🎉 New here? Use code WELCOME10 for 10% off any plan at checkout
Free Security APIs

The cybersecurity API directory

A curated, automatically-updated list of 186 free cybersecurity APIs — threat intelligence, breach & leak checks, DNS/SSL, IP reputation, email verification, authentication and more. Refreshed weekly from the open-source public-API lists, filtered to what actually matters for security work.

Free security API directory: threat intel, breach checks, DNS/SSL, IP reputation

DNS, SSL & Domain (41)

AGPC Domain Check

Check a domain's SPF, DKIM, DMARC and MX with a graded shareable report

No authCORSfree

APIFreaks

API hub with DNS, WHOIS, Screenshot, IP Geolocation, Weather, Commodity & Currency APIs

API keyfree

Alpha (Mossland)

Korean crypto channel stance + RAG Q&A + canonical entity/topic/event store

No authCORSfree

CSR.plus

Generate certificate signing requests and private keys without OpenSSL

No authCORSfree

Cloudflare

Manage DNS, CDN, Workers and other services; documented with an official OpenAPI 3.0 spec

API keyfree

Cloudflare Trace

Get IP Address, Timestamp, User Agent, Country Code, IATA, HTTP Version, TLS/SSL Version & More

No authCORSfree

Cloudmersive Validate

Validate email addresses, phone numbers, VAT numbers and domain names

API keyCORSfree

Compresso

new

Visually lossless image compression for PNG, JPEG and WebP

API keyfree

Creative Commons Catalog

Search among openly licensed and public domain works

OAuthCORSfree

DigMyName

Domain availability and registrar pricing across 52 TLDs

No authCORSfree

Domain Intelligence

DNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel call

API keyfree

DomainDb Info

Domain name search to find all domains containing particular words/phrases/etc

No authfree

Domainsdb.info

Registered Domain Names Search

No authfree

FontDownloader

A hassle free API for managing web fonts provided by Google Fonts

No authCORSfree

Google Safe Browse

Google Link/Domain Flagging

API keyfree

Google Safe Browsing

Google Link/Domain Flagging

API keyfree

Host.io

Domains Data API for Developers

API keyCORSfree

IP2WHOIS Hosted Domain Lookup

WHOIS domain name and hosted domain lookup

API keyfree

IP2WHOIS Information Lookup

WHOIS domain name lookup

API keyfree

IPFinder

Geolocation API,ASN API,IP Ranges API,IP Firewall API,Domain API

API keyCORSfree

Is This Site Down?

new

Check if any website is down, from two continents; live status, uptime history and TLS expiry

No authCORSfree

JSON 2 JSONP

Convert JSON to JSONP (on-the-fly) for easy cross-domain data requests using client-side JavaScript

No authfree

Kiprio SSL Inspector

TLS certificate analysis with protocol matrix, cipher suite and HSTS grading

API keyCORSfree

Lix.li

new

URL shortener with analytics, QR codes, UTM tags and custom domains

API keyCORSfree

Mockerito

Free mock REST APIs across different business domains

No authCORSfree

Mozilla tls scanner

Mozilla observatory tls scanner

No authfree

NetworkCalc

Network calculators, including subnets, DNS, binary, and security tools

No authCORSfree

PositiveQuotation

new

Source-verified public-domain English proverbs with provenance

No authCORSfree

RedirHub

URL redirect management with custom domains, HTTPS, analytics, and REST API

API keyCORSfree

SSL Domain Health Check

SSL certificate validity, domain WHOIS status, and DNS record checks for any domain

API keyfree

SSL Labs

Deep SSL/TLS server analysis with A+ to F grading

No authfree

SecurityTrails

Domain and IP related information such as current and historical WHOIS and DNS records

API keyfree

Short Link

Short URLs support so many domains

No authfree

Shrtcode

URl Shortener with multiple Domains

No authCORSfree

Sonar

Project Sonar DNS Enumeration API

No authCORSfree

Universities List

University names, countries and domains

No authfree

dotsweep

Domain availability across 1200+ TLDs with registration and renewal prices

No authCORSfree

host-t.com

Basic DNS query via HTTP GET request

No authfree

ip-api

Find location with IP address or domain

No authfree

ipfind.io

Geographic location of an IP address or any domain name along with some other useful information

API keyCORSfree

ipwhois

IP geolocation with country, city, coordinates, ISP, timezone and flag data

No authCORSfree

IP Intelligence (18)

Airtel IP

IP Geolocation API. Collecting data from multiple sources

No authfree

Airtel IP

IP Geolocation API. Collecting data from multiple sources

No authfree

ApogeoAPI

Bundled API for countries, states, cities, IP geolocation, and live exchange rates

API keyCORSfree

BigDataCloud

Provides fast and accurate IP geolocation APIs along with security checks and confidence area

API keyfree

FreeGeoIP

Free geo ip information, no registration required. 15k/hour rate limit

No authCORSfree

GeoJS

IP geolocation with ChatOps integration

No authCORSfree

Geolocated.io

Free IP Geolocation API: 2000 daily lookups, multiple servers worldwide

API keyCORSfree

IP Geolocation

Geolocate website visitors from their IPs

API keyCORSfree

IP Vigilante

Free IP Geolocation API

No authfree

IP2Location

IP geolocation web service to get more than 55 parameters

API keyfree

IP2Location.io

Free IP geolocation API to geolocate user's location information

API keyCORSfree

IP99

new

IP geolocation with proxy, VPN and datacenter risk and the age of the evidence

No authCORSfree

Unblock Master IP

new

IP geolocation plus datacenter and VPN detection for any IPv4 or IPv6 address

No authCORSfree

geoPlugin

IP geolocation and currency conversion

No authCORSfree

ipgeolocation

IP Geolocation AP with free plan 30k requests per month

API keyCORSfree

ipgeolocation

Find geolocation of any IP address with IP Geolocation API

API keyCORSfree

keycdn IP Location Finder

Get the IP geolocation data through the simple REST API. All the responses are JSON encoded

API keyfree

sthan.io IP Geolocation

new

Look up the geographic location of any IPv4 or IPv6 address

API keyfree

Security (32)

Application Environment Verification

Android library and API to verify the safety of user devices, detect rooted devices and other risks

API keyCORSfree

BinaryEdge

Provide access to BinaryEdge 40fy scanning platform

API keyCORSfree

Blooms

Distribute keys once for serverless applications

No authfree

Botd

Botd is a browser library for JavaScript bot detection

API keyCORSfree

Bugcrowd

Bugcrowd API for interacting and tracking the reported issues programmatically

API keyfree

CRXcavator

Chrome extension risk scoring

API keyfree

CVE.report

CVE records with NVD KEV and EPSS enrichment

No authCORSfree

Censys

Search engine for Internet connected host and devices

API keyfree

Complete Criminal Checks

Provides data of offenders from all U.S. States and Pureto Rico

API keyCORSfree

Escape

An API for escaping different kind of queries

No authfree

FOFA

Search engine for Internet connected assets and devices

API keyfree

FilterLists

Lists of filters for adblockers and firewalls

No authfree

FishFish

A volunteer cybersecurity project focused on providing resources and services that improve safety across Discord

No authfree

FullHunt

Searchable attack surface database of the entire internet

API keyfree

GreyNoise

Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data

API keyfree

HackerOne

The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting

API keyfree

IPLogs

Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing

No authCORSfree

Maskbreak

new

Detect VPNs, proxies, Tor, bots and antidetect browsers at signup, login and checkout

API keyCORSfree

Metacert

Metacert Link Flagging

API keyfree

Microsoft Security Response Center (MSRC)

Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)

No authfree

Mozilla http scanner

Mozilla observatory http scanner

No authfree

National Vulnerability Database

U.S. National Vulnerability Database

No authfree

Portscan

Scans the requesting client's IP for open TCP ports with fast or deep modes on IPv4/IPv6

No authCORSfree

Sealed Rose

new

AI media forensics and synthetic content verification for video, audio, image, and text

API keyCORSfree

Shodan

Search engine for Internet connected devices

API keyfree

Spyse

Access data on all Internet assets and build powerful attack surface management applications

API keyfree

UK Police

UK Police data

No authfree

URLScan.io

Scan and Analyse URLs

API keyfree

VirusTotal

VirusTotal File/URL Analysis

API keyfree

VirusTotal

VirusTotal File/URL Analysis

API keyfree

Virushee

Virushee file/data scanning

No authCORSfree

VulDB

VulDB API allows to initiate queries for one or more items along with transactional bots

API keyfree

Threat Intelligence (32)

AbuseIPDB

IP/domain/URL reputation

API keyfree

AlienVault Open Threat Exchange (OTX)

IP/domain/URL reputation

API keyfree

CAPEsandbox

Malware execution and analysis

API keyfree

EmailRep

Email address threat and risk prediction

No authfree

Hybrid Analysis

File and URL malware analysis powered by Falcon Sandbox

API keyfree

IP-API.io

IP geolocation with VPN/proxy/Tor detection, reputation and risk score

API keyCORSfree

IPASIS

Real-time bot detection and fraud prevention API combining IP reputation, proxy/VPN detection, and email validation in a single call

API keyCORSfree

IPGuardian

new

Check IP addresses against 140+ public threat intelligence blocklists

No authCORSfree

IPLocate.io

Fast, free, accurate IP geolocation and threat data (proxy/VPN/hosting detection) API

No authCORSfree

IPWhois.net Blacklist

Community IP blacklist to check and report abusive IP addresses

No authfree

IPstack MCP

new

IP geolocation, threat and timezone lookups for agents

API keyfree

Intelligence X

Perform OSINT via Intelligence X

API keyfree

Kiprio IP Lookup

IP geolocation and reputation with proxy, VPN, and hosting detection

API keyCORSfree

MadeOnSol

new

Real-time Solana & Robinhood Chain KOL trades, deployer reputation, and DEX activity

API keyCORSfree

MalDatabase

Provide malware datasets and threat intelligence feeds

API keyfree

MalShare

Malware Archive / file sourcing

API keyfree

Malwagon

new

Detonates files and URLs in instrumented VMs and returns behaviour, IOCs and ATT&CK

API keyfree

MalwareBazaar

Collect and share malware samples

API keyfree

Pharos API

Stablecoin risk, peg, liquidity, safety score, blacklist, mint/burn, yield, and chain-health data

API keyfree

Phisherman

IP/domain/URL reputation

API keyfree

Presend

new

Security and developer utility API -- malware, vulnerability, and domain checks, no signup

No authCORSfree

Pulsedive

Scan, search and collect threat intelligence data in real-time

API keyfree

ScanMalware

new

Scan URLs in a sandboxed browser and search past scans by domain, IP, ASN, JARM or favicon hash

No authCORSfree

Scanii

Simple REST API that can scan submitted documents/files for the presence of threats

API keyCORSfree

Threat Jammer

Risk scoring service from curated threat intelligence data

API keyfree

URLhaus

Bulk queries and Download Malware Samples

No authCORSfree

URLhaus

Database of malicious URLs used for malware distribution

No authfree

Web Of Trust (WOT)

Website reputation

API keyfree

Web of Trust

IP/domain/URL reputation

API keyfree

WhoisJSONApi

Domain WHOIS information to detect and prevent online threats, enhancing overall online safety for individuals and organizations

API keyfree

Whoisfreaks

Domain and DNS related information that will equip organizaion with comprehensive threat intelligence and attack surface analysis capabilities for enhanced security

API keyfree

ipgeolocationapi

new

IP geolocation with ASN, timezone, currency and threat data, 5,000 keyless calls a day

No authCORSfree

Build your security program, not just call APIs

PlayCISO turns security decisions into practice — a War Room incident simulator, breach-cost modelling, and free scanners for your stack.

Entries are sourced from community-maintained open lists (public-apis, public-api-lists) and filtered for security relevance. Listings are informational; verify each provider's terms before use.