Vulnerability data, scanning and audit services. A listing here is not an endorsement of the scanner’s accuracy.
Score a URL for phishing risk before an agent opens or trusts it. Keyless, deterministic heuristics - typosquat / homoglyph of a known brand, punycode / mixed-script hosts, credentials-in-URL, raw-IP hosts, suspicious TL...
HTTP Header Audit
Bitcoin chain-tip orphan + valid-fork stream (10min cadence). For exchange confirmation-policy tuning, cross-chain bridge safety windows, finality auditors. branch_length >= 2 = unusual reorg risk.
Screen a person or company name against OFAC SDN, EU consolidated, and UK sanctions lists. Returns matches with details and an audit receipt.
SKILL.md Review: Safe and Within the Limits — Reviews a SKILL.md file before you install, buy or publish it and lists every problem with a fixed code, the place and a fix, then gives one verdict. It checks the front matt...
Bulk does site use hcaptcha: up to 20 domains in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment for...
Use when you need a whois or domain lookup, dns records, email security checks or certificate transparency data for osint or due diligence. Do not use for historical whois, registrant personal data (redacted by registrie...
PageAudit: technical SEO audit of one page (score, issues, headers, JSON-LD), paid per call
CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively...
Check a counterparty before paying: OFAC SDN, phishing and drainer feeds, a live watch of drainer infrastructure, transaction simulation and injected-instruction analysis. Returns a score and a signed ES256 attestation.
Give your domains. Generates common look-alike/typosquat permutations and resolves them over keyless DNS to find which are REGISTERED - flagging the ones with a live site and mail (phishing-ready) + a risk signal. Passiv...
IP reputation check: is this IPv4 address on a public threat blocklist (Tor exit nodes, botnets, spam networks)
Send Solidity source code; get a structured JSON security review: findings with severity, SWC/category, location, exploit explanation and fix, plus centralization/rug-pull powers and an overall risk level. Automated firs...
Procurement cycles — Record quality audit + String normalisation + Two-measure correlation: Record quality audit + String normalisation + Two-measure correlation for supplied procurement cycles records (request_days, app...
Xynaptic Security Technical — technical indicators computed on price history: SMA 20/50/200, EMA 12/26, RSI 14, momentum 10d, volatility 20d, trend classification. GET ?ticker=AAPL&days=90 (30-365). Signals: price vs MAs...
Xynaptic Security Dividends — dividend history from SEC XBRL filings (official DPS declared) + current yield computed against the live price, plus payout proxy when net income is available. GET ?ticker=KO. Regulator-grad...
Xynaptic Security Risk — risk profile from price history: annualized volatility, max drawdown, worst day, VaR 95 (parametric), Sharpe proxy, beta vs SPY (when available). GET ?ticker=AAPL&days=180. Output: risk_level (lo...
Counterparty check before paying a platform or crypto provider: French AMF blacklists, ESMA MiCA register (authorised and non-compliant CASPs), sanctions lists (EU, UN Security Council, US OFAC SDN). Official public data...
Look up the published record of a software vulnerability by its CVE identifier.
Deterministic static pattern scan of Solidity smart-contract source text - a fixed ruleset flagging tx.origin authentication, delegatecall, selfdestruct, unchecked low-level calls, unchecked .send(), floating pragmas, bl...
Deterministic apparent tropical ephemeris with signs, motion, lunar phase, aspects, provenance and audited error bounds.
One call: allow / caution / block for any website, with reasons. Phishing & malware blocklists, domain age, Tranco popularity, TLS, email/DNS, brand impersonation and storefront red flags. Built for AI agents before they...
Password - CASA Cybersecurity Assessment - Consolidates evidence on secure communications, including certificate validity, hostname matching, protocol and cipher strength, forward secrecy, and TLS vulnerabilities. It det...
DCL Trust Oracle. Call only when the text must include the substring AI and must not include "I cannot be held responsible" or "no guarantees". POST JSON {"response","agent_id"}. COMMIT means those checks passed and the...