Pricing

from $6.00 / 1,000 saml metadata audits

SAML Metadata Security Auditor

Audit public SAML metadata for unsafe endpoints, missing roles, SHA-1, duplicate entity IDs and expired or soon-expiring certificates.

Pricing

from $6.00 / 1,000 saml metadata audits

Rating

0.0

(0)

Developer

Q Services

Actor stats

Bookmarked

Total users

Monthly active users

13 days ago

Last modified

Input

{
  "metadataUrls": ["https://login.microsoftonline.com/common/FederationMetadata/2007-06/FederationMetadata.xml"],
  "expiryWarningDays": 30
}

Only public HTTPS URLs are accepted and redirects are not followed. Downloads are size-limited.

Output

One dataset item per metadata document containing a score, stable issue codes, entity and role counts, bounded endpoint inventory and certificate validity summaries. Certificate bodies are never returned.

Recurring use cases

SSO certificate-expiry monitoring
Enterprise onboarding checks
SAML configuration drift detection
Security-review and compliance evidence

Pricing is pay per event: one Actor-start charge and one charge per metadata audit.

SAML Metadata Extractor

datamule/saml-metadata-extractor

Point at any SAML 2.0 identity-federation metadata feed (or MDQ service) and get one structured row per IdP/SP: endpoints, cert fingerprints, attributes, UI metadata.

Datamule

SAML Metadata & Certificate Rotation Monitor

monema/saml-metadata-certificate-monitor

Track public SAML IdP federation metadata, signing-certificate expiry and rotation, SSO endpoints, and trust-sensitive changes across scheduled runs.

Maarten Vreeburg

OpenAPI Security Auditor

q_services/openapi-security-auditor

Audit OpenAPI and Swagger specifications for unsecured operations, unsafe server URLs, weak auth schemes and missing security responses.

Q Services

OpenID Connect Discovery Security Auditor

q_services/openid-connect-discovery-auditor

Audit OIDC discovery documents and JWKS for issuer mismatches, unsafe endpoints, weak keys, insecure algorithms and missing PKCE.

Q Services

CSP Header Analyzer

junipr/csp-header-analyzer

Deep-analyze Content Security Policy headers and flag unsafe or missing directives.

junipr

SSL Certificate Checker

bgfc97/ssl-certificate-checker

Check TLS/SSL certificates for many hosts: issuer, valid-from/to, days until expiry, expired/expiring-soon flags, SAN domains and trust status. For uptime & certificate-expiry monitoring. No key, no proxy.

Bruno

npm Lockfile Security Auditor

q_services/npm-lockfile-security-auditor

Audit package-lock.json files for missing integrity, insecure or non-registry sources, install scripts, duplicate versions and unsupported formats.

Q Services

Hash Generator

web.harvester/hash-generator

Generate MD5, SHA-1, SHA-256, SHA-512 hashes for text or files. Verify integrity, create checksums, deduplicate content.

Web Harvester

security.txt Auditor

junipr/security-txt-auditor

Audit security.txt auditor inputs and return structured findings, evidence rows, and a buyer-ready report for SEO, developer, and operations teams.

junipr

Expired Domain Finder with SEO Metrics

constant_quadruped/expired-domain-finder

Find expired and expiring domains enriched with WHOIS data, backlink counts, domain authority, and Wayback Machine history. Quality scored and ranked.