security
Agent Verifier
Self-check for AI agents: verifies Web Bot Auth signatures and shows how a request looks
HTTPS: yes · CORS: no
github-public-apis
Source listing · not independently checked
PUBLICAPI / API directory
Security
Know the limits. Build further.
Security data and services: read the documentation and limitations; a listing is not a security certification.
Categories (61)
65 APIs found
security
Application Environment Verification
Android library and API to verify the safety of user devices, detect rooted devices and other risks
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
BinaryEdge
Provide access to BinaryEdge 40fy scanning platform
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
BitWarden
Best open-source password manager
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Botd
Botd is a browser library for JavaScript bot detection
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
Bugcrowd
Bugcrowd API for interacting and tracking the reported issues programmatically
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Censys
Search engine for Internet connected host and devices
HTTPS: yes · CORS: no
github-public-apis
Source listing · not independently checked
security
CISA Known Exploited Vulnerabilities
CISA KEV catalog of actively exploited CVEs as JSON, filterable by vendor, with CWE and due dates
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
CISA Known Exploited Vulnerabilities
A machine-readable catalog of exploited vulnerabilities listed by CISA.
HTTPS: unknown · CORS: unknown
profiles
Source research
security
Classify
Encrypting & decrypting text messages
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
Complete Criminal Checks
Provides data of offenders from all U.S. States and Pureto Rico
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
CompliAPI
Screen crypto addresses, emails, websites, IDs and countries against OFAC, EU, UK sanctions lists
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
CRXcavator
Chrome extension risk scoring
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
CSR.plus
Generate certificate signing requests and private keys without OpenSSL
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
dead-drop
Ephemeral zero-knowledge encrypted data sharing
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
Dehash.lt
Hash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Domain Intelligence
DNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel call
HTTPS: yes · CORS: no
github-public-apis
Source listing · not independently checked
security
EmailRep
Email address threat and risk prediction
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Escape
An API for escaping different kind of queries
HTTPS: yes · CORS: no
github-public-apis
Source listing · not independently checked
security
FilterLists
Lists of filters for adblockers and firewalls
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
FingerprintJS Pro
Fraud detection API offering highly accurate browser fingerprinting
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
FOFA
Search engine for Internet connected assets and devices
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
FraudLabs Pro
Screen order information using AI to detect frauds
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
FullHunt
Searchable attack surface database of the entire internet
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
GitGuardian
Scan files for secrets (API Keys, database credentials)
HTTPS: yes · CORS: no
github-public-apis
Source listing · not independently checked
security
GreyNoise
Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
HackerOne
The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Hashable
A REST API to access high level cryptographic functions and methods
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
Have I Been Pwned
Breach checks and a separate service for exposed password hashes.
HTTPS: unknown · CORS: unknown
profiles
Source research
security
HaveIBeenPwned
Passwords which have previously been exposed in data breaches
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Hybrid Analysis
File and URL malware analysis powered by Falcon Sandbox
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Intelligence X
Perform OSINT via Intelligence X
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
IPGuardian
Check IP addresses against 140+ public threat intelligence blocklists
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
IPLogs
Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
IPScanner
IP network class (residential, mobile, hosting, VPN, residential proxy, Tor) with a confidence score
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
isMalicious
Reputation of IPs, domains, URLs and file hashes from aggregated threat feeds, plus CVE lookups
HTTPS: yes · CORS: no
github-public-apis
Source listing · not independently checked
security
LoginRadius
Managed User Authentication Service
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
Maskbreak
Detect VPNs, proxies, Tor, bots and antidetect browsers at signup, login and checkout
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
Microsoft Security Response Center (MSRC)
Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Mozilla http scanner
Mozilla observatory http scanner
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Mozilla tls scanner
Mozilla observatory tls scanner
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
National Vulnerability Database
U.S. National Vulnerability Database
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Neetix Liveliness
Face liveness, presentation-attack detection and 1:1 face match for identity verification
HTTPS: yes · CORS: no
github-public-apis
Source listing · not independently checked
security
OSV
Open source vulnerability database and distributed triage infrastructure
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
OSV API
Open vulnerability information linked to package ecosystem and version.
HTTPS: unknown · CORS: unknown
profiles
Source research
security
Passwordinator
Generate random passwords of varying complexities
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
PhishStats
Phishing database
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Presend
Security and developer utility API -- malware, vulnerability, and domain checks, no signup
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
security
Privacy.com
Generate merchant-specific and one-time use credit card numbers that link back to your bank
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
security
Pulsedive
Scan, search and collect threat intelligence data in real-time
HTTPS: yes · CORS: unknown
github-public-apis
Source listing · not independently checked
cryptocurrency
0x
API for querying token and pool stats across various liquidity pools
HTTPS: yes · CORS: yes
github-public-apis
Source listing · not independently checked
No results. Clear a filter or try another search term.
From discovery to implementation
Build with understanding.
Practical API integration guides, separate from catalog listings.
All guides →- GeoJSON to a map: valid numbers do not prove coordinate order →
- Read a damaged JSON sequence without pretending it is complete →
- JSON intake: reject ambiguous bytes before checking the resource schema →
- Read Problem Details without turning an error message into a decision rule →
- A relative API link is not text to append to a domain →
A guide for your situation
Your answers stay in this page until you explicitly submit them. Unsaved answers disappear on reload.
Saving is not configured. No answers or contact details are submitted or saved.
Which integration step helps you move forward?
30 short questions about APIs and connecting data. Selecting an answer moves to the next question. You can go back, change answers, or skip. This is a practical reading route, not a scientific test.
JavaScript is required for this guide.
Contact & corrections
Send a question or report a correction using this form.
Only after Send are your name, email, subject and message sent to the contact service to handle your message. This is not a newsletter signup. Unsent text disappears on reload. Privacy information
Preview: sending is not configured. This form does not send or save anything.