security APIs

NetworkCalc provides programmatic access to network calculators, including subnets, dns, binary, and security tools via REST API.

SonarQube provides a REST API for its code quality and security analysis platform, letting you programmatically retrieve metrics, issues, and quality gate statuses for your projects.

BigDataCloud offers a fast and highly accurate IP geolocation API that also includes network security checks and a confidence area metric to indicate how precise the location is.

Application Environment Verification (AEV) is an Android library and API from FingerprintJS that checks whether a user device is safe to use.

BinaryEdge is a cybersecurity platform that continuously scans the entire internet and exposes the results through its API.

The Bitwarden API lets you manage your organization's password vault, collections, and members programmatically using OAuth 2.0 authentication.

Botd is an open-source JavaScript library and API from FingerprintJS that detects whether a web visitor is a bot or a real human browser.

The Bugcrowd API gives you programmatic access to your organization's bug bounty program data, including submissions, rewards, and researcher profiles.

Censys is an internet-wide scanning platform that lets you search for any internet-connected host, device, or certificate using its REST API.

Complete Criminal Checks provides a REST API to search for criminal offense records across all U.S.

EmailRep is a free API that evaluates the risk and reputation of an email address in seconds.

EscapeAPI is a simple open-source utility API that takes raw user input and returns properly escaped versions safe for use in HTML, SQL, shell, and other contexts.

FilterLists is a community-maintained directory API that catalogs hundreds of filter lists used by ad blockers and firewalls like uBlock Origin and Pi-hole.

FingerprintJS Pro is a browser fingerprinting API that identifies visitors with extreme accuracy, even in incognito mode.

FraudLabs Pro is an order screening API that uses AI to evaluate the fraud risk of e-commerce transactions.

FullHunt is an attack surface intelligence API that lets you discover and explore internet-facing assets — domains, subdomains, and hosts — associated with any target.

GreyNoise analyzes internet-wide scanning activity and lets you look up any IP address to determine whether it is a known internet scanner, bot, or legitimate user.

HackerOne's API gives programmatic access to bug bounty program data, reports, and vulnerability information on the HackerOne platform.

Have I Been Pwned (HIBP) lets you check whether an email address or password has appeared in known data breaches.

Intelligence X is an OSINT search engine API that lets you search historical and leaked data including emails, domains, IPs, URLs, and more from the dark web and other sources.

LoginRadius is a managed customer identity and access management (CIAM) platform that provides APIs for user registration, login, social authentication, and profile management.

The Microsoft Security Response Center (MSRC) API provides programmatic access to Microsoft's security update data, including CVEs, advisories, and patch information.

Mozilla's HTTP Observatory API scans websites and grades their HTTP security configuration, checking for headers like CSP, HSTS, X-Frame-Options, and more.

The Mozilla TLS Scanner API lets you check the TLS/SSL configuration of any public domain.

The National Vulnerability Database (NVD) API gives you access to the U.S.

The Passwordinator API generates random passwords with customizable complexity, length, and character sets.

PhishStats is a real-time phishing URL database that aggregates phishing site data from multiple sources.

The Privacy.com API lets developers create virtual, merchant-specific credit card numbers that protect real bank details during online purchases.

Pulsedive is a threat intelligence platform that lets you look up IPs, domains, and URLs to see if they are associated with malicious activity.

SecurityTrails provides detailed DNS and WHOIS history for domains and IP addresses, letting you trace how a domain's configuration has changed over time.

Shodan is a search engine that continuously scans the internet and indexes metadata about connected devices like servers, routers, webcams, and industrial systems.

Spyse (now part of SecurityTrails) is an internet asset search engine that provides comprehensive data on domains, IPs, SSL certificates, and autonomous systems.

The UK Police API provides open access to crime data, police force information, and neighborhood policing data across England, Wales, and Northern Ireland.

VulDB is a vulnerability database API that lets you query detailed information about security vulnerabilities, CVEs, and threat intelligence data.