All projects matching “security”

SEC Form 13F aggregated holdings verdict: by manager (name or CIK) get the latest-quarter portfolio total, position count, top 10 holdings and quarter-over-quarter change; by CUSIP get how many 13F managers hold the security, aggregate value/shares and top holders. Aggregates computed from public-domain SEC Form 13F data sets.

Check a public website's security hygiene before your agent links to it, recommends it, or sends data to it. One URL in, deterministic JSON out: HTTPS and redirect chain, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, security.txt, robots.txt, sitemap.xml, plus plain-language notes. Private, localhost and raw-IP targets are rejected; error responses are no

pcmarts/open-release-demo-next v1.1.0 — release. open release demo example Security scan passed; signed download, 5-minute URL.

Website trust check: verdict (trustworthy_likely/caution/risky) with reasons from domain age (RDAP), DNS (A/MX/NS), HTTPS reachability and redirect chain, security headers, phishing/malware list snapshots, brand lookalike/typosquat detection, tech fingerprint and page title. Use when an agent is about to open, click, submit credentials or payment to, recommend or trust an unfamiliar URL or website

Fetches a public http(s) URL (GET, up to 5 redirects, 10s timeout, body never read) and grades its security headers A+ to F. Returns score, present and missing headers, per-header findings with copy-paste fix values, and cookie flag issues.

Statically analyse a Model Context Protocol (MCP) server manifest for security risks. Tool descriptions enter the model context, a prime prompt-injection vector. Deterministic and offline (inline manifest). Flags dangerous capabilities (command/code execution, filesystem, credential and network access), injection patterns, hidden unicode and unconstrained parameters. Returns severity-ranked findin

Smart contract verification and security analysis on Ethereum Base BSC Arbitrum Polygon

Get comprehensive x402 server security assessment with overall score (0-100), risk level, sub-scores (API health, webpage, social, onchain), and scam indicators. Ideal for pre-transaction safety validation. Price: $0.01 USDC

One keyless verdict on any token: GoPlus security flags (mintable, honeypot, hidden owner, taxes, top-10 holders) combined with DexScreener market data (price, liquidity, volume) into avoid|caution|ok|unknown. No API keys, no accounts. Pricing: $0.006 per call in USDC on Base via x402 (eip155:8453).

Inspect a public webpage for automation readiness, integration links, forms, robots policy, and security headers.

Combined pre-trade safety check: on-chain risk score (proxy + privileged-function detection from live bytecode) plus Telegram alert-channel monitoring, in one call. Cheaper than calling /v1/scan and /v1/alert-check separately ($0.04 vs $0.05), and the two signals are worth more together — a contract with privileged functions that is also being flagged in a security channel is a different situation

Audit a public HTTPS x402 API without payment: HTTP 402 challenge metadata, Bazaar and well-known discovery, OpenAPI 3.1 operation schemas and payment declarations, redirects, latency, and security headers.

chipscan fast token security audit

AI Security Guard content scanner. Detects prompt injection, intent drift, and credential exfiltration. $0.0015-$0.024 by size. Full docs: https://aisecurityguard.io/v1/skill

AI meeting notetaker comparison dataset: 13 commercial tools plus Microsoft Teams, Google Meet and Notion, compared on pricing (incl. hidden costs), Dutch/French support, speaker identification, export data quality, security certifications and EU/GDPR posture. Independent research by Machinegeist; no vendor affiliations, no commissions.

Use when you need to know what a website is built with (CMS, frameworks, analytics, CDN, hosting), who hosts its email and DNS, and how good its security headers are. Up to 3 domains per call; fetches each homepage once, follows robots.txt.

Composite 0-100 buy-safety score for any token: combines contract security analysis (honeypot, taxes, ownership risks) with live market depth (liquidity, volume, activity) into a single verdict: avoid | high-risk | caution | ok | strong. One call answers 'should my agent touch this token?'

Technical SEO audit of one page: HTTP status, redirect chain, title and meta description length, H1 count, canonical, robots meta, hreflang, Open Graph and Twitter tags, JSON-LD types, images without alt text, link counts, security headers (HSTS, CSP, X-Frame-Options), technology detection (CMS, framework, analytics, CDN) and a prioritised issue list with a 0-100 score. Static HTML only; honours r

Premium low-cost public domain/company enrichment for AI agents. One call combines homepage metadata, JSON-LD organization evidence, public social/about/contact-page links, A/AAAA/MX/SPF/DMARC DNS, security headers, technology hints, redirects, and evidence hashes. Public HTTPS + DNS only.

Provide a public domain, HTTP(S) URL or email to retrieve Google DNS and RDAP observations. Returns DNS record sets, provider DNSSEC AD flag, registration metadata, capture times and per-query gaps. Failed queries remain unknown rather than absent. AD and descriptive hygiene fields do not certify domain security, ownership or legitimacy.

Assay Live Endpoint Security & Schema Auditor: Audits live A2A, MCP, and x402 endpoints for schema conformance, latency, and payment integrity.

Autonomous Move smart contract security auditor — Aptos and Sui

Assay A2A & MCP Pre-Flight Security Audit & TDQS Certification ($0.005 Base USDC)

Run a bounded deterministic preflight scan for possible private keys, secret assignments, permissive CORS, debug mode, insecure HTTP, and invalid JSON. Not a comprehensive security audit.

Autonomous smart contract security auditor — 20+ vulnerability classes, PoC exploits

Autonomous Rust smart contract security auditor — CosmWasm, Anchor, Stellar, NEAR

Base token due diligence: exact-block contract code, ERC20 metadata and proxy storage; available GoPlus security flags and derived GeckoTerminal liquidity observations. Explicit missing-data coverage. Timestamped evidence, no trade advice.

Public domain DNS, mail configuration and HTTP security headers

Passive HTTP security header review for an authorized external target (no exploitation; platform hosts blocked)

Agent Vetting Bureau — Static security dossier of an MCP server / agent endpoint: endpoints, data flows, network calls, exfil signals, permissions requested, deterministic reputation score. Params: url (http/https).