93 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Does https://<domain>/.well-known/brave-rewards-verification.txt exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/brave-reward...
Does https://<domain>/.well-known/traffic-advice exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/traffic-advice tells you abo...
Does https://<domain>/.well-known/trust.txt exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/trust.txt tells you about the sit...
Does https://<domain>/.well-known/tdmrep.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/tdmrep.json tells you about the...
Does https://<domain>/.well-known/x402 exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of .well-known/x402 tells you about the site's toolin...
Does https://<domain>/openapi.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of openapi.json tells you about the site's tooling and po...
Does https://<domain>/openapi.yaml exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of openapi.yaml tells you about the site's tooling and po...
Does https://<domain>/swagger.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of swagger.json tells you about the site's tooling and po...
Does https://<domain>/api-docs exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of api-docs tells you about the site's tooling and policies....
Does https://<domain>/graphql exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of graphql tells you about the site's tooling and policies. $0...
Does https://<domain>/.env exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed .env is a security finding. $0.01 per check.
Does https://<domain>/.git/HEAD exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed .git/HEAD is a security finding. $0.01 per check.
Does https://<domain>/wp-login.php exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed wp-login.php is a security finding. $0.01 per check.
Does https://<domain>/wp-json/ exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of wp-json/ tells you about the site's tooling and policies....
Does https://<domain>/xmlrpc.php exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed xmlrpc.php is a security finding. $0.01 per check.
Does https://<domain>/admin/ exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed admin/ is a security finding. $0.01 per check.
Does https://<domain>/phpinfo.php exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed phpinfo.php is a security finding. $0.01 per check.
Does https://<domain>/server-status exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed server-status is a security finding. $0.01 per check.
Does https://<domain>/.DS_Store exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed .DS_Store is a security finding. $0.01 per check.
Does https://<domain>/package.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed package.json is a security finding. $0.01 per check.
Does https://<domain>/composer.json exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. An exposed composer.json is a security finding. $0.01 per check.
Does https://<domain>/readme.html exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of readme.html tells you about the site's tooling and poli...
Does https://<domain>/license.txt exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of license.txt tells you about the site's tooling and poli...
Does https://<domain>/CHANGELOG.md exist? Requests the path and returns the HTTP status, content type, size and the first 300 characters when it is text. Presence of CHANGELOG.md tells you about the site's tooling and po...