Free Security APIs

61 free public Security APIs for developers. 61 support HTTPS, 21 allow CORS from the browser and 25 need no API key.

One account · one API key

Get API key→

Showing 61 of 61 APIs

Agent Verifier

Self-check for AI agents: verifies Web Bot Auth signatures and shows how a request looks

No authHTTPSNo CORS

Application Environment Verification

Android library and API to verify the safety of user devices, detect rooted devices and other risks

apiKeyHTTPSCORS

BinaryEdge

Provide access to BinaryEdge 40fy scanning platform

apiKeyHTTPSCORS

BitWarden

Best open-source password manager

OAuthHTTPSCORS ?

Botd

Botd is a browser library for JavaScript bot detection

apiKeyHTTPSCORS

Bugcrowd

Bugcrowd API for interacting and tracking the reported issues programmatically

apiKeyHTTPSCORS ?

Censys

Search engine for Internet connected host and devices

apiKeyHTTPSNo CORS

CISA Known Exploited Vulnerabilities

CISA KEV catalog of actively exploited CVEs as JSON, filterable by vendor, with CWE and due dates

apiKeyHTTPSCORS ?

Classify

Encrypting & decrypting text messages

No authHTTPSCORS

Complete Criminal Checks

Provides data of offenders from all U.S. States and Pureto Rico

apiKeyHTTPSCORS

CompliAPI

Screen crypto addresses, emails, websites, IDs and countries against OFAC, EU, UK sanctions lists

apiKeyHTTPSCORS

CRXcavator

Chrome extension risk scoring

apiKeyHTTPSCORS ?

CSR.plus

Generate certificate signing requests and private keys without OpenSSL

No authHTTPSCORS

dead-drop

Ephemeral zero-knowledge encrypted data sharing

No authHTTPSCORS

Dehash.lt

Hash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512

No authHTTPSCORS ?

Domain Intelligence

DNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel call

apiKeyHTTPSNo CORS

EmailRep

Email address threat and risk prediction

No authHTTPSCORS ?

Escape

An API for escaping different kind of queries

No authHTTPSNo CORS

FilterLists

Lists of filters for adblockers and firewalls

No authHTTPSCORS ?

FingerprintJS Pro

Fraud detection API offering highly accurate browser fingerprinting

apiKeyHTTPSCORS

FOFA

Search engine for Internet connected assets and devices

apiKeyHTTPSCORS ?

FraudLabs Pro

Screen order information using AI to detect frauds

apiKeyHTTPSCORS ?

FullHunt

Searchable attack surface database of the entire internet

apiKeyHTTPSCORS ?

GitGuardian

Scan files for secrets (API Keys, database credentials)

apiKeyHTTPSNo CORS

GreyNoise

Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data

apiKeyHTTPSCORS ?

HackerOne

The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting

apiKeyHTTPSCORS ?

Hashable

A REST API to access high level cryptographic functions and methods

No authHTTPSCORS

HaveIBeenPwned

Passwords which have previously been exposed in data breaches

apiKeyHTTPSCORS ?

Hybrid Analysis

File and URL malware analysis powered by Falcon Sandbox

apiKeyHTTPSCORS ?

Intelligence X

Perform OSINT via Intelligence X

apiKeyHTTPSCORS ?

IPGuardian

Check IP addresses against 140+ public threat intelligence blocklists

No authHTTPSCORS

IPLogs

Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing

No authHTTPSCORS

IPScanner

IP network class (residential, mobile, hosting, VPN, residential proxy, Tor) with a confidence score

apiKeyHTTPSCORS

isMalicious

Reputation of IPs, domains, URLs and file hashes from aggregated threat feeds, plus CVE lookups

apiKeyHTTPSNo CORS

LoginRadius

Managed User Authentication Service

apiKeyHTTPSCORS

Maskbreak

Detect VPNs, proxies, Tor, bots and antidetect browsers at signup, login and checkout

apiKeyHTTPSCORS

Microsoft Security Response Center (MSRC)

Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)

No authHTTPSCORS ?

Mozilla http scanner

Mozilla observatory http scanner

No authHTTPSCORS ?

Mozilla tls scanner

Mozilla observatory tls scanner

No authHTTPSCORS ?

National Vulnerability Database

U.S. National Vulnerability Database

No authHTTPSCORS ?

Neetix Liveliness

Face liveness, presentation-attack detection and 1:1 face match for identity verification

apiKeyHTTPSNo CORS

OSV

Open source vulnerability database and distributed triage infrastructure

No authHTTPSCORS

Passwordinator

Generate random passwords of varying complexities

No authHTTPSCORS

PhishStats

Phishing database

No authHTTPSCORS ?

Presend

Security and developer utility API -- malware, vulnerability, and domain checks, no signup

No authHTTPSCORS

Privacy.com

Generate merchant-specific and one-time use credit card numbers that link back to your bank

apiKeyHTTPSCORS ?

Pulsedive

Scan, search and collect threat intelligence data in real-time

apiKeyHTTPSCORS ?

Sealed Rose

AI media forensics and synthetic content verification for video, audio, image, and text

apiKeyHTTPSCORS

SecurityTrails

Domain and IP related information such as current and historical WHOIS and DNS records

apiKeyHTTPSCORS ?

Shodan

Search engine for Internet connected devices

apiKeyHTTPSCORS ?

Spyse

Access data on all Internet assets and build powerful attack surface management applications

apiKeyHTTPSCORS ?

SSL Domain Health Check

SSL certificate validity, domain WHOIS status, and DNS record checks for any domain

apiKeyHTTPSCORS ?

SSL Labs

Deep SSL/TLS server analysis with A+ to F grading

No authHTTPSCORS ?

Tanod

Pay-per-call scans of smart contracts, addresses and MCP/skill packages; small free daily tier

No authHTTPSNo CORS

Threat Jammer

Risk scoring service from curated threat intelligence data

apiKeyHTTPSCORS ?

ThreatCluster

Threat intelligence: incident clusters, validated IOCs, CVEs, ransomware leak-site victims

apiKeyHTTPSNo CORS

UK Police

UK Police data

No authHTTPSCORS ?

URLhaus

Database of malicious URLs used for malware distribution

No authHTTPSCORS ?

Virushee

Virushee file/data scanning

No authHTTPSCORS

VPNDetection

Check whether an IPv4 or IPv6 address belongs to VPN infrastructure, no key needed

No authHTTPSCORS

VulDB

VulDB API allows to initiate queries for one or more items along with transactional bots

apiKeyHTTPSCORS ?

Security API FAQ

How many free Security APIs are there?

There are 61 free public Security APIs in the directory. 61 support HTTPS, 21 are confirmed to allow CORS and 25 need no API key.

Which Security APIs work without an API key?

25 Security APIs need no authentication, including Agent Verifier, Classify, CSR.plus and dead-drop. You can call them straight away without signing up.

Which Security APIs can I call from the browser?

APIs with CORS enabled can be called directly from front-end JavaScript. In Security, that includes Application Environment Verification, BinaryEdge, Botd and Classify.

Security API FAQ

How many free Security APIs are there?

There are 61 free public Security APIs in the directory. 61 support HTTPS, 21 are confirmed to allow CORS and 25 need no API key.

Which Security APIs work without an API key?

25 Security APIs need no authentication, including Agent Verifier, Classify, CSR.plus and dead-drop. You can call them straight away without signing up.

Which Security APIs can I call from the browser?

APIs with CORS enabled can be called directly from front-end JavaScript. In Security, that includes Application Environment Verification, BinaryEdge, Botd and Classify.