Security APIs add threat intelligence and protection to your stack — IP reputation, vulnerability databases, malware scanning, and breach lookups. Community projects like abuse.ch publish free feeds, while enterprise services meter by query volume. These APIs often handle sensitive context, so review each provider's data-retention policy alongside its technical limits.
| API | Pricing | Auth | CORS | Health | |
|---|---|---|---|---|---|
| IP2Proxy Detect proxy and VPN using IP address | Freemium | API Key | No | Profile | |
| Influx OSS API Service API # Authentication <!-- ReDoc-Inject: <security-definitions> --> | Paid | Unknown | Yes | Profile | |
| Intelligence X Perform OSINT via Intelligence X | Freemium | API Key | No | Profile | |
| Ix Api IX-API This API allows to config/change/delete Internet Exchange services. # Filters When querying collections, the provided query parameters are validated. Unknown query parameters are ignored. Providing invalid filter values | Unknown | Unknown | Yes | Profile | |
| KumpeApps API KKid API. Due to security concerns all calls to this API requires authentication. If you have access then you may use your KumpeApps username/password to authenticate. To gain access please use the contact developer link | Unknown | Unknown | Yes | Profile | |
| Labs64 NetLicensing RESTful API Test Center API The Labs64 <a href='https://netlicensing.io/wiki/restful-api' target='_blank'>NetLicensing RESTful API</a> gives you access to NetLicensing’s core features.<br/><br/><strong>Authentication</strong><br/>You authenticate t | Free | Unknown | Yes | Profile | |
| LeakInsight Find leaked or exposed credentials by email, username, phone, domain, hash, or breach origin | Free | API Key | No | Profile | |
| LoginRadius Managed User Authentication Service | Freemium | API Key | Yes | Profile | |
| Microsoft Security Response Center (MSRC) Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC) | Free | No | Yes | Profile | |
| Mozilla http scanner Mozilla observatory http scanner | Free | No | No | Profile | |
| Mozilla tls scanner Mozilla observatory tls scanner | Free | No | No | Profile | |
| National Vulnerability Database U.S. National Vulnerability Database | Free | No | No | Profile | |
| OWASP ZAP Automated security testing API for web apps | Free | No | No | Profile | |
| Passwordinator Generate random passwords of varying complexities | Free | No | No | Profile | |
| Pendo Feedback API ## Who is this for? This documentation is for developers creating their own integration with [Feedback's](https://www.pendo.io/product/feedback/) API. If you are doing a standard integration, there's a really easy [Javas | Free | API Key | Yes | Profile | |
| PhishStats Phishing database | Free | No | No | Profile | |
| Privacy.com Generate merchant-specific and one-time use credit card numbers that link back to your bank | Freemium | API Key | No | Profile | |
| Pulsedive Scan, search and collect threat intelligence data in real-time | Freemium | API Key | No | Profile | |
| SecurityTrails Domain and IP related information such as current and historical WHOIS and DNS records | Freemium | API Key | No | Profile | |
| Shodan Search engine for Internet connected devices | Freemium | API Key | No | Profile | |
| Shodan API Shodan API for internet-connected device discovery: search banners, ports, vulnerabilities, and host intelligence across the global scan database. | Freemium | API Key | Yes | Profile | |
| Slack Web API One way to interact with the Slack platform is its HTTP RPC-based Web API, a collection of methods requiring OAuth 2.0-based user, bot, or workspace tokens blessed with related OAuth scopes. | Unknown | Unknown | Yes | Profile | |
| Spyse Access data on all Internet assets and build powerful attack surface management applications | Paid | API Key | No | Profile | |
| Text Analytics & Sentiment Analysis API | api.text2data.com API <p>The current api version is <b>v3.4</b></p><br><br><p>The api methods listed below can be called directly from this page to test the output. You might set the api_key to pre-authenticate all requests on this page (this | Free | API Key | Yes | Profile | |
| The Blue Alliance API v3 API # Overview Information and statistics about FIRST Robotics Competition teams and events. # Authentication All endpoints require an Auth Key to be passed in the header `X-TBA-Auth-Key`. If you do not have an auth key yet, | Paid | Unknown | Yes | Profile | |
| Tradeworks API Authentication is required to access all methods of the API. Enter username and password. Credentials are automatically set as you type. | Unknown | Unknown | Yes | Profile | |
| Turbine Labs API The Turbine Labs API provides CRUD operations for core object types, and is mostly RESTy. The easiest way to interact with the API is with [tbnctl](https://docs.turbinelabs.io/advanced/tbnctl.html). If you want to make d | Free | Unknown | Yes | Profile | |
| UK Police UK Police data | Free | No | No | Profile | |
| VulDB VulDB API allows to initiate queries for one or more items along with transactional bots | Freemium | API Key | No | Profile | |
| Whoisfreaks Domain and DNS related information that will equip organizaion with comprehensive threat intelligence and attack surface analysis capabilities for enhanced security | Freemium | API Key | Yes | Profile | |
| Zoom API The Zoom API allows developers to access information from Zoom. You can use this API to build private services or public applications on the [Zoom App Marketplace](http://marketplace.zoom.us). To learn how to get your cr | Unknown | Unknown | Yes | Profile | |
| dead-drop API Ephemeral zero-knowledge encrypted data sharing | Unknown | Unknown | Yes | Profile | |
| nextAuth API API for the nextAuth server | Freemium | Unknown | Yes | Profile | |
| urlscan.io API urlscan.io API for submitting and retrieving website scan results including DOM snapshots, network requests, and security assessment data. | Freemium | API Key | No | Profile |
Start with pricing and auth: free tiers and no-auth APIs are fastest to prototype with. Then check CORS if your app calls the API from the browser, and health before you commit — a great API that's been down for a week will block your launch. Each profile below shows all of these signals plus rate limits where documented.