620 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Token safety pre-flight — one verdict before your agent buys, swaps or approves any ERC-20 on Base (GET ?contract=0x… or POST body {contract}). Call it right before the trade and branch on `verdict`: ALLOW / WARN / BLOCK...
Use when your agent is about to buy or swap into an unknown Solana token (before a Jupiter or pump.fun trade). Rug check read from chain state: SAFE/CAUTION/DANGER, 0-100 risk score, authorities, Token-2022 traps, wallet...
Autonomous Move smart contract security auditor — Aptos and Sui
Autonomous Rust smart contract security auditor — CosmWasm, Anchor, Stellar, NEAR
Autonomous smart contract security auditor — 20+ vulnerability classes, PoC exploits
AI code review returning bugs, security issues, performance notes, and a quality score. Use when you need a second-pass review of a diff or function before committing it.
Check an unsigned EVM transaction before an AI agent signs it. Enforces spending limits, recipient restrictions, ERC20 approval rules, unlimited approval protection, and calldata policy. Only PASS receives a short-lived...
Inspect npm package creation, releases, maintainers, and lifecycle-script chronology for dependency trust and AI-agent supply-chain screening.
Explains HTTP headers: for each header name you give (comma-separated), what it does, typical values and an example, plus whether it is a request, response or both, and a security relevance flag. Covers 60+ common header...
DNSSEC check for a domain: whether DS and DNSKEY records exist, whether the resolver validates the chain (AD flag), signing algorithms used. Security posture and DNS hygiene audits. $0.01 per check.
Solana Watchdog: dependency advisories split by on-chain vs toolchain surface, plus known Solana/Anchor bug-class leads, for a public GitHub repo. A scan, not an audit.
EVM Watchdog: npm/Foundry dependency advisories split by on-chain vs toolchain surface, plus known Solidity bug-class leads, for a public GitHub repo. A scan, not an audit.
Website security posture report with an A-F grade: HTTPS and redirect to HTTPS, HSTS, security headers (CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy), cookie flags, DNS hygiene (SPF,...
Solana Watchdog advisory check: RustSec/OSV advisories affecting the crates of a whole Cargo.lock (or up to 100 listed crates) at their exact pinned versions. Instant, per request.
Use this to be told when a Solana program you rely on changes hands or code, or when a new advisory hits your Cargo.lock: 30 days of hourly checks, signed webhook on each change. One payment.
Use this before approving or depositing into a contract on Base or Robinhood Chain: is it a proxy, who can change its code (single key, Safe with threshold, timelock with delay), who owns it, is the live code verified on...
Use this to be told when a contract you rely on (Base, Robinhood Chain) gets new code, a new owner or weaker upgrade rules, or when a new advisory hits your npm lockfile: 30 days of hourly checks, signed webhook on each...
Use this before signing a transaction for a Solana program: who can change its code (single key, Squads multisig with threshold and time lock, DAO, or immutable), when it last changed, verified build, security.txt. Insta...
Does security@<domain> look deliverable? Builds the security@ address for the domain you give and runs the verifier: syntax, MX presence, mail provider, disposable/free-provider flags, SPF/DMARC presence and a deliverabl...
Bulk email security at domain: up to 20 domains in one call, processed concurrently, results in input order with a per-item error field and a failure count. Same answer per item as the single endpoint. Batch enrichment f...
Change watch for email security at domain: runs the check, compares it with the result from your previous call for the same domain (kept 90 days) and returns the current answer, changed true/false, the fields that change...
Does a website use reCAPTCHA? Fetches the page (homepage for a bare domain) and matches reCAPTCHA's fingerprints in the HTML and response headers, returning yes/no with the evidence snippet and the category (security). T...
Does a website use hCaptcha? Fetches the page (homepage for a bare domain) and matches hCaptcha's fingerprints in the HTML and response headers, returning yes/no with the evidence snippet and the category (security). Tec...
Does a website use Wordfence? Fetches the page (homepage for a bare domain) and matches Wordfence's fingerprints in the HTML and response headers, returning yes/no with the evidence snippet and the category (security). T...