Domain Infrastructure Consistency Audit API

DNSTLSRPKIx402

Compare caller-supplied DNS, certificate, address, ASN, and RPKI snapshots, and review custom-domain onboarding evidence. No network lookups are made.

API Documentation
POST/api/v1/domain-security/domain-infrastructure-consistency-audit$0.05 USDC

Compare caller-supplied DNS answers, certificate names, addresses, prefixes, and RPKI results for one domain. audit_status is consistent, inconsistencies_detected, warnings, or incomplete. risk_level is low, medium, high, or critical. No DNS, TLS, WHOIS, or BGP lookup is performed.

POST/api/v1/domain-security/infrastructure-health$0.04 USDC

Look through the supplied DNS records, certificate names, expiry date, and cipher names. A CNAME whose target has no A or AAAA in the snapshot, a certificate that omits the domain, an expiry before the supplied date, a weak cipher name, or a missing NS record raises the exposure. The grade follows that percentage. No DNS or TLS lookup is performed.

POST/api/v1/domain-security/custom-domain-onboarding-audit$0.05 USDC

Compare a custom domain, tenant, ownership TXT records, DNS targets, and platform assignment status. A dangling name is a potential condition only when the supplied assignment is unassigned or deleted. The audit does not query DNS or claim the domain.

POST/api/v1/domain-security/onboarding-readiness$0.04 USDC

Compare the supplied TXT name and token, the CNAME target, and a certificate flag. Readiness drops when the token is missing from the expected name, the CNAME does not match the target, or the certificate flag is false. The hijacking index rises when a CNAME points elsewhere, the token sits on another name, or the certificate does not cover the domain. No DNS lookup is performed.

Other products in this area. Open one for its resources and price.

CVE & Dependency Security API

Independent API for vulnerability and dependency security: CVE details, package checks, batch queries, risk assessments, dependency trees, project health, repository Scorecard, and lockfile auditing from OSV, CISA KEV, FIRST EPSS, NVD, Google deps.dev, and OpenSSF Scorecard.

SecurityVulnerabilitiesCVEDependencyx402

Software Supply Chain Security API

Independent SBOM and dependency checks for exact package versions: OSV advisory ranges, CISA KEV exposure, open-source licence policy, and publicly documented malicious-package advisories.

SecuritySBOMDependenciesLicencesx402

Federation Authorization Audit API

Compare authorization directives and deployment configuration across caller-supplied GraphQL Federation subgraphs. No gateway is contacted.

GraphQLFederationAuthorizationx402

SOAP Security Policy Audit API

Compare WS-Policy and WS-SecurityPolicy assertions in caller-supplied WSDL 1.1 documents. No network calls are made.

SOAPWSDLWS-Policyx402

WSDL XSD Dependency Audit API

Compare caller-supplied WSDL 1.1 and XSD documents for broken references and syntactic contract changes. No documents are downloaded.

SOAPWSDLXSDx402