Security APIs add threat intelligence and protection to your stack — IP reputation, vulnerability databases, malware scanning, and breach lookups. Community projects like abuse.ch publish free feeds, while enterprise services meter by query volume. These APIs often handle sensitive context, so review each provider's data-retention policy alongside its technical limits.
| API | Pricing | Auth | CORS | Health | |
|---|---|---|---|---|---|
| VulDB VulDB API allows to initiate queries for one or more items along with transactional bots | Freemium | API Key | No | Profile | |
| Whoisfreaks Domain and DNS related information that will equip organizaion with comprehensive threat intelligence and attack surface analysis capabilities for enhanced security | Freemium | API Key | Yes | Profile | |
| dead-drop API Ephemeral zero-knowledge encrypted data sharing | Unknown | Unknown | Yes | Profile | |
| nextAuth API API for the nextAuth server | Freemium | Unknown | Yes | Profile | |
| urlscan.io API urlscan.io API for submitting and retrieving website scan results including DOM snapshots, network requests, and security assessment data. | Freemium | API Key | No | Profile |
Start with pricing and auth: free tiers and no-auth APIs are fastest to prototype with. Then check CORS if your app calls the API from the browser, and health before you commit — a great security API that's been down for a week will block your launch. Each profile below shows all of these signals plus rate limits where documented.