All projects matching “security”

Website audit bundle for local business websites and lead qualification: performance (browser-measured), security headers and TLS, SEO basics, accessibility and AI-crawler visibility of one public page, with section scores, grades and prioritized findings, in one call.

SEC Form 13F aggregated holdings verdict: by manager (name or CIK) get the latest-quarter portfolio total, position count, top 10 holdings and quarter-over-quarter change; by CUSIP get how many 13F managers hold the security, aggregate value/shares and top holders. Aggregates computed from public-domain SEC Form 13F data sets.

Check a public website's security hygiene before your agent links to it, recommends it, or sends data to it. One URL in, deterministic JSON out: HTTPS and redirect chain, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, security.txt, robots.txt, sitemap.xml, plus plain-language notes. Private, localhost and raw-IP targets are rejected; error responses are no

Quick Solidity pre-audit check, $0.90 USDC on Base: send source or a verified contract address + chain; the same automated engine returns the verdict (grade, score, security and owner-trust risk), severity counts, the top 5 findings with location and fix, and owner powers found (mint, pause, blacklist, fees, upgrade). Triage, not a human audit; failed runs not charged. Every finding with code and

Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter the model context, a prime prompt-injection vector. Deterministic and offline (inline manifest). Flags dangerous capabilities (command/code execution, filesystem, credential and network access), injection patterns, hidden unicode and unconstrained parameters. Returns severity-ranked findin

Website trust check: verdict (trustworthy_likely/caution/risky) with reasons from domain age (RDAP), DNS (A/MX/NS), HTTPS reachability and redirect chain, security headers, phishing/malware list snapshots, brand lookalike/typosquat detection, tech fingerprint and page title. Use when an agent is about to open, click, submit credentials or payment to, recommend or trust an unfamiliar URL or website

Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F. Returns score, present and missing headers, per-header findings with copy-paste fix values, and cookie flag issues.

pcmarts/open-release-demo-next v1.1.0 — release. open release demo example Security scan passed; signed download, 5-minute URL.

CIRCL hashlookup file-hash reputation (keyless). POST {sha1}/{md5?}/{sha256?} — at least one hash required. Empty -> 400 not charged. Distinct file-hash lane — disclose security adjacency vs openssf/osv/nvd/crt.

crt.sh Certificate Transparency search (keyless). POST {q} required. Empty -> 400 not charged. Distinct CT/PKI lane — disclose security adjacency vs openssf/osv/nvd.

Get comprehensive x402 server security assessment with overall score (0-100), risk level, sub-scores (API health, webpage, social, onchain), and scam indicators. Ideal for pre-transaction safety validation. Price: $0.01 USDC

Premium low-cost public domain/company enrichment for AI agents. One call combines homepage metadata, JSON-LD organization evidence, public social/about/contact-page links, A/AAAA/MX/SPF/DMARC DNS, security headers, technology hints, redirects, and evidence hashes. Public HTTPS + DNS only.

Assay Live Endpoint Security & Schema Auditor: Audits live A2A, MCP, and x402 endpoints for schema conformance, latency, and payment integrity.

chipscan fast token security audit

AI meeting notetaker comparison dataset: 13 commercial tools plus Microsoft Teams, Google Meet and Notion, compared on pricing (incl. hidden costs), Dutch/French support, speaker identification, export data quality, security certifications and EU/GDPR posture. Independent research by Machinegeist; no vendor affiliations, no commissions.

Assay A2A & MCP Pre-Flight Security Audit & TDQS Certification ($0.005 Base USDC)

Public domain DNS, mail configuration and HTTP security headers

Autonomous smart contract security auditor — 20+ vulnerability classes, PoC exploits

Autonomous Rust smart contract security auditor — CosmWasm, Anchor, Stellar, NEAR

Passive HTTP security header review for an authorized external target (no exploitation; platform hosts blocked)

Agent Vetting Bureau — Static security dossier of an MCP server / agent endpoint: endpoints, data flows, network calls, exfil signals, permissions requested, deterministic reputation score. Params: url (http/https).

Security headers audit for a URL — HSTS, CSP, clickjacking, cookie flags, info leaks. Returns score 0-100, findings with severity and fixes.

One-call domain due diligence: RDAP registration (age, registrar, expiry), DNS (A/AAAA/NS/CAA, DNSSEC), email setup (MX/SPF/DMARC), HTTPS reachability with security-headers grade, and risk flags such as newly_registered_lt_30d.

AI Security Guard content scanner. Detects prompt injection, intent drift, and credential exfiltration. $0.0015-$0.024 by size. Full docs: https://aisecurityguard.io/v1/skill

Audit a public HTTPS x402 API without payment: HTTP 402 challenge metadata, Bazaar and well-known discovery, OpenAPI 3.1 operation schemas and payment declarations, redirects, latency, and security headers.

Base token due diligence: exact-block contract code, ERC20 metadata and proxy storage; available GoPlus security flags and derived GeckoTerminal liquidity observations. Explicit missing-data coverage. Timestamped evidence, no trade advice.

Composite 0-100 buy-safety score for any token: combines contract security analysis (honeypot, taxes, ownership risks) with live market depth (liquidity, volume, activity) into a single verdict: avoid | high-risk | caution | ok | strong. One call answers 'should my agent touch this token?'

Inspect a public webpage for automation readiness, integration links, forms, robots policy, and security headers.

Combined pre-trade safety check: on-chain risk score (proxy + privileged-function detection from live bytecode) plus Telegram alert-channel monitoring, in one call. Cheaper than calling /v1/scan and /v1/alert-check separately ($0.04 vs $0.05), and the two signals are worth more together — a contract with privileged functions that is also being flagged in a security channel is a different situation

Use when you need to know what a website is built with (CMS, frameworks, analytics, CDN, hosting), who hosts its email and DNS, and how good its security headers are. Up to 3 domains per call; fetches each homepage once, follows robots.txt.