619 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
Change watch for response header strict transport security: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fiel...
Change watch for response header content security policy: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields...
Change watch for response header content security policy report only: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false...
Change watch for response header x content type options: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields...
Change watch for response header permissions policy: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that...
Change watch for response header cross origin opener policy: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fie...
Change watch for response header cross origin embedder policy: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the f...
Change watch for response header cross origin resource policy: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the f...
Change watch for response header access control allow origin: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fi...
Change watch for response header content disposition: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields tha...
Change watch for response header x dns prefetch control: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields...
Change watch for response header x download options: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields that...
Change watch for response header x permitted cross domain policies: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false,...
Change watch for response header timing allow origin: runs the check, compares it with the result from your previous call for the same url (kept 90 days) and returns the current answer, changed true/false, the fields tha...
Find the security page of a website: fetches the homepage, scans link text and URLs for security patterns and returns the best candidate URL(s) with the anchor text, plus a confidence. Agents use it to land on the right...
Redact common API keys, tokens and private-key patterns before logging or handoff
Scan untrusted text for common prompt-injection and instruction-override patterns
Review a built-in risky Kubernetes deployment and ClusterRole against Pod Security Standards, RBAC least privilege, secret handling, image pinning, resource bounds, and network exposure without contacting a cluster
Password strength estimate: entropy in bits, character classes used, length, common-pattern penalties (dictionary words, sequences, repeats, dates), an estimated crack time at 10 billion guesses per second and a verdict....
Can this domain be spoofed? Checks whether SPF and DMARC together actually block forged mail: missing DMARC, p=none, pct below 100, SPF +all or ?all, or no SPF at all mean attackers can send email as the domain. Returns...
Prompt injection detection for AI agents: check untrusted text (a web page, email, tool result or user message) before your agent reads it. Returns a verdict safe, suspicious or malicious, a 0 to 100 risk score, the tech...
Prompt injection detection - screen text, a web page or tool output for block, review or allow with a risk score
Audit a built-in vulnerable OpenAPI 3.1 contract against deterministic OWASP API Security Top 10 2023 contract-level checks without active scanning
Detect language, formality and tone of a text with confidence scores. Deterministic heuristics + compact wordlists. Returns iso_639-1 + register. — $0.001 USDC/call on eip155:8453. Pay-per-call via x402 — no API key, no...