Security¶

49 free Security APIs — auth type, HTTPS and CORS support for each, so you can pick the right one without opening every docs page.

API	Description	Auth	HTTPS	CORS
Application Environment Verification	Android library and API to verify the safety of user devices, detect rooted devices and other risks	`apiKey`	Yes	Yes
BinaryEdge	Provide access to BinaryEdge 40fy scanning platform	`apiKey`	Yes	Yes
BitWarden	Best open-source password manager	`OAuth`	Yes	Unknown
Botd	Botd is a browser library for JavaScript bot detection	`apiKey`	Yes	Yes
Bugcrowd	Bugcrowd API for interacting and tracking the reported issues programmatically	`apiKey`	Yes	Unknown
Censys	Search engine for Internet connected host and devices	`apiKey`	Yes	No
Classify	Encrypting & decrypting text messages	No	Yes	Yes
Complete Criminal Checks	Provides data of offenders from all U.S. States and Pureto Rico	`apiKey`	Yes	Yes
CRXcavator	Chrome extension risk scoring	`apiKey`	Yes	Unknown
CSR.plus	Generate certificate signing requests and private keys without OpenSSL	No	Yes	Yes
dead-drop	Ephemeral zero-knowledge encrypted data sharing	No	Yes	Yes
Dehash.lt	Hash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512	No	Yes	Unknown
Domain Intelligence	DNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel call	`apiKey`	Yes	No
EmailRep	Email address threat and risk prediction	No	Yes	Unknown
Escape	An API for escaping different kind of queries	No	Yes	No
FilterLists	Lists of filters for adblockers and firewalls	No	Yes	Unknown
FingerprintJS Pro	Fraud detection API offering highly accurate browser fingerprinting	`apiKey`	Yes	Yes
FOFA	Search engine for Internet connected assets and devices	`apiKey`	Yes	Unknown
FraudLabs Pro	Screen order information using AI to detect frauds	`apiKey`	Yes	Unknown
FullHunt	Searchable attack surface database of the entire internet	`apiKey`	Yes	Unknown
GitGuardian	Scan files for secrets (API Keys, database credentials)	`apiKey`	Yes	No
GreyNoise	Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data	`apiKey`	Yes	Unknown
HackerOne	The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting	`apiKey`	Yes	Unknown
Hashable	A REST API to access high level cryptographic functions and methods	No	Yes	Yes
Hybrid Analysis	File and URL malware analysis powered by Falcon Sandbox	`apiKey`	Yes	Unknown
HaveIBeenPwned	Passwords which have previously been exposed in data breaches	`apiKey`	Yes	Unknown
Intelligence X	Perform OSINT via Intelligence X	`apiKey`	Yes	Unknown
IPLogs	Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing	No	Yes	Yes
LoginRadius	Managed User Authentication Service	`apiKey`	Yes	Yes
Microsoft Security Response Center (MSRC)	Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)	No	Yes	Unknown
Mozilla http scanner	Mozilla observatory http scanner	No	Yes	Unknown
Mozilla tls scanner	Mozilla observatory tls scanner	No	Yes	Unknown
National Vulnerability Database	U.S. National Vulnerability Database	No	Yes	Unknown
Neetix Liveliness	Face liveness, presentation-attack detection and 1:1 face match for identity verification	`apiKey`	Yes	No
Passwordinator	Generate random passwords of varying complexities	No	Yes	Yes
PhishStats	Phishing database	No	Yes	Unknown
Presend	Security and developer utility API -- malware, vulnerability, and domain checks, no signup	No	Yes	Yes
Privacy.com	Generate merchant-specific and one-time use credit card numbers that link back to your bank	`apiKey`	Yes	Unknown
Pulsedive	Scan, search and collect threat intelligence data in real-time	`apiKey`	Yes	Unknown
SecurityTrails	Domain and IP related information such as current and historical WHOIS and DNS records	`apiKey`	Yes	Unknown
Shodan	Search engine for Internet connected devices	`apiKey`	Yes	Unknown
Spyse	Access data on all Internet assets and build powerful attack surface management applications	`apiKey`	Yes	Unknown
SSL Domain Health Check	SSL certificate validity, domain WHOIS status, and DNS record checks for any domain	`apiKey`	Yes	Unknown
SSL Labs	Deep SSL/TLS server analysis with A+ to F grading	No	Yes	Unknown
Threat Jammer	Risk scoring service from curated threat intelligence data	`apiKey`	Yes	Unknown
UK Police	UK Police data	No	Yes	Unknown
URLhaus	Database of malicious URLs used for malware distribution	`No`	Yes	Unknown
Virushee	Virushee file/data scanning	No	Yes	Yes
VulDB	VulDB API allows to initiate queries for one or more items along with transactional bots	`apiKey`	Yes	Unknown

Back to all categories