📜 Open-Source License & Dependency Audit API

DNS / SPF / DKIM / DMARC Audit API

taroyamada/dns-dmarc-security-checker

Audit SPF, DKIM, DMARC, and MX in bulk with grades, fix-ready recommendations, and recurring email-security monitoring.

SSL Certificate Monitor API | Expiry + Issuer Changes

taroyamada/ssl-certificate-monitor

Check SSL/TLS certificates in bulk, detect expiry and issuer changes, and emit alert-ready rows for ops and SEO teams.

Audit websites for WCAG 2.1 accessibility compliance in bulk. Get A-F grades, violation details with severity, and actionable remediation steps per URL.

Security Headers Checker API | OWASP Audit

taroyamada/security-headers-checker

Audit OWASP security headers in bulk, grade each site, and monitor header drift across client or product portfolios.

Scan public privacy pages and cookie banners for GDPR/CCPA compliance signals. Returns one clean compliance summary row per site with banner detection, consent framework identification, policy freshness, and recommended actions.

robots.txt AI Policy Monitor | GPTBot ClaudeBot

taroyamada/robotstxt-ai-checker

Detect GPTBot, ClaudeBot, Google-Extended, and other AI crawler policies in robots.txt, then monitor policy shifts over time.

Monitor vendor trust centers, subprocessor lists, DPA updates, and security posture changes. Outputs one summary-first digest per vendor with executiveSummary, actionNeeded, recommendedActions, changedSinceLastRun, pageSummaries, and evidence.

Github Repository Analyzer

constant_quadruped/github-repository-analyzer

Analyze any GitHub repo: quality scores, bus factor, tech stack, dependencies, activity metrics & AI insights. Perfect for due diligence, hiring, and OSS evaluation. Supports Node, Python, Go, Rust, Java.

Analyze npm packages: weekly downloads, dependencies, licenses, deprecation status, publish dates. Perfect for dependency auditing, license compliance, tech research. No API key needed.

Discover subdomains for any domain using Certificate Transparency logs (crt.sh). Find hidden subdomains for security audits, penetration testing, asset inventory. No API key needed.