BRAINIAC.software

Checks and payment terms on this page refer to the endpoint above. Other listed endpoints have not been checked individually.

Base URLhttps://www.brainiac.software/api/v1

• POST/security-configuration/cors-policy-audit$0.04Read CORS response headers. When an origin is supplied, it is sent once on the public GET. A wildcard, or a reflected origin with credentials, is confirmed. No other origins are tried.
• POST/token-due-diligence/liquidity$0.05Inspect supported DEX liquidity pools on Base Mainnet using official Uniswap V2 and V3 factories.
• POST/security-configuration/cookie-audit$0.03Check Secure, HttpOnly, and SameSite on Set-Cookie headers from one public response or from cookie lines supplied by the caller. Cookie values are not returned.
• POST/cybersecurity-intelligence/vulnerability$0.02Retrieve details for a CVE or vulnerability ID from OSV, CISA KEV, FIRST EPSS, and NVD.
• POST/token-security/liquidity-risk-assessment$0.04Assess Base pool liquidity reported by the public DEX Screener API, including concentration across returned pools. LP lock is not verified.
• POST/token-security/honeypot-risk-check$0.04Look for observable pause and blacklist indicators in Base bytecode and standard calls. This does not simulate a buy or sell.
• POST/wallet-intelligence/transaction$0.03Inspect a supplied transaction hash on Base Mainnet with gas analysis and USD cost estimation.
• POST/cybersecurity-intelligence/repository/scorecard$0.05Retrieve the official OpenSSF Scorecard result for a GitHub, GitLab or other supported repository.
• POST/security-configuration/tls-audit$0.04Read the certificate from one public HTTPS request, or from certificate fields supplied by the caller. An old protocol, an expired certificate, a name mismatch, or an untrusted certificate is confirmed. This does not show that the site is secure.
• POST/token-due-diligence/analyze$0.05Analyze a token contract on Base Mainnet including bytecode, ERC-20 metadata, owner, proxy status, and privileges.
• POST/token-due-diligence/permissions$0.03Inspect contract ownership and privileged controls on Base Mainnet including owner, admin, and upgradeability.
• POST/security-configuration/csp-policy-analyze$0.04Read Content-Security-Policy from a public response or from policy text supplied by the caller. unsafe-inline, unsafe-eval, a script wildcard, and data: scripts are confirmed. This is not a full policy review.
• POST/cybersecurity-intelligence/package/check$0.03Check one package and version for vulnerabilities using OSV, enriched with CISA KEV, EPSS, and NVD data.
• POST/token-due-diligence/honeypot$0.05Check if a token is a honeypot using Honeypot.is simulation, including buy/sell tax, gas information, and contract verification.
• POST/wallet-intelligence/security/approvals$0.05Check wallet address for risky token approvals and permissions using GoPlus Labs risk analysis on Base Mainnet.
• POST/wallet-intelligence/security/address$0.05Check wallet address for malicious activity indicators using GoPlus Labs threat intelligence on Base Mainnet.
• POST/cybersecurity-intelligence/dependency-tree$0.05Return direct and transitive dependencies, dependency versions and available dependency metadata using Google deps.dev API.
• POST/cybersecurity-intelligence/package/project-health$0.05Return project activity indicators, repository associations, package metadata and available security information using Google deps.dev API.
• POST/token-security/risk-verdict$0.05Read a Base token contract and return an evidence-based verdict. Facts, signals, and unavailable checks are separate. No risk score is produced, and absence of a signal is not a safety approval.
• POST/security-configuration/header-audit$0.04Read security headers from a public URL or from headers supplied by the caller. A missing header is a confirmed gap only when the response was available. This does not show that the site is secure.
• POST/token-security/ownership-risk-check$0.04Read owner(), EIP-1967 proxy slots, and bytecode selectors for mint, pause, and blacklist privileges on Base. Selector presence is not proof the owner can call them.
• POST/token-security/manipulation-signals$0.04Report buy, sell, price-change, and volume signals from public DEX Screener data for the largest Base pool. These are feed observations, not proof of manipulation.

A dash means the listing gives no price or method. Copy buttons copy the full URL.

Showing 22 of 22 listed endpoints.