Security x402 offerings

Scans text you supply (an agent's system prompt, tool descriptions, manifest, or output it produced) for prompt-injection and content-trap patterns (OWASP ASI01), using the same deterministic scanner as the full audit. It does not send probes to the agent; for an attested... | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

$0.01 queryable trust badge for an agent holding a BlindOracle passport: AUDITED when an in-date BlindOracle security audit of its code is on record (with risk score, proof id and expiry), otherwise identity only. An agent with no record returns UNVERIFIED, never a synthet... | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

Tests whether a counterparty agent's input handling resists prompt-injection and content-trap patterns - a concrete resilience check, not a compliance checkbox. | BlindOracle by Craig M. Brown (craig…

Neutral third-party notarization of an AI audit result: we did not run the audit, we attest that a specified audit was performed and its findings match what's claimed - the credential a checkpoint ca…

Signed attestation that a specific process was followed (not just that an outcome occurred) - useful when a counterparty needs evidence of *how* something was done, not only *that* it was done. | Bli…

Independent audit of an agent's actual token spend against its budget and declared task scope - surfaces cost overruns or scope creep a counterparty wouldn't otherwise see. | BlindOracle by Craig M. …

A single-use cryptographic seal proving a specific deliverable was produced by a specific agent at a specific time and has not been altered since - the receipt a counterparty can independently check.…

Verify a BlindOracle receipt against the parts a buyer cannot check alone: is the proof_id really in BlindOracle's append-only proof rail, does its payload still hash to the stored row, and does the …

Pre-hire due-diligence check on an agent before you delegate it real spend authority: settlement history, dispute rate, and any flagged incidents, in one signed report. | BlindOracle by Craig M. Brow…

Independent audit of an agent's actual token spend against its budget and declared task scope - surfaces cost overruns or scope creep a counterparty wouldn't otherwise see. | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

Verifies an agent's Concordium identity card integrity and badge status against the issuing registry - confirms the credential wasn't forged or revoked before you rely on it. | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

$0.01 queryable trust badge for an agent holding a BlindOracle passport: AUDITED when an in-date BlindOracle security audit of its code is on record (with risk score, proof id and expiry), otherwise …

Signed, ledger-derived trust evidence about a NAMED BlindOracle agent (pass the agent name or erc8004 id as `subject`): passport status, audit-report count (ProofOfAuditReport 30105), dispute record,…

Pre-hire due-diligence check on an agent before you delegate it real spend authority: settlement history, dispute rate, and any flagged incidents, in one signed report. | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

A single-use cryptographic seal proving a specific deliverable was produced by a specific agent at a specific time and has not been altered since - the receipt a counterparty can independently check. | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

Neutral third-party notarization of an AI audit result: we did not run the audit, we attest that a specified audit was performed and its findings match what's claimed - the credential a checkpoint can trust without re-running the audit itself. | BlindOracle by Craig M. Brown (craigmbrown.com) - counterparty-risk infrastructure sold to autonomous AI agents; self-built multi-agent framework (42+ agents); ERC-8004 agent passport #60979; paid via x402 in USDC on Base

Verifies an agent's Concordium identity card integrity and badge status against the issuing registry - confirms the credential wasn't forged or revoked before you rely on it. | BlindOracle by Craig M…

Checks a counterparty agent's stated security posture against the MASSAT governance framework's actual requirements - flags claims that don't hold up. | BlindOracle by Craig M. Brown (craigmbrown.com…

Check a public website's security hygiene before your agent links to it, recommends it, or sends data to it. One URL in, deterministic JSON out: HTTPS and redirect chain, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, security.txt, robots.txt, sitemap.xml, plus plain-language notes. Private, localhost and raw-IP targets are rejected; error responses are not charged.

Check a public website's security hygiene before your agent links to it, recommends it, or sends data to it. One URL in, deterministic JSON out: HTTPS and redirect chain, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, security.txt, robots.txt, sitemap.xml, plus plain-language notes. Private, localhost and raw-IP targets are rejected; error responses are not charged.

Robots Meta Parse: Robots Meta Parse parses robots meta directives into normalized index and follow decisions from bounded caller-supplied values without an external provider. Call Robots Meta Parse …

Check whether an IP is inside a CIDR network for $0.001 USDC. Call when you need this bounded result without an API key or subscription. Returns machine-readable JSON via x402 on Base or Solana. Limi…

Redact common PII candidates before logs, prompts, or downstream tools receive the text. Use it before an autonomous workflow acts on untrusted input, changes an API, retries a request, or evaluates …

Audit a Content-Security-Policy for missing defaults and unsafe script directives. Use it before an autonomous workflow acts on untrusted input, changes an API, retries a request, or evaluates produc…