All projects matching “security”

Smart Contract Audit — Security review of a single contract

529 withdrawal & rollover checker — is THIS withdrawal qualified? K-12 (OBBBA $20k cap from 2026 + expanded categories), postsecondary credentialing, SECURE 2.0 Roth rollovers (15-yr/5-yr/earned-income/$35k gates computed), student-loan cap, non-qualified tax + 10% penalty math with exception routing — plus the California non-conformity traps (K-12, credentialing and 529→Roth are ALL CA-taxable +

Latest releases of the 10 main Ethereum clients as JSON: execution (go-ethereum, Nethermind, Besu, Erigon, Reth) and consensus (Lighthouse, Prysm, Teku, Nimbus, Lodestar). Version, date, days since release, link to notes, and a plain keyword flag when notes mention security or urgent upgrades.

Security advisories: Known exploited vulnerabilities (CISA KEV) enriched with daily FIRST EPSS exploit probability. Use when a user asks whether a CVE is actively exploited, which vulnerabilities in a vendor or product to patch first, whether it is used in ransomware campaigns, or needs CISA KEV due dates, required actions and FIRST EPSS exploit probability in one call.

Request an https URL and report whether it is reachable, its status, every redirect hop with timings, key and security headers (HSTS, CSP and others), and the TLS certificate with its issuer, the names it covers and the days until it expires. An unreachable URL is a result too, with the reason.

Get a random interesting joke. Secured with x402 payment protocol on Base mainnet.

Domain and email security check: SPF, DKIM, DMARC, MX, MTA-STS, TLS-RPT, DNSSEC (validated by Cloudflare and Google), CAA, BIMI with its mark certificate, mail IPs on the UCEPROTECT Level 1 blocklist, TLS certificate, registrar and domain age, and Microsoft 365 tenant, each graded with the exact record to fix it, plus a 0-100 score

Payment security firewall scan for an OUTGOING x402 payment: PII/secret leak detection in payment metadata, nonce replay detection, overpayment detection, prompt-injection-triggered payment analysis (fast + deep tiers), canonical-USDC asset verification, merchant pinning, velocity/spend caps, and counterparty reputation cross-check. Returns allow/flag/block with per-check reasons and an Ed25519-si

Email authentication posture check: parses SPF, DMARC and DKIM plus MX for any domain and grades deliverability/anti-spoofing gaps (SPF +all, SPF >10 lookups, DMARC p=none, missing DKIM). Clean JSON for deliverability and security-ops automation.

Analyze a Base Mainnet token contract: block-pinned owner(), ERC-1967 proxy slots, ERC-20 metadata, code hash, best-effort source match and prior-snapshot comparison when available. Free POST /v1/prepare returns report_id; paid GET /v1/report reads it for 0.01 USDC via x402. Not a security audit.

Give this tool a list of domain names and it will instantly check each one's DMARC email security record. DMARC is a standard that tells email providers how to handle fake or spoofed emails pretending to come from your domain. For each domain you submit, you get back whether a valid record exists, what the policy is (none, quarantine, or reject), whether reporting addresses are set up, and the ful

Performs comprehensive URL health checks, measuring response time, status code, security headers, and TLS/SSL certificate validity. Route: GET /paid/health-check?url=https://example.com. Ideal for automated monitoring and endpoint auditing.

InboxGuards Email Test: Email security fix plan: the exact SPF, DKIM and DMARC records to publish, with steps for your DNS host. Reads the domain's live MX, NS, SPF, DKIM and DMARC records, detects the mailbox provider and DNS host, and returns the exact records to publish in order (create / replace / keep, name, value, why): one merged SPF within the 10-lookup limit, DKIM records or the provider

Before an AI agent trusts or pays a public API, inspect its public machine-readable evidence and x402 readiness. Submit a public HTTPS domain to check its agent card, OpenAPI, robots policy, and settlement-aware x402 signals, or submit a Base address for public onchain evidence. Returns a timestamped JSON report; not a security or compliance audit.

Counterparty check before paying a platform or crypto provider: French AMF blacklists, ESMA MiCA register (authorised and non-compliant CASPs), sanctions lists (EU, UN Security Council, US OFAC SDN). Official public data, refreshed daily.

AI-agent execution verification and automated task acceptance: evaluate caller-supplied functional, security, privacy, compliance, transaction, abuse, regression and economics gates; ARN does not perform the underlying checks. Re-run for each release or evidence change; sustained CI users can switch to the 30-day Release Guard pass.

Is this token safe to buy? Honeypot detection, rug-pull and scam check for any ERC-20 token contract -- flags can't-sell traps, hidden mints, malicious buy/sell taxes, unverified source, and holder concentration. GoPlus-powered token security scan with risk score 0-100. Not an audit.

Latest US Treasury securities auction results as clean JSON

MCP security checks and feedback for users and developers. Choose paid access without reports, or ongoing free access within limits: POST /v1/client-token; 1 check/24h + 1 for a previous-use report. Check URL/DNS, metadata/schema/auth, OSV/CVE risk and catalog drift before connecting. Verified owners can read consented weekly reports. ALLOW/BLOCK/UNKNOWN uses caller-confirmed versions. No tool exe

Safety Check (TAP Labs (made by TAP)): Token safety and security check for a token on Base or Solana, or a contract on Base, before you buy or swap. Looks for scam and rug pull warning signs: who can mint, freeze, blacklist, pause, tax or upgrade it, thin liquidity, a brand-new pool, big holders (Solana; Base tokens under 5 hours old), unverified code and scam-list matches (Base) and OFAC sanction

Package security scanner — CVEs, license check, typosquat detection.

US overnight interest rates — latest SOFR and effective federal funds rate (EFFR), transaction volumes and policy target bounds. Compare secured and unsecured dollar funding costs and track monetary policy. x402Atlas is not affiliated with the New York Fed. The New York Fed does not sanction, endorse, or recommend any products or services offered by x402Atlas.

Know Your Merchant (KYM) trust score: pass a merchant domain and get a deterministic 0-100 trust score with a band (high/medium/low/very_low/avoid) and human-readable reasons. Live signals: domain age from the RDAP registry of record, malware/phishing blocklist verdict via Cloudflare Security DNS, TLS certificate health, mail capability, and refund/privacy/contact page presence. The merchant-side

Try with $0.050 in free shared credit once per wallet. No deposit or on-chain transaction; wallet sign-in required. Credit, daily budget and availability apply. Analyze a selected Base token pool: USD liquidity, 24h volume, price change, rule-based observations and an AI summary with sources. For agent market reports, not contract-security checks or investment advice. Paid price: $0.015. Docs: htt

ERC-20 token due diligence — risk score, GoPlus security scan, honeypot detection, liquidity, holder concentration, AI analyst verdict

Fetches live offers from a public bridge aggregator and reports for every option what arrives, what it costs in fees and gas, and how long it usually takes. The security model is given equal weight to the price: bridges are the most expensive failures this industry has, so trust_assumptions spells out who a user has to trust for that route to hold. No recommendation is forced - three best values b

Agent Reliability Network: ARN x402 PayGuard provides x402 payment security for autonomous AI agents. Check the seller before you pay with payment preflight and payment-challenge validation. Returns ALLOW, CAUTION, or BLOCK.

Resolve ONE DNS record type for a domain -- the cheapest, narrowest domain-check endpoint. For all record types at once, use /domain/intelligence. For a bundled DNS+TLS+headers audit, use /web/audit (raw) or /security/posture (scored). For mail-security plus a scored verdict, use /domain/due-diligence.

Website audit bundle for local business websites and lead qualification: performance (browser-measured), security headers and TLS, SEO basics, accessibility and AI-crawler visibility of one public page, with section scores, grades and prioritized findings, in one call.

Is this vendor or domain safe? One call runs cert, DNS, email security, ransomware leak-site listing and vendor status checks and returns a verdict (safe, caution, risk, incomplete). $0.04 USDC on Base. Not charged if every check fails or input is invalid.