614 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
security.txt reader (RFC 9116): fetches /.well-known/security.txt (and the legacy /security.txt), parses Contact, Policy, Expires, Encryption, Acknowledgments, Preferred-Languages and Canonical, and flags an expired file...
Web application firewall detection: signs of Cloudflare WAF, AWS WAF, Akamai Kona, Imperva, Sucuri, F5 BIG-IP, Barracuda, Fortinet, ModSecurity and others from response headers, cookies and block-page behaviour on a prob...
Use this before adding or upgrading an npm dependency (OpenZeppelin, solmate, hardhat…), or to triage a lockfile: GitHub/OSV advisories affecting a whole package-lock.json or yarn.lock (or up to 100 listed packages) at t...
Solana token rug/safety check: mint & freeze authority, dangerous Token-2022 settings, real-wallet holder concentration (pools excluded), sell-route round-trip test, live buy/sell flow. Verdict SAFE/CAUTION/DANGER with r...
Combined pre-trade safety check: on-chain risk score (proxy + privileged-function detection from live bytecode) plus Telegram alert-channel monitoring, in one call. Cheaper than calling /v1/scan and /v1/alert-check separ...
Use to check up to 100 public catalog endpoints for reachability, HTTP status, latency, and launch readiness without making paid calls.
Bulk company lookup: run one tool (tech stack, open jobs, hiring intent, Google Ads or company profile) on many domains with one payment. Step 1 (free): send {tool, domains}; every domain is checked and you get each stat...
HSTS check: the Strict-Transport-Security header on the site (max-age, includeSubDomains, preload), whether it meets Chrome preload-list requirements, and the domain's current status in the HSTS preload list (hstspreload...
HTTP methods check: which methods a URL accepts, from an OPTIONS request (Allow / Access-Control-Allow-Methods) plus HEAD, GET and a harmless POST probe, with status codes. API and security reconnaissance. $0.01 per URL.
Mixed content check: finds http:// scripts, stylesheets, images, iframes, media and form actions on an HTTPS page (active vs passive), which browsers block or flag. Fix warnings before they cost you conversions. $0.01 pe...
[security-audit-dag] Universal A2A & MCP Tool Discovery, Safe-Proxy & Swarm Router (/v1/x402-broker) — Single-connection meta-router indexing 500+ MCP servers & A2A tools with 85% token compression and Prompt-Guard firew...
[security-audit-dag] Universal A2A & MCP Tool Discovery, Safe-Proxy & Swarm Router (/v1/x402-broker) — Single-connection meta-router indexing 500+ MCP servers & A2A tools with 85% token compression and Prompt-Guard firew...
Curated feed of active, verified cash/crypto coding and agent bounties across GitHub, Frantic, and SwarmMemo.
Curated feed of active, verified cash/crypto coding and agent bounties across GitHub, Frantic, and SwarmMemo.
Airport-to-airport route info: great-circle distance in km/nm/mi plus estimated flight time between any two of 49,000+ airports. Useful for travel planning, logistics and aviation agents.
Token security & honeypot audit for Base: token risk verification, token contract safety, honeypot detection, token bytecode audit, and ERC-20 token transfer telemetry ($0.75 USDC). Input: token or address parameter.
On-chain contract risk score: detects upgradeable proxies and privileged functions from live bytecode. Use before trading/interacting with an unfamiliar contract.
Telegram alert-channel monitoring for a contract address or ticker: returns mention volume across tracked crypto channels, categorized into security alerts, whale movements, and listing/news. Use alongside an on-chain ri...
Onchain risk assessment for one token on one chain (Base, Ethereum, BSC, Polygon, Arbitrum, Solana and others): a single risk score from 0 to 100 with a severity level, explicit risk flags such as honeypot, high transfer...
Static security scan of a single text or prompt blob: hidden unicode, prompt injection, data-exfiltration directives, dangerous-capability and tool-shadowing language, and obfuscation. Returns a 0-100 risk score, categor...
Pre-sign safety verdict for an off-chain EIP-712 signature (EIP-2612, Permit2, EIP-3009). Decodes what it authorizes (spender, token, amount, deadline), checks domain-spoof, approval-hygiene and scam-blocklist, returns a...
Batch install-safety preflight for a whole dependency list or parsed manifest (up to 100 packages). Returns a verdict per package plus a blocked / caution / safe summary. Supply-chain indicators, not a guarantee.
ERC-20 token safety pre-check from on-chain data only (Base, Ethereum, Arbitrum, Optimism, Polygon, BSC): name/symbol/decimals/supply, owner and whether renounced, EIP-1967/minimal proxy detection, and a bytecode scan (i...
Offline pre-sign check (no RPC, fast): decodes a transaction, EIP-712 typed data (Permit, Permit2, EIP-3009), an EIP-7702 authorization or an x402 402 + payment payload and returns SAFE/CAUTION/DANGER, every risk flag wi...