Security APIs

Application Environment Verification (AEV) is an Android library and API from FingerprintJS that checks whether a user device is safe to use.

BinaryEdge is a cybersecurity platform that continuously scans the entire internet and exposes the results through its API.

The Bitwarden API lets you manage your organization's password vault, collections, and members programmatically using OAuth 2.0 authentication.

Botd is an open-source JavaScript library and API from FingerprintJS that detects whether a web visitor is a bot or a real human browser.

The Bugcrowd API gives you programmatic access to your organization's bug bounty program data, including submissions, rewards, and researcher profiles.

Censys is an internet-wide scanning platform that lets you search for any internet-connected host, device, or certificate using its REST API.

Classify provides programmatic access to encrypting & decrypting text messages via REST API.

Complete Criminal Checks provides a REST API to search for criminal offense records across all U.S.

CRXcavator provides programmatic access to chrome extension risk scoring via REST API.

Dehash.lt provides programmatic access to hash decryption md5, sha1, sha3, sha256, sha384, sha512 via REST API.

EmailRep is a free API that evaluates the risk and reputation of an email address in seconds.

EscapeAPI is a simple open-source utility API that takes raw user input and returns properly escaped versions safe for use in HTML, SQL, shell, and other contexts.

FilterLists is a community-maintained directory API that catalogs hundreds of filter lists used by ad blockers and firewalls like uBlock Origin and Pi-hole.

FingerprintJS Pro is a browser fingerprinting API that identifies visitors with extreme accuracy, even in incognito mode.

FraudLabs Pro is an order screening API that uses AI to evaluate the fraud risk of e-commerce transactions.

FullHunt is an attack surface intelligence API that lets you discover and explore internet-facing assets — domains, subdomains, and hosts — associated with any target.

GitGuardian provides programmatic access to scan files for secrets (api keys, database credentials) via REST API.

GreyNoise analyzes internet-wide scanning activity and lets you look up any IP address to determine whether it is a known internet scanner, bot, or legitimate user.

HackerOne's API gives programmatic access to bug bounty program data, reports, and vulnerability information on the HackerOne platform.

Hashable provides programmatic access to a rest api to access high level cryptographic functions and methods via REST API.

Have I Been Pwned (HIBP) lets you check whether an email address or password has appeared in known data breaches.

Intelligence X is an OSINT search engine API that lets you search historical and leaked data including emails, domains, IPs, URLs, and more from the dark web and other sources.

LoginRadius is a managed customer identity and access management (CIAM) platform that provides APIs for user registration, login, social authentication, and profile management.

The Microsoft Security Response Center (MSRC) API provides programmatic access to Microsoft's security update data, including CVEs, advisories, and patch information.

Mozilla's HTTP Observatory API scans websites and grades their HTTP security configuration, checking for headers like CSP, HSTS, X-Frame-Options, and more.

The Mozilla TLS Scanner API lets you check the TLS/SSL configuration of any public domain.

The National Vulnerability Database (NVD) API gives you access to the U.S.

The Passwordinator API generates random passwords with customizable complexity, length, and character sets.

PhishStats is a real-time phishing URL database that aggregates phishing site data from multiple sources.

The Privacy.com API lets developers create virtual, merchant-specific credit card numbers that protect real bank details during online purchases.

Pulsedive is a threat intelligence platform that lets you look up IPs, domains, and URLs to see if they are associated with malicious activity.

SecurityTrails provides detailed DNS and WHOIS history for domains and IP addresses, letting you trace how a domain's configuration has changed over time.

Shodan is a search engine that continuously scans the internet and indexes metadata about connected devices like servers, routers, webcams, and industrial systems.

Spyse (now part of SecurityTrails) is an internet asset search engine that provides comprehensive data on domains, IPs, SSL certificates, and autonomous systems.

Threat Jammer provides programmatic access to risk scoring service from curated threat intelligence data via REST API.

The UK Police API provides open access to crime data, police force information, and neighborhood policing data across England, Wales, and Northern Ireland.

Virushee provides programmatic access to virushee file/data scanning via REST API.

VulDB is a vulnerability database API that lets you query detailed information about security vulnerabilities, CVEs, and threat intelligence data.