Pricing

from $4.00 / 1,000 oidc issuer audits

OpenID Connect Discovery Security Auditor

Audit OIDC discovery documents and JWKS for issuer mismatches, unsafe endpoints, weak keys, insecure algorithms and missing PKCE.

Pricing

from $4.00 / 1,000 oidc issuer audits

Rating

0.0

(0)

Developer

Q Services

Actor stats

Bookmarked

Total users

Monthly active users

12 days ago

Last modified

Categories

Developer tools

You can access the OpenID Connect Discovery Security Auditor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1from apify_client import ApifyClient
2
3# Initialize the ApifyClient with your Apify API token
4# Replace '<YOUR_API_TOKEN>' with your token.
5client = ApifyClient("<YOUR_API_TOKEN>")
6
7# Prepare the Actor input
8run_input = {}
9
10# Run the Actor and wait for it to finish
11run = client.actor("q_services/openid-connect-discovery-auditor").call(run_input=run_input)
12
13# Fetch and print Actor results from the run's dataset (if there are any)
14print(f"💾 Check your data here: https://console.apify.com/storage/datasets/{run.default_dataset_id}")
15for item in client.dataset(run.default_dataset_id).iterate_items():
16    print(item)
17
18# 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/python/docs/quick-start

OpenID Connect Discovery Security Auditor API in Python

The Apify API client for Python is the official library that allows you to use OpenID Connect Discovery Security Auditor API in Python, providing convenience functions and automatic retries on errors.

Install the apify-client

$pip install apify-client

Other API clients include:

OpenID Connect Discovery Security Auditor API in JavaScript

OpenID Connect Discovery Security Auditor API through CLI

OpenID Connect Discovery Security Auditor OpenAPI definition

OpenID Connect Discovery Security Auditor API

OIDC Discovery & JWKS Rotation Monitor

monema/oidc-jwks-rotation-monitor

Track public OpenID Connect discovery metadata and JWKS signing-key changes across runs. Emit structured rotation, endpoint, algorithm, and key-overlap signals for scheduled identity operations.

Maarten Vreeburg

OpenAPI Security Auditor

q_services/openapi-security-auditor

Audit OpenAPI and Swagger specifications for unsecured operations, unsafe server URLs, weak auth schemes and missing security responses.

Q Services

SAML Metadata Security Auditor

q_services/saml-metadata-security-auditor

Audit public SAML metadata for unsafe endpoints, missing roles, SHA-1, duplicate entity IDs and expired or soon-expiring certificates.

Q Services

Directory Listing Quality Auditor

seeb/directory-listing-quality-auditor

Audit public directory listing pages for missing business details, weak descriptions, and local SEO quality signals.

Techionik

npm Lockfile Security Auditor

q_services/npm-lockfile-security-auditor

Audit package-lock.json files for missing integrity, insecure or non-registry sources, install scripts, duplicate versions and unsupported formats.

Q Services

Dockerfile Security Auditor

q_services/dockerfile-security-auditor

Audit Dockerfiles for root execution, mutable images, embedded secrets, download-to-shell, unsafe permissions, remote ADD and weak package installation patterns.

Q Services

CSP Header Analyzer

junipr/csp-header-analyzer

Deep-analyze Content Security Policy headers and flag unsafe or missing directives.

junipr

security.txt Auditor

junipr/security-txt-auditor

Audit security.txt auditor inputs and return structured findings, evidence rows, and a buyer-ready report for SEO, developer, and operations teams.

junipr

Website Security Auditor

zyrox/website-security-auditor

A powerful security tool to scan websites for exposed API keys and XSS vulnerabilities.

HIDDEN GHOST

Security.txt Auditor

phoenix2810/security-txt-auditor

Audit a public website's security.txt vulnerability disclosure metadata. Checks discovery paths, required fields, expiration, contact methods, and returns a readiness score with recommendations.