Pricing

from $4.00 / 1,000 oidc issuer audits

OpenID Connect Discovery Security Auditor

Audit OIDC discovery documents and JWKS for issuer mismatches, unsafe endpoints, weak keys, insecure algorithms and missing PKCE.

Pricing

from $4.00 / 1,000 oidc issuer audits

Rating

0.0

(0)

Developer

Q Services

Actor stats

Bookmarked

Total users

Monthly active users

12 days ago

Last modified

Input

{
  "issuerUrls": ["https://accounts.google.com"],
  "maxResults": 50,
  "maxBytes": 2000000
}

Only public HTTPS URLs without embedded credentials are accepted. Redirects are not followed.

Output

One dataset item per issuer with status, score, issues, endpoint inventory, advertised capabilities and a bounded JWKS summary. Errors are returned as explicit dataset items so scheduled monitoring remains observable.

Recurring use cases

CI checks for identity-provider configuration drift
JWKS rotation and weak-key monitoring
SaaS integration acceptance tests
Security evidence for OAuth/OIDC reviews

Pricing is pay per event: one small Actor-start charge and one charge per issuer audit.

OIDC Discovery & JWKS Rotation Monitor

monema/oidc-jwks-rotation-monitor

Track public OpenID Connect discovery metadata and JWKS signing-key changes across runs. Emit structured rotation, endpoint, algorithm, and key-overlap signals for scheduled identity operations.

Maarten Vreeburg

OpenAPI Security Auditor

q_services/openapi-security-auditor

Audit OpenAPI and Swagger specifications for unsecured operations, unsafe server URLs, weak auth schemes and missing security responses.

Q Services

SAML Metadata Security Auditor

q_services/saml-metadata-security-auditor

Audit public SAML metadata for unsafe endpoints, missing roles, SHA-1, duplicate entity IDs and expired or soon-expiring certificates.

Q Services

Directory Listing Quality Auditor

seeb/directory-listing-quality-auditor

Audit public directory listing pages for missing business details, weak descriptions, and local SEO quality signals.

Techionik

npm Lockfile Security Auditor

q_services/npm-lockfile-security-auditor

Audit package-lock.json files for missing integrity, insecure or non-registry sources, install scripts, duplicate versions and unsupported formats.

Q Services

Dockerfile Security Auditor

q_services/dockerfile-security-auditor

Audit Dockerfiles for root execution, mutable images, embedded secrets, download-to-shell, unsafe permissions, remote ADD and weak package installation patterns.

Q Services

CSP Header Analyzer

junipr/csp-header-analyzer

Deep-analyze Content Security Policy headers and flag unsafe or missing directives.

junipr

security.txt Auditor

junipr/security-txt-auditor

Audit security.txt auditor inputs and return structured findings, evidence rows, and a buyer-ready report for SEO, developer, and operations teams.

junipr

Website Security Auditor

zyrox/website-security-auditor

A powerful security tool to scan websites for exposed API keys and XSS vulnerabilities.

HIDDEN GHOST

Security.txt Auditor

phoenix2810/security-txt-auditor

Audit a public website's security.txt vulnerability disclosure metadata. Checks discovery paths, required fields, expiration, contact methods, and returns a readiness score with recommendations.