Category
Security APIs
60 APIs, 24 of them with no auth listed. Each one links to its own page with auth, HTTPS, CORS and the official docs.
APIs60
No auth listed40%24 of 60
HTTPS100%
CORS enabled35%
Docs link reachable87%at the last weekly check
Quick starts
No key, HTTPS and CORS, and the docs link answered at the last check: call these from a web page in minutes.
IPGuardianCheck IP addresses against 140+ public threat intelligence blocklists
IPLogsFree VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing
OSVOpen source vulnerability database and distributed triage infrastructure
PasswordinatorGenerate random passwords of varying complexities
PresendSecurity and developer utility API -- malware, vulnerability, and domain checks, no signup
VPNDetectionCheck whether an IPv4 or IPv6 address belongs to VPN infrastructure, no key needed
All Security APIs
Agent VerifierSelf-check for AI agents: verifies Web Bot Auth signatures and shows how a request looksNo auth
Application Environment VerificationAndroid library and API to verify the safety of user devices, detect rooted devices and other risksapiKeyCORS- BinaryEdgeProvide access to BinaryEdge 40fy scanning platformapiKeyCORSLink down
BitWardenBest open-source password managerOAuth
BotdBotd is a browser library for JavaScript bot detectionapiKeyCORS
BugcrowdBugcrowd API for interacting and tracking the reported issues programmaticallyapiKey- CensysSearch engine for Internet connected host and devicesapiKey
- CISA Known Exploited VulnerabilitiesCISA KEV catalog of actively exploited CVEs as JSON, filterable by vendor, with CWE and due datesapiKey
- ClassifyEncrypting & decrypting text messagesNo authCORSLink down
Complete Criminal ChecksProvides data of offenders from all U.S. States and Pureto RicoapiKeyCORS
CompliAPIScreen crypto addresses, emails, websites, IDs and countries against OFAC, EU, UK sanctions listsapiKeyCORS- CRXcavatorChrome extension risk scoringapiKeyLink down
- CSR.plusGenerate certificate signing requests and private keys without OpenSSLNo authCORS
- dead-dropEphemeral zero-knowledge encrypted data sharingNo authCORS
- Dehash.ltHash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512No authLink down
Domain IntelligenceDNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel callapiKey- EmailRepEmail address threat and risk predictionNo auth
EscapeAn API for escaping different kind of queriesNo auth
FilterListsLists of filters for adblockers and firewallsNo auth- FingerprintJS ProFraud detection API offering highly accurate browser fingerprintingapiKeyCORS
FOFASearch engine for Internet connected assets and devicesapiKey
FraudLabs ProScreen order information using AI to detect fraudsapiKey- FullHuntSearchable attack surface database of the entire internetapiKey
- GitGuardianScan files for secrets (API Keys, database credentials)apiKeyLink down
GreyNoiseQuery IPs in the GreyNoise dataset and retrieve a subset of the full IP context dataapiKey
HackerOneThe industry’s first hacker API that helps increase productivity towards creative bug bounty huntingapiKey- HashableA REST API to access high level cryptographic functions and methodsNo authCORSLink down
HaveIBeenPwnedPasswords which have previously been exposed in data breachesapiKey
Hybrid AnalysisFile and URL malware analysis powered by Falcon SandboxapiKey
Intelligence XPerform OSINT via Intelligence XapiKey- IPGuardianCheck IP addresses against 140+ public threat intelligence blocklistsNo authCORS
- IPLogsFree VPN, proxy, Tor and datacenter IP detection. 13 sources, active probingNo authCORS
IPScannerIP network class (residential, mobile, hosting, VPN, residential proxy, Tor) with a confidence scoreapiKeyCORS
isMaliciousReputation of IPs, domains, URLs and file hashes from aggregated threat feeds, plus CVE lookupsapiKey
LoginRadiusManaged User Authentication ServiceapiKeyCORS
MaskbreakDetect VPNs, proxies, Tor, bots and antidetect browsers at signup, login and checkoutapiKeyCORSMicrosoft Security Response Center (MSRC)Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)No auth
Mozilla http scannerMozilla observatory http scannerNo auth
Mozilla tls scannerMozilla observatory tls scannerNo authNational Vulnerability DatabaseU.S. National Vulnerability DatabaseNo auth
- Neetix LivelinessFace liveness, presentation-attack detection and 1:1 face match for identity verificationapiKey
- OSVOpen source vulnerability database and distributed triage infrastructureNo authCORS
- PasswordinatorGenerate random passwords of varying complexitiesNo authCORS
PhishStatsPhishing databaseNo auth- PresendSecurity and developer utility API -- malware, vulnerability, and domain checks, no signupNo authCORS
Privacy.comGenerate merchant-specific and one-time use credit card numbers that link back to your bankapiKey
PulsediveScan, search and collect threat intelligence data in real-timeapiKey
Sealed RoseAI media forensics and synthetic content verification for video, audio, image, and textapiKeyCORS
SecurityTrailsDomain and IP related information such as current and historical WHOIS and DNS recordsapiKey
ShodanSearch engine for Internet connected devicesapiKey- SpyseAccess data on all Internet assets and build powerful attack surface management applicationsapiKey
- SSL Domain Health CheckSSL certificate validity, domain WHOIS status, and DNS record checks for any domainapiKey
SSL LabsDeep SSL/TLS server analysis with A+ to F gradingNo auth- Threat JammerRisk scoring service from curated threat intelligence dataapiKeyLink down
ThreatClusterThreat intelligence: incident clusters, validated IOCs, CVEs, ransomware leak-site victimsapiKey
UK PoliceUK Police dataNo auth
URLhausDatabase of malicious URLs used for malware distributionNo auth- VirusheeVirushee file/data scanningNo authCORSLink down
- VPNDetectionCheck whether an IPv4 or IPv6 address belongs to VPN infrastructure, no key neededNo authCORS
VulDBVulDB API allows to initiate queries for one or more items along with transactional botsapiKey