Check a URL for malware, phishing, and other threats. Uses URLhaus + heuristic analysis.

Check if a password hash (SHA-1) has been exposed in known data breaches via HIBP.

Look up a SHA-1 hash prefix in the HIBP k-Anonymity database.

Check domain reputation: DNS records, blacklists (Spamhaus, SpamCop, SORBS), SPF/DMARC, SSL.

Check IP reputation: blacklists, Tor exit node detection, reverse DNS.

Check if an email address has been exposed in known data breaches via HIBP.

Run all security checks on a target (URL, domain, IP, or email). Most comprehensive scan.

Scan an AI agent skill/plugin for security issues across 8 risk categories (Snyk ToxicSkills taxonomy). Checks for prompt injection, malicious code, suspicious downloads, credential handling, secret detection, third-party content, unverifiable dependencies, and financial access patterns. Static analysis only — no code execution. Returns risk score (0-100), severity-ranked findings with file locations, and human-readable summary.

Detect prompt injection in text. Analyzes across 4 categories (direct injection, encoding tricks, exfiltration, indirect injection) with 200+ detection patterns. Designed for real-time inline usage before processing untrusted user input. Returns boolean verdict, confidence score (0-1), matched patterns with evidence, and decoded content if encoding obfuscation was detected. Response time <100ms p95.