2,423 servers in Security
Passive domain-perimeter checks — cert expiry, subdomain takeover, lookalikes — as agent tools
Free front-end security check for any website: a grade plus the secrets and keys it exposes.
Live trust signals for domains & packages: age, registrar, typosquat resemblance.
26 pay-per-call tools for agents: scrape, verify, guards, crypto. x402 USDC on Base.
Build and test FaceSign step-up verification flows from your AI coding tool
AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.
Continuous website testing by Validoria — monitor security, SEO, performance, and accessibility.
Free no-key IP intelligence: geolocation, VPN detection, DNS, WHOIS, blacklists, breach checks
Tracea — legal identity (Know Your Agent) for AI agents, on-chain. ERC-8004 compatible.
Read-only crypto safety: token honeypot checks, EIP-712 signature decode, approval scans.
Dev-registry data: npm/PyPI/Docker/VS Code packages, dep graphs, vulns, 50+ ecosystems.
Scan the open TCP ports of your own public IP. Fast (32) or deep (65535). No key, no signup.
Find known subdomains of a domain. Passive data; may include historic entries. List or count.
Compliance & security scan for your app: secrets, exposed files, headers, privacy, AI-disclosure.
Risk-ranked registry of AI tools: look up an AI tool's risk or check if a domain is shadow AI.
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.
Token risk, wallet profiles, OFAC screening, whale trades on 6 chains. x402, USDC per call.
Operated by SpendPreflight: free x402 Lint risk scores, paid Listing Guard and seller monitoring.
Agent-readable feed: AI/agent tech news, security advisories, compliance deadlines, and live events.
Is it down, or just you?
Scan any MCP server for tool-poisoning/prompt-injection/exfiltration (OWASP LLM01/08) + Base data
Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.
Ask questions about your login security data: risk scores, blocked logins, Tor, VPN and bot traffic.
Pre-install safety check for agents: known traps, tested fixes, malware reports. No account.
KYA backed by a real company: e-CNPJ-signed agent mandates, revocation-checked, signed verdicts
Anonymous, encrypted disclosure of AI alignment and safety failures, with signed receipts.
Free AI test helpers: injection inputs, OWASP mapping, release plans, response and tool-call packs.