per call
per call
JWT Alg Confusion Probe x402 REST
Paid JWT algorithm-confusion + kid-injection + JWKS-header-hijack probe (cycle 153) - forges 12 forged-JWT attack classes (alg:none variants + kid-injection variants + jku/jwk/x5u attacker-controlled) and (when public_ke...
0 USDC per call
per call
JWT Timing Sidechannel x402 REST
Paid JWT HS256 signature-timing sidechannel probe (cycle 152, x402 $0.001) - forges 32 HS256 JWTs varying the LAST signature byte, sends each (default 12 iterations) against target's Authorization: Bearer header, measure...
0 USDC per call
per call