Extra CreditPublic APIs: Security
61 in APIs and services, most used first.
- Agent Verifier Self-check for AI agents: verifies Web Bot Auth signatures and shows how a request looks
- Application Environment Verification Android library and API to verify the safety of user devices, detect rooted devices and other risks
- BinaryEdge Provide access to BinaryEdge 40fy scanning platform
-
BitWarden Best open-source password manager - Botd Botd is a browser library for JavaScript bot detection
-
Bugcrowd Bugcrowd API for interacting and tracking the reported issues programmatically - Censys Search engine for Internet connected host and devices
- CISA Known Exploited Vulnerabilities CISA KEV catalog of actively exploited CVEs as JSON, filterable by vendor, with CWE and due dates
- Classify Encrypting & decrypting text messages
- Complete Criminal Checks Provides data of offenders from all U.S. States and Pureto Rico
- CompliAPI Screen crypto addresses, emails, websites, IDs and countries against OFAC, EU, UK sanctions lists
- CRXcavator Chrome extension risk scoring
- CSR.plus Generate certificate signing requests and private keys without OpenSSL
- dead-drop Ephemeral zero-knowledge encrypted data sharing
- Dehash.lt Hash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512
- Domain Intelligence DNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel call
- EmailRep Email address threat and risk prediction
- Escape An API for escaping different kind of queries
- FilterLists Lists of filters for adblockers and firewalls
- FingerprintJS Pro Fraud detection API offering highly accurate browser fingerprinting
- FOFA Search engine for Internet connected assets and devices
- FraudLabs Pro Screen order information using AI to detect frauds
- FullHunt Searchable attack surface database of the entire internet
- GreyNoise Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data
-
HackerOne The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting - Hashable A REST API to access high level cryptographic functions and methods
-
HaveIBeenPwned Passwords which have previously been exposed in data breaches - Hybrid Analysis File and URL malware analysis powered by Falcon Sandbox
- Intelligence X Perform OSINT via Intelligence X
- IPGuardian Check IP addresses against 140+ public threat intelligence blocklists
- IPLogs Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing
- IPScanner IP network class (residential, mobile, hosting, VPN, residential proxy, Tor) with a confidence score
- isMalicious Reputation of IPs, domains, URLs and file hashes from aggregated threat feeds, plus CVE lookups
- LoginRadius Managed User Authentication Service
- Maskbreak Detect VPNs, proxies, Tor, bots and antidetect browsers at signup, login and checkout
- Microsoft Security Response Center (MSRC) Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)
- Mozilla http scanner Mozilla observatory http scanner
- Mozilla tls scanner Mozilla observatory tls scanner
- National Vulnerability Database U.S. National Vulnerability Database
- Neetix Liveliness Face liveness, presentation-attack detection and 1:1 face match for identity verification
- OSV Open source vulnerability database and distributed triage infrastructure
- Passwordinator Generate random passwords of varying complexities
- PhishStats Phishing database
- Presend Security and developer utility API -- malware, vulnerability, and domain checks, no signup
- Privacy.com Generate merchant-specific and one-time use credit card numbers that link back to your bank
- Pulsedive Scan, search and collect threat intelligence data in real-time
- RealBots Verify whether requests claiming to be GPTBot, ClaudeBot & other AI crawlers are real
- Sealed Rose AI media forensics and synthetic content verification for video, audio, image, and text
- SecurityTrails Domain and IP related information such as current and historical WHOIS and DNS records
- Shodan Search engine for Internet connected devices
- Spyse Access data on all Internet assets and build powerful attack surface management applications
- SSL Domain Health Check SSL certificate validity, domain WHOIS status, and DNS record checks for any domain
- SSL Labs Deep SSL/TLS server analysis with A+ to F grading
- Tanod Pay-per-call scans of smart contracts, addresses and MCP/skill packages; small free daily tier
- Threat Jammer Risk scoring service from curated threat intelligence data
- ThreatCluster Threat intelligence: incident clusters, validated IOCs, CVEs, ransomware leak-site victims
- UK Police UK Police data
- URLhaus Database of malicious URLs used for malware distribution
- Virushee Virushee file/data scanning
- VPNDetection Check whether an IPv4 or IPv6 address belongs to VPN infrastructure, no key needed
- VulDB VulDB API allows to initiate queries for one or more items along with transactional bots