Security x402 offerings

Address Poisoning Detector analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confid…

Bytecode Clone Provenance analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.

Dusting Attack Monitor analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence…

Bytecode Clone Provenance analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confide…

Address Poisoning Detector analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.

Dusting Attack Monitor analyses only the evidence supplied by the caller. It does not claim to query a chain, identify a legal status or replace an independent audit. Missing signals lower confidence and are listed explicitly; every classification includes the exact thresholds used.

Hash caller-supplied UTF-8 text deterministically with SHA-256 or SHA-512 and return both hexadecimal and Base64 digests. Input is bounded to 100 KiB, no network request or external provider is used, and Forest never treats a digest as proof of authenticity or password security. Base mainnet USDC

Identify and unwrap a bounded caller-supplied opaque string into readable JSON, text or binary evidence using deterministic local rules for JWT payloads, canonical Base64/Base64URL and gzip. Ambiguous hex/Base64 representations stop in auto mode; canonical hex and Brotli can be selected only through explicit bounded hints. JWT claims are decode-only and always marked unverified. Base mainnet USDC

Discover OCI 1.1 artifacts referring to an image digest, such as SBOM or attestation evidence. Presence is reported only; Forest does not verify signatures or download blobs. Base mainnet USDC

Known vulnerabilities for package+version; normalized evidence, not a safety verdict.

Detect material public certificate changes in fingerprint, issuer, SANs or validity window using a deterministic hash. Handshake timing noise is ignored. Base mainnet USDC

Return only the public certificate validity window and remaining lifetime for TLS port 443. It does not scan ciphers, vulnerabilities or private hosts. Base mainnet USDC

Inspect one public TLS endpoint and return certificate identity and validity-window facts. This is a bounded preflight, not a vulnerability scanner or security guarantee. Base mainnet USDC

Known vulnerabilities for package+version; normalized evidence, not a safety verdict. Base mainnet USDC

Send exactly one bounded non-credentialed browser-style CORS OPTIONS preflight to the supplied public URL and normalize the observed Access-Control-Allow-* response into origin, method and header decisions. Redirects are not followed, so the result describes the exact resource URL. Forest does not send cookies or Authorization, invoke the requested resource afterward, run JavaScript, or guarantee browser/runtime success beyond the observed response. Base mainnet USDC

Preflight one public URL before an agent uses it: verify immediate HTTP reachability, origin status, redirect destination, response headers and cache validators with a bounded HEAD-first probe. GET is used only when HEAD is unsupported. No JavaScript, login, page extraction or availability guarantee. Base mainnet USDC

Prüft am Objekt absendung den Befund Zieldomain der Übermittlung.

Prüft am Objekt skript den Befund Zieldomain der Übermittlung.

Prüft am Objekt iframe den Befund Zieldomain der Übermittlung.

Prüft am Objekt cookie den Befund verwendete Formularmethode.

Prüft am Objekt iframe den Befund Zieldomain der Übermittlung.

Prüft am Objekt netzwerkanfrage den Befund Zieldomain der Übermittlung.

Prüft am Objekt absendung den Befund Zahl gesetzter Cookies.

Prüft am Objekt skript den Befund Zieldomain der Übermittlung.