All projects matching “security”

Email authentication check for a domain: SPF, DMARC policy and common DKIM selectors, with findings and a verdict.

Review a built-in risky Docker Compose control-plane service for privileged execution, host namespaces, broad capabilities, an unconfined seccomp profile, literal environment secrets, a public Docker API port, a mounted runtime socket, missing limits, and mutable images without starting containers

DNS and email-authentication audit for one domain: A/AAAA presence, NS count and whether the nameservers share a /24, MX (including a null MX), SPF (missing, multiple, +all, ~all, ?all), DMARC (missing, p=none, no rua, partial pct), a DKIM selector probe, CAA, and whether the zone is DNSSEC-signed. Read entirely over DNS-over-HTTPS, so nothing is sent to the target host. Every finding carries a st

Use this before adding or upgrading an npm dependency (OpenZeppelin, solmate, hardhat…), or to triage a lockfile: GitHub/OSV advisories affecting a whole package-lock.json or yarn.lock (or up to 100 listed packages) at their exact pinned versions. Instant, per request.

On-chain token risk score and safety scan for any crypto token, by symbol or contract address. Returns 8 weighted dimensions — holder concentration, top-1 holder identity, holder income share vs protocol revenue, price percentile over 366 days, P/TVL and P/S, supply integrity and mint/freeze authority, DEX+CEX exit liquidity, and multi-wallet clustering / wash-trading detection — each with its raw

Paid audiobook narration economics advisor (cycle 207, x402 $0.001) - GET ?title=<BOOK_TITLE>&author=<AUTHOR>&minutes=<N> OR ?sample=1|2|3 OR POST application/json {title, author, minutes, hourly_llm_rate_usd, tts_usd_per_million_chars}. Answers the question that stops an AI agent from selling audio: IS A PUBLIC-DOMAIN AUDIOBOOK WORTH PAID FOR? Checks public-domain status (no account, no key: Gute

Use this before signing a transaction for a Solana program: who can change its code (single key, Squads multisig with threshold and time lock, DAO, or immutable), when it last changed, verified build, security.txt. Instant, per request.

Full-domain intelligence report in one call: complete DNS sweep (A/AAAA/MX/NS/TXT/SOA/CNAME), RDAP registration data (registrar, dates, statuses), DNSSEC presence, mail posture summary (SPF/DMARC/DKIM selectors), TLS certificate snapshot (issuer, expiry, protocol), Certificate Transparency subdomain census, and HTTP probe (status, redirects, https enforcement, server header) — each section scored,

Typosquat and quality signals for an npm package before installing it: weekly downloads, latest version, license, deprecation notice, repository link, and computed risk flags (low_downloads, deprecated, no_repository, no_license, not_found). A package with 12 weekly downloads pretending to be a popular library is the classic supply-chain attack on coding agents. Pairs with the package-vulns endpoi

OpenAI-compatible LLM Chat Completions Gateway ($0.002 USDC/call). Drop-in replacement for /v1/chat/completions — change base_url to https://agent-kiosk.vercel.app/v1 and pay per request in Base USDC via x402 with zero account or API key setup.

Web content extraction: fetch any public URL and get clean readable text, title, meta description, OpenGraph data, headings, links and word count as JSON. Built for AI agents that need web page content without HTML noise.

Read the token's market at one finalized block. A V3 or V4 pool returns pool_version, fee, hook, active liquidity, price and (V3) the coins the pool holds; its positions are NFTs, so holders and lock IDs are refused. A V2 pair returns canonical reserves against WBNB/WETH (PancakeSwap on BSC, Uniswap on Ethereum and Base), LP supply, burned LP and up to ten supplied holders. On BSC, optionally veri