1,390 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid external-resource inventory (script/stylesheet/font/image/iframe hosts, top domains, 22-family ad/tracker classifier, third-party dependency A-F grade) via x402
Paid unified structured-data audit — JSON-LD + Microdata + RDFa aggregated into unique schema.org types + parent-class hierarchy + 21 rich-result candidate detection + machine_readability_score 0-100 with A-F grade via x...
Paid Schema.org JSON-LD validator + recommended-properties audit (30-type catalog with required/recommended property checks, type-specific anti-pattern detection, ISO 8601 / ISO 4217 / phone-format checks, weighted requi...
Paid institutional trust-anchor audit (beyond EEAT) — legal entity suffix + regulatory mentions (SEC/FINRA/HIPAA/GDPR/SOC2/etc) + jurisdictional signals + 11 trust seals + copyright + legal pages + trust_anchors_score 0-...
Paid per-image alt-text quality audit — per-img verdicts (missing/decorative/present), length scoring (3-125 chars ideal), 'image of X' redundant-prefix detection, keyword-stuffing detection (>3 comma phrases), ALL-CAPS...
Paid subdomain enumeration via HackerTarget hostsearch + urlscan fallback — discovered subdomains with IP + total count + dedup + top-subdomain-prefix frequency + takeover-risk heuristics (disposable-cloud/known-vulnerab...
Paid OpenAPI 3.x / Swagger spec diff — accepts two URLs (url_a + url_b) or two inline payloads (spec_a + spec_b) as JSON or YAML, reports breaking changes (removed paths, removed operations, type/format changes, enum nar...
Paid JavaScript tracker/network fingerprint classifier — scans inline+external+meta+noscript for ~100 analytics/ad-pixel/session-replay/chat/heatmap/a-b-test/social-pixel/consent/tag-manager signatures across 10 categori...
Paid rate-limit policy inference + adaptive burst probe — parses RFC 9239 RateLimit-* + X-RateLimit-* + X-Rate-Limit-* + Retry-After + vendor-specific headers (GitHub/Shopify/Anthropic/OpenAI) + optional N-request burst...
Paid CORS policy audit — baseline GET captures all Access-Control-* response headers (ACAO/ACAC/ACAM/ACEH/ACMA/ACRPN/ACEP/ACEN), dangerous-combo detection (ACAO=* + ACAC=true, ACAO='null', attacker-origin echo), prefligh...
Paid CDN-edge fingerprint detector — 24-vendor catalog (Cloudflare/CloudFront/Fastly/Akamai/Vercel/Netlify/Google Cloud CDN/Azure Front Door/StackPath/BunnyCDN/KeyCDN/Cloudflare Workers/F5/WordPress VIP/Rackspace/Edgecas...
Paid DNSSEC chain-of-trust audit via x402
Paid Certificate Transparency log auditor (cycle 85, x402 $0.001) - GET ?domain=<DOMAIN> queries crt.sh for issued certificates and reports issuer distribution, certificate records, first/last-seen timestamps and an A-F...
Paid CDN edge-coverage audit — 5 anycast probe points (Cloudflare/Google/Quad9/OpenDNS/CIRA), per-tenant reachability + edge diversity + PoP region detection + cdn_coverage_score A-F grade via x402
Paid agent cost calculator — detects auth scheme (Bearer/ApiKey/session_cookie/none) + rate-limit headers + CORS policy + cache max-age + compression + paid-API indicators (Stripe/Gumroad/pricing/checkout); returns estim...
Paid page-archaeology — detects parked domains, thin content, stale copyright (>5y), auto-generated patterns, missing author bylines; returns is_parked + is_thin + is_stale + classification (human_curated/auto_generated/...
Paid multi-formula readability analysis — 5 formulas (Flesch Reading Ease + Flesch-Kincaid Grade + Gunning Fog + Coleman-Liau + SMOG) computed from extracted main-content text, returns main_text_preview + word/sentence/s...
Paid OpenAPI/Swagger/AsyncAPI/GraphQL/Postman/JSON-Schema spec format + version detector (cycle 98) — probes 9 conventional spec paths (/openapi.json + /openapi.yaml + /swagger.json + /swagger.yaml + /.well-known/openapi...
Paid SVCB/HTTPSSVC (RFC 9460+9461) deep parser (cycle 170, x402 $0.001) - probes 11 conventional _<port>._<proto>.<domain> SVCB endpoints (_443._tcp + _443._tcp.www + _443._tcp.api + _80._tcp + _25._tcp + _587._tcp + _85...
Paid RPKI Route Origin Validation (ROV) auditor per RFC 6811 (cycle 172, x402 $0.001) - accepts ?prefix=<CIDR> [auto-resolves announcing ASN via RIPEstat prefix-overview] OR ?prefix=<CIDR>&asn=ASxxxx OR ?asn=ASxxxx; call...
Paid x402 seller leaderboard / ranking auditor (cycle 173, x402 $0.001) - accepts ?url=<X402_CATALOG_URL> (defaults to our /.well-known/x402) + ?top=<N> (default 25, max 100); clusters all payable endpoints by payTo, com...
Paid META-API cost projector for THIS service (cycle 98) — given calls_per_day + route list (or "all") + period (daily|weekly|monthly), pulls the live x402 price catalog and projects aggregate_daily_cost_usd + aggregate_...
Paid Model Context Protocol (MCP) server discovery (cycle 103) — fetches a target's MCP descriptor from 6 candidate paths (/.well-known/mcp.json, /mcp.json, /.well-known/model-context-protocol.json, /model-context-protoc...
Paid x402 SELLER probe (cycle 102) — fetches a target domain's /.well-known/x402 discovery doc, parses several schema variants (object.endpoints / object.items / object.routes / bare-list / line-delimited), returns raw_e...