Security x402 offerings

Performs fast-path network connectivity, TLS certificate, security header, and domain trust validation combined with an AI summary.

Verdix standard ($0.10): call before larger or repeated payments to an EVM address on Base, when an address-age read is not enough. Sanctions, scam/phishing lists, address poisoning and contract/depl…

Verdix lite ($0.01): call before an agent sends funds to an unfamiliar EVM address on Base, when cost matters most. Checks OFAC sanctions, scam/phishing lists, address poisoning, phishing tokens and …

Verdix deep ($0.50): call before large or first-time payments to an EVM address on Base when your policy asks for the top tier. Same full check set as standard: sanctions, scam/phishing lists, addres…

Verdix quick ($0.02): call before an agent pays or sends funds to an EVM address on Base, e.g. an x402 payTo, a withdrawal or a pasted address. Checks OFAC sanctions, scam/phishing lists, live addres…

Verdix: call before an agent sends funds to an EVM address on Base. Returns safe/caution/danger with reasons from OFAC sanctions, scam/phishing lists, address-poisoning lookalikes, burn-address and c…

One endpoint for hashing and encoding: sha256, sha512, sha3, keccak256, md5, sha1, blake2, ripemd160, crc32, all-hashes-at-once, HMAC, base64/base64url, hex, URL and base58 encode/decode, JWT decode …

Follow the redirect chain of a URL (up to 10 hops): status code and time of each hop, final URL, domain changes and HTTPS-to-HTTP downgrades. Unmask short and affiliate links before visiting them.

Website security headers audit: HTTPS, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and cookie flags, with a score.

Email security of a domain: MX, SPF (final policy, multiple-record and lookup-limit problems), DMARC (policy, subdomains, reporting), MTA-STS, TLS-RPT and BIMI, with a score and recommendations. Dete…

Details of a CVE vulnerability (e.g. CVE-2021-44228) from the official CVE Program (MITRE CVE Services): title, description, severity and CVSS vectors, affected products and versions and references, …

Analyze raw email headers: sender, recipient, subject, server hops (Received) with delays, SPF/DKIM/DMARC results, Return-Path and Reply-To mismatches and spoofing signals, with a verdict. Investigat…

Validate a Spanish Social Security affiliation number (12 digits: province, number, control) and return the province of registration. Computed locally; nothing stored.

Analyze raw email headers: sender, recipient, subject, server hops (Received) with delays, SPF/DKIM/DMARC results, Return-Path and Reply-To mismatches and spoofing signals, with a verdict. Investigat…

Decode a JWT and verify its signature with the public keys of a JWKS URL (RS256, ES256, EdDSA...) or an HMAC secret, checking expiry, audience and issuer; returns header, claims and the exact reason …

Redact personal data from text without AI: emails, phone numbers, IBANs, card numbers (Luhn-checked), Spanish DNI/NIE, IPs, crypto addresses and URLs, replaced by labels ([EMAIL_1]) or asterisks. Bef…

Email security of a domain: MX, SPF (final policy, multiple-record and lookup-limit problems), DMARC (policy, subdomains, reporting), MTA-STS, TLS-RPT and BIMI, with a score and recommendations. Dete…

Details of a vulnerability by id (CVE-2021-44228, GHSA-..., PYSEC-...): summary, description, severity and CVSS vector, affected packages, fixed versions and references. OSV.dev data.

Email validation: syntax, domain MX records and disposable-domain flag. Sends no email; the address is not stored.

Verify an Ed25519 Solana signature (Phantom/Solflare signMessage) for a message and public key; signature in base58, base64 or hex. Local computation.

Spanish tax ID validation (DNI/NIF, NIE and company CIF) with check-digit verification. Computed locally; the ID is not stored.

Vulnerabilities being actively exploited according to CISA's KEV catalog: CVE, vendor, product, name, description, date added, remediation due date and ransomware use; the latest N days or search by …

How ready a website is for AI agents: llms.txt, AI-crawler rules in robots.txt, sitemap, x402 payment discovery, OpenAPI, MCP manifest, security.txt, with a 0-100 score and concrete recommendations.

TLS certificate of a domain: issuer, validity dates, days until expiry, names covered (SAN), whether it matches the domain and is trusted, TLS version and cipher. For uptime and security monitoring.