Security x402 offerings

TLS certificate check for a domain - issuer, subject, validity window, days remaining and fingerprint

CVE lookup - description, status, CVSS metrics, weakness ids and references

Accessibility audit of a web page - missing alt text, unlabeled forms, link names, headings and a score

HTTP security header audit for any URL - HSTS, CSP, clickjacking, referrer policy, cookies and a letter grade

x402 endpoint trust report - repeated 402 probes, price stability, latency and Coinbase Bazaar usage

Package dependency risk - deps.dev advisories, license, release age, OpenSSF Scorecard and risk flags for an npm, PyPI, Go, Maven, Cargo or NuGet package

Known vulnerabilities for a package version (OSV) - CVE aliases, severity and fixed-in version

Audit up to 50 dependencies against OSV in one call - vulnerable count, severity and needed upgrades

Human approval and action authority - policy separating advice, drafting, staging and execution

Agent sandbox for untrusted code - isolation from credentials, files, internal network and resources

Agent tool security preflight - authority boundary, abuse cases, least privilege and a kill switch

Credential and secret rotation - inventory, scoped replacements, overlap, revocation and verification

OAuth and API authentication resolver - redirect, state and PKCE, audience, scopes and refresh

SSH lockout recovery and hardening - console access, keys, effective sshd config and safe changes

Use when you need Google advanced search operators for OSINT or security audits. Get the operators (site, filetype, inurl, intitle, AROUND) and queries for finding exposed files.

Prompt injection defense for agent workflows - trust boundaries, content labeling and external authorization

Drained Solana wallet incident response - preserve evidence, find the cause and move to a clean wallet

Keep API keys and wallet keys out of agent prompts, logs and repos - brokers and short-lived scoped credentials

Logging, privacy and retention - event schema, redaction, access control and deletion policy

Prevent wrong-network crypto transfers - verify deposit instructions, contract or mint and address format

Agent memory integrity - separate state, preferences, facts and credentials with provenance and deletion

IP address lookup - network owner, CIDR range, abuse contact, registration dates, reverse DNS and geolocation

Check a password against known data breaches by SHA-1 hash (k-anonymity) - times seen

SHA-256 hash of any text, plus SHA-1, SHA-512 and MD5 - send text, get the hash digest as hex or base64