Browse indexable security x402 offerings, including provider, method, and service details.
4139 indexable offerings in this category.
When does this domain's TLS certificate expire, and is renewal stuck? Input: ?domain=example.com. Returns issuer, not_after, days_left, % lifetime used, renewal cadence, a renewal-stall flag (from Certificate Transparency logs via Cert Spotter) and a live HTTPS handshake/status probe. $0.01 USDC on Base. Certificate details come from CT logs, not the live served cert. For cert+DNS+expiry in one call use /v1/site-health ($0.03).
Recurring public "State of OT Threat Intel — GCC" sitrep, human-reviewed before publish, sourced from the same intel.db pipeline as /ot/sitrep. Pass optional issue_date (YYYY-MM-DD) for a past edition; omit for the latest reviewed edition.
Capability x opportunity x intent threat score for an actor-target pairing. Pass actor, sector, region, vendor_stack. Deterministic scoring: actor/CVE/campaign data plus GDELT tension and OFAC sanctions pressure. Not LLM-generated.
OT/ICS patch feasibility for a CVE. Pass ?id=CVE-XXXX-XXXX. Returns patch availability, OT-safe workarounds, patch complexity per ICS layer, estimated downtime, safe-to-patch-live flag, deployment strategy, and risk-vs-disruption score 1-10.
OT/ICS/SCADA threat intelligence for AI agents and industrial SOC automation. 40 pay-per-call endpoints across primitive, analytical, and composed-synthesis tiers, covering CVE triage, internet-exposed device lookup, ICS threat actor profiles (SANDWORM, VOLTZITE, XENOTIME), IOC enrichment with OT campaign context, CISA ICS-CERT advisory feed, patch feasibility assessment, asset risk verdict (es...
OT/ICS/SCADA threat intelligence for AI agents and industrial SOC automation. 40 pay-per-call endpoints across primitive, analytical, and composed-synthesis tiers, covering CVE triage, internet-exposed device lookup, ICS threat actor profiles (SANDWORM, VOLTZITE, XENOTIME), IOC enrichment with OT campaign context, CISA ICS-CERT advisory feed, patch feasibility assessment, asset risk verdict (es...
IOC enrichment with ICS campaign context. Pass ?value=1.2.3.4&type=ip or type=domain. Queries AlienVault OTX, AbuseIPDB, and DeepSeek CTI for OT campaign association. Returns verdict on whether the IOC is linked to ICS-targeting campaigns.
OT/ICS/SCADA threat intelligence for AI agents and industrial SOC automation. 40 pay-per-call endpoints across primitive, analytical, and composed-synthesis tiers, covering CVE triage, internet-exposed device lookup, ICS threat actor profiles (SANDWORM, VOLTZITE, XENOTIME), IOC enrichment with OT campaign context, CISA ICS-CERT advisory feed, patch feasibility assessment, asset risk verdict (es...
Build an otpauth:// provisioning URI (the string encoded in authenticator QR codes) for a totp or hotp secret. Includes label, issuer, algorithm, digits and period (totp) or counter (hotp). The secre…
Verify a submitted TOTP code against a base32 secret, scanning ±window time steps (default ±1) to tolerate clock drift. Returns valid plus the matching step offset (delta). A code that does not match…
Generate an RFC 6238 time-based one-time password from a base32 secret. Uses the current time by default, or an explicit unix timestamp (seconds); configurable period (default 30s), digits (default 6…
Generate an RFC 4226 counter-based HMAC one-time password from a base32 secret and counter. Configurable digits (6–10, default 6) and algorithm (SHA1/SHA256/SHA512, default SHA1). An invalid base32 s…
One call returns the full domain profile for vetting, deliverability, or phishing/fraud checks: live DNS (A/MX/NS + record counts), RDAP/WHOIS registration (registrar, domain age, expiry, status, DNSSEC) and email authentication (SPF, DMARC policy, detected DKIM selectors) — plus a one-line summary. Bundles three lookups into one hourly-fresh read. Keyless, license-clean, pay-per-call.
Domain age and registration intel from authoritative RDAP/WHOIS records: exact creation date, age in days and years, expiration date and days-until-expiry. The fast trust and risk signal agents use to vet a counterparty, link, or sender and to flag newly-registered or soon-to-expire domains. Returns structured JSON, keyless, pay-per-call. ccTLDs without RDAP return an uncharged 503.
Overwing guardrail: check text before you send, post, or act on it. Content moderation, PII detection, confidential leak detection, toxicity, self-harm and severity in ~150 ms. Returns a verdict plus one recommended_action (block / redact / review / allow) with calibrated confidence. Pass context (recipient, channel, owns_contact_info) with the outbound-message set. $0.002 USDC, no account.
Overwing guardrail: check text before you send, post, or act on it. Content moderation, PII detection, confidential leak detection, toxicity, self-harm and severity in ~150 ms. Returns a verdict plus one recommended_action (block / redact / review / allow) with calibrated confidence. Pass context (recipient, channel, owns_contact_info) with the outbound-message set. $0.002 USDC, no account.
Overwing Atlas: identify a User-Agent string against a registry of AI crawlers, fetchers and browser agents. Returns the claimed agent, operator, purpose, verification method (Web Bot Auth vs spoofable) and a trust note. GET ?user_agent=... $0.001 USDC.
Overwing Preflight for x402: should an agent sign this payment? POST the PAYMENT-REQUIRED terms and your policy; get allow, review or refuse with reasons: terms vs policy, payee vs the x402 directory and the server's own manifest, price vs the record. $0.002 USDC, no account.
Overwing guardrail: check text before you send, post, or act on it. Content moderation, PII detection, confidential leak detection, toxicity, self-harm and severity in ~150 ms. Returns a verdict plus one recommended_action (block / redact / review / allow) with calibrated confidence. Pass context (recipient, channel, owns_contact_info) with the outbound-message set. $0.002 USDC, no account.
Overwing guardrail: check text before you send, post, or act on it. Content moderation, PII detection, confidential leak detection, toxicity, self-harm and severity in ~150 ms. Returns a verdict plus one recommended_action (block / redact / review / allow) with calibrated confidence. Pass context (recipient, channel, owns_contact_info) with the outbound-message set. $0.002 USDC, no account.
Domain age checker and RDAP trust signal: creation date, age, expiry, registrar, nameservers and DNSSEC, with machine-readable escalation into due-diligence and vendor screening.
Free discovery preview for SI SENTINEL PayGuard. Try /examples without a wallet. Verify and install /client.mjs. Live seller inspection costs $0.005 on the separate paid route.
Check dependencies before your coding agent installs them: up to 20 packages per call (npm, PyPI, crates.io, Go, Maven, NuGet, RubyGems), one decision each: ALLOW, CAUTION or BLOCK with reasons. Catches hallucinated package names that do not exist (slopsquatting), known malware (OSV malicious-package feed, including versions already removed from the registry), typosquats one typo away from a popular package, critical and high vulnerabilities in the exact version with a safe upgrade, deprecated…
npm package safety gate: vulnerabilities, malware advisories, typosquatting, install-script risk.