SOAP Security Policy Audit API

SOAPWSDLWS-Policyx402

Compare WS-Policy and WS-SecurityPolicy assertions in caller-supplied WSDL 1.1 documents. No network calls are made.

API Documentation
POST/api/v1/soap-security/soap-security-policy-audit$0.05 USDC

Compare WS-Policy and WS-SecurityPolicy assertions across caller-supplied WSDL 1.1 bindings and operations. audit_status is valid, warnings, policy_conflicts, invalid, or incomplete. risk_level is low, medium, high, or critical. A declared policy is not evidence that a server enforces it. Imports are not fetched.

POST/api/v1/soap-security/policy-strength$0.04 USDC

Score a caller-supplied algorithm suite, body signature, body encryption, timestamp, and token kind. Basic256Sha256 contributes the most, TripleDes and None the least. A username token scores below an X.509 token. The grade follows that score. No certificate is validated and no policy file is fetched.

Other products in this area. Open one for its resources and price.

CVE & Dependency Security API

Independent API for vulnerability and dependency security: CVE details, package checks, batch queries, risk assessments, dependency trees, project health, repository Scorecard, and lockfile auditing from OSV, CISA KEV, FIRST EPSS, NVD, Google deps.dev, and OpenSSF Scorecard.

SecurityVulnerabilitiesCVEDependencyx402

Software Supply Chain Security API

Independent SBOM and dependency checks for exact package versions: OSV advisory ranges, CISA KEV exposure, open-source licence policy, and publicly documented malicious-package advisories.

SecuritySBOMDependenciesLicencesx402

Federation Authorization Audit API

Compare authorization directives and deployment configuration across caller-supplied GraphQL Federation subgraphs. No gateway is contacted.

GraphQLFederationAuthorizationx402

WSDL XSD Dependency Audit API

Compare caller-supplied WSDL 1.1 and XSD documents for broken references and syntactic contract changes. No documents are downloaded.

SOAPWSDLXSDx402

Domain Infrastructure Consistency Audit API

Compare caller-supplied DNS, certificate, address, ASN, and RPKI snapshots, and review custom-domain onboarding evidence. No network lookups are made.

DNSTLSRPKIx402