880 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Paid /.well-known/* inventory probe - enumerates 30 standard + proposed well-known paths (security.txt RFC 9116 + openid-configuration + webfinger + nodeinfo + agents.txt + llms.txt + llms-full.txt + apple-app-site-assoc...
Paid hreflang <-> sitemap.xml cross-validator (cycle 94) — extracts page hreflang tags, validates BCP47 + self-reference + x-default + canonical agreement, locates sitemap (sitemap.xml + sitemap_index.xml + robots.txt Si...
Paid CAPTCHA + bot-management vendor detection (cycle 94) — page-level fingerprint of 11 vendors (reCAPTCHA v2/v3/enterprise + hCaptcha + Cloudflare Turnstile + Cloudflare challenge page + Arkose Labs + GeeTest + DataDom...
Paid SRI readiness audit - probes every <script src=...> tag on a page, classifies each as same-origin vs third-party, checks for presence of integrity= + crossorigin= attributes, HEAD-probes each script for reachability...
Paid mixed-content body scanner (cycle 97) — parses HTML body for http:// subresources on https:// pages across 12 element types (img/script/link/iframe/source/object/embed/video/audio/form + CSS url() + inline event han...
Paid subdomain-takeover risk audit (cycle 100) — discovers subdomains via HackerTarget hostsearch, resolves CNAME chain (max 8 hops) via Cloudflare DoH, fingerprints 30+ known-vulnerable service providers (AWS S3, CloudF...
Paid CSP violation-report ROUND-TRIP replay (cycle 170, x402 $0.001) - fetches target page; extracts CSP header + meta CSP + Reporting-Endpoints header + report-uri + report-to group; for each declared endpoint REPLAYS 4...
Paid JWKS (RFC 7517 + RFC 8414) JWK Set inspector (cycle 173, x402 $0.001) - accepts ?jwks_url=<URL> OR ?jwks=<JWK_SET_JSON> OR ?url=<PAGE> (auto-discovers jwks_uri via /.well-known/openid-configuration + /.well-known/oa...
Paid full HTTP response header inventory (cycle 99) — DUMPS every response header and classifies each into 5 categories (security / caching / cors / content-negotiation / custom-vendor-prefixed); reports legacy_disclosur...
Paid MTA-STS (RFC 8461) policy+record cross-validator (cycle 174, x402 $0.001) - accepts ?domain=<DOMAIN>; actively probes _mta-sts.<domain> TXT (RFC 8461 SS3.1) via DoH + https://mta-sts.<domain>/.well-known/mta-sts.txt...
Paid CSP per-directive source-list extraction + classification (cycle 176, x402 $0.001) - accepts GET ?url=<URL> OR POST application/json {'url':...}; fetches target page; extracts CSP header + meta CSP fallback; tokeniz...
Paid live QUIC (HTTP/3) handshake probe (cycle 101) — actively opens UDP/443 QUIC Initial packets to the resolved A/AAAA, tests 10 candidate versions (draft-29/30/31/32/33/34 + h3 + h3-Q050 + v2); parses server reply to...
Paid HTTP/3 QPACK (RFC 9204) encoder-pattern fingerprint probe (cycle 179, x402 $0.001) - accepts GET ?host=<HOST> (default www.cloudflare.com) OR POST application/json {'host':...,'force_quic':...}; fetches https://<hos...
Paid open-source LICENSE evolution / migration analyzer (cycle 179, x402 $0.001) - accepts GET ?repo=<ORG>/<REPO> (e.g. elasticsearch/elasticsearch) OR ?url=https://github.com/<...> OR ?package=<NPM-PKG-NAME> (resolves n...
Paid DNSSEC chain-of-trust validation (cycle 103) — fetches the zone's DNSKEY + RRSIG via Cloudflare DoH, walks the chain (zone DNSKEY ← DS at parent); for each step verifies the DS digest matches a computed DNSKEY diges...
Paid active HTTP/2 SETTINGS frame probe (cycle 106) — opens fresh TCP, performs TLS 1.3 handshake with ALPN ["h2", "http/1.1"], sends the HTTP/2 client connection preface (PRI * HTTP/2.0 + 24-byte magic + client SETTINGS...
Paid active TLS 1.3 + PQC + ECH probe (cycle 108) — opens TLS 1.3 connection, advertises 13 named groups including PQC hybrids (X25519Kyber768Draft00/Draft01, X25519Kyber768, SecP256r1Kyber768Draft00/Draft01, P256Kyber76...
Paid brand-impersonation risk synthesis (cycle 106) — aggregates 8 signals (domain age via crt.sh, BIMI RFC 8848 record, RFC 9116 security.txt, llms.txt presence, /.well-known/x402 honest declaration, https→http redirect...
Paid clickjacking-protection audit (cycle 115) — fetches the page headers + body, audits (a) X-Frame-Options presence + value (DENY/SAMEORIGIN valid, ALLOW-FROM deprecated per Chrome/Edge), (b) CSP frame-ancestors policy...
Paid JavaScript syntax-validity probe (cycle 114) — fetches the page HTML, extracts every inline <script> block + every external <script src=> (parallel fetch with 8s timeout + 500KB cap per script, max 20 externals), fo...
Paid cookie name-prefix (__Secure-/__Host-) policy audit (cycle 115) — fetches page Set-Cookie headers, for each cookie: extracts Secure/Path/Domain/HttpOnly/SameSite attributes, flags __Secure- prefix and checks Secure...
Paid AI training / retrieval crawler policy audit (cycle 117) — fetches /robots.txt + /llms.txt + /llms-full.txt + /meta-robots + probes 3 ai.txt paths (/.well-known/ai.txt + /.well-known/ai-crawler-policy + /ai.txt), cl...
Paid Web Vitals INP (Interaction-to-Next-Paint) heuristic estimate (cycle 118) — static-analysis proxy for INP p75 without a real browser: counts addEventListener + onclick/oninput/onkeydown/onsubmit handlers in inline +...
Paid web typography + font-loading audit (cycle 127, x402 $0.001) - fetches target HTML, extracts font-family from body + h1-h6 via inline style= attributes, parses inline <style> blocks for @font-face rules + font-displ...