Threat Intelligence & Public Signals API

Threat IntelligenceIoCPhishingCertificatesDNSx402

Aggregate verified key-free public threat feeds, enrich IoCs, analyze domain history, cluster certificate and phishing infrastructure, detect typosquats, review exposed-service inventory, and score indicator confidence—without API keys, paid providers, or intrusive scanning.

API Documentation
POST/api/v1/threat-intelligence/public-threat-feed-aggregate$0.05 USDC

Aggregate caller-supplied and verified key-free public threat feeds (CISA KEV, OpenPhish, capped PhishTank). URLhaus/ThreatFox require auth and are not queried. Feed hits are not confirmed malice.

POST/api/v1/threat-intelligence/ioc-context-enrich$0.04 USDC

Enrich supplied IPs, domains, URLs, and hashes using caller context plus optional public DNS/feeds. A single weak feed hit is never classified as malicious.

POST/api/v1/threat-intelligence/domain-threat-history$0.04 USDC

Analyze publicly accessible domain history and DNS/RDAP context from caller fields and optional key-free public lookups. History attributes alone are not malice.

POST/api/v1/threat-intelligence/certificate-threat-cluster$0.04 USDC

Identify relationships between domains using caller-supplied certificates and optional public crt.sh data. Shared certificate attributes are linkage evidence, not confirmed abuse.

POST/api/v1/threat-intelligence/typosquatting-domain-detect$0.03 USDC

Identify domains resembling supplied brand or company domains using local string/keyboard heuristics. Resemblance alone is not confirmed phishing.

POST/api/v1/threat-intelligence/phishing-infrastructure-cluster$0.04 USDC

Group related phishing domains and infrastructure using caller evidence and optional public phishing feeds. Clusters are relationship hypotheses, not confirmed campaigns.

POST/api/v1/threat-intelligence/exposed-service-risk-analyze$0.04 USDC

Analyze caller-supplied external service inventory and scan results for exposure risk. Never initiates intrusive network scanning.

POST/api/v1/threat-intelligence/threat-indicator-confidence-score$0.03 USDC

Calculate explainable confidence scores for supplied threat indicators using multi-source corroboration. Single weak signals are capped and never claimed as confirmed malice.

Other products in this area. Open one for its resources and price.

CVE & Dependency Security API

Independent API for vulnerability and dependency security: CVE details, package checks, batch queries, risk assessments, dependency trees, project health, repository Scorecard, and lockfile auditing from OSV, CISA KEV, FIRST EPSS, NVD, Google deps.dev, and OpenSSF Scorecard.

SecurityVulnerabilitiesCVEDependencyx402

Software Supply Chain Security API

Independent SBOM and dependency checks for exact package versions: OSV advisory ranges, CISA KEV exposure, open-source licence policy, and publicly documented malicious-package advisories.

SecuritySBOMDependenciesLicencesx402

Malware & File Threat Intelligence API

Extract behaviour indicators, cluster artifacts, analyze executable metadata, detect macro/document risk, extension mismatches, suspicious script patterns, archive payload risks, and IoCs—using local static parsing of caller-supplied files and analysis reports only.

MalwareFile SecurityIoCStatic AnalysisArchivesx402

Cybersecurity Configuration Intelligence API

Read security headers, TLS, cookies, CORS, and CSP from a public URL or from configuration supplied by the caller. Listed paths are the only extra resources requested.

SecurityHeadersTLSx402

Email & Domain Intelligence API

Check email syntax, MX, SPF, DKIM, DMARC, RDAP registration, and public TLS for a domain. Mailbox existence is not tested, and no reputation score is invented.

EmailDNSDeliverabilityx402