Security x402 offerings

Estimate password strength with Dropbox's zxcvbn: score 0-4, estimated guesses and crack time for online and offline attacks, weak patterns found (dictionary, dates, sequences...) and tips. Evaluated…

Vulnerabilities being actively exploited according to CISA's KEV catalog: CVE, vendor, product, name, description, date added, remediation due date and ransomware use; the latest N days or search by …

Estimate password strength with Dropbox's zxcvbn: score 0-4, estimated guesses and crack time for online and offline attacks, weak patterns found (dictionary, dates, sequences...) and tips. Evaluated…

Email validation: syntax, domain MX records and disposable-domain flag. Sends no email; the address is not stored.

Your public IP address as the server sees it, IPv4/IPv6, whether it is public or private, plus your user agent. Calculated by Vextorium, no third-party lookups. Check where an agent exits from or whe…

Verify a Sign-In with Ethereum (EIP-4361) login: parses domain, address, chain, nonce and dates, checks the signature and expiry, and optionally the expected domain and nonce. Authenticate users or a…

Verify an Ethereum signature: a personal_sign (EIP-191) message or EIP-712 typed data. Recovers the signer address and, if you pass one, confirms it matches. Local computation; EIP-1271 contract wall…

TLS certificate of a domain: issuer, validity dates, days until expiry, names covered (SAN), whether it matches the domain and is trusted, TLS version and cipher. For uptime and security monitoring.

One endpoint for hashing and encoding: sha256, sha512, sha3, keccak256, md5, sha1, blake2, ripemd160, crc32, all-hashes-at-once, HMAC, base64/base64url, hex, URL and base58 encode/decode, JWT decode …

Redact personal data from text without AI: emails, phone numbers, IBANs, card numbers (Luhn-checked), Spanish DNI/NIE, IPs, crypto addresses and URLs, replaced by labels ([EMAIL_1]) or asterisks. Bef…

Follow the redirect chain of a URL (up to 10 hops): status code and time of each hop, final URL, domain changes and HTTPS-to-HTTP downgrades. Unmask short and affiliate links before visiting them.

Verify an Ethereum signature: a personal_sign (EIP-191) message or EIP-712 typed data. Recovers the signer address and, if you pass one, confirms it matches. Local computation; EIP-1271 contract wall…

Decode a JWT and verify its signature with the public keys of a JWKS URL (RS256, ES256, EdDSA...) or an HMAC secret, checking expiry, audience and issuer; returns header, claims and the exact reason …

Verify an Ed25519 Solana signature (Phantom/Solflare signMessage) for a message and public key; signature in base58, base64 or hex. Local computation.

Similarity between two texts without AI: TF-IDF cosine, vocabulary Jaccard and character-trigram Jaccard (catches edited copies), shared words and a verdict. For duplicates, plagiarism checks and ded…

Website security headers audit: HTTPS, HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy and cookie flags, with a score.

Verify a Sign-In with Ethereum (EIP-4361) login: parses domain, address, chain, nonce and dates, checks the signature and expiry, and optionally the expected domain and nonce. Authenticate users or a…

Your public IP address as the server sees it, IPv4/IPv6, network prefix, operator (ASN) and registration country, plus your user agent. Check where an agent exits from or whether a proxy/VPN works.

Check an exact npm or PyPI package version immediately before installation using current registry, vulnerability, malicious-package, withdrawal/deprecation, and verified provenance evidence. Returns …

Domain intelligence in one call: RDAP registration (registrar, age, expiry, status), live DNS (A/AAAA/MX/NS/TXT), the mail and DNS providers behind them, the SaaS vendors the domain's TXT verificatio…

Off-chain due diligence on a project's web presence — the half on-chain rug checkers cannot see. Domain age and registrar, whether a team page, whitepaper, docs and socials exist, whether the site is…

WhiteMagic continuity-receipt verification: POST a signed receipt bundle and receive a verdict (TRUSTED / PROVISIONAL / INSUFFICIENT_EVIDENCE / UNTRUSTED) with coded errors and an optional signed ver…

Trace the redirect chain of a URL to its final destination without downloading page bodies: every hop with its status code, time and Location header, the final URL, whether the domain changed, and loop detection. Useful before trusting a short link or an ad link. Query: ?url=https://bit.ly/…

Read a page and get a deterministic verdict on whether the retrieval can be trusted, with evidence. PRIVATE BET…