Free Security APIs

The cybersecurity API directory

A curated, automatically-updated list of 153 free cybersecurity APIs — threat intelligence, breach & leak checks, DNS/SSL, IP reputation, email verification, authentication and more. Refreshed weekly from the open-source public-API lists, filtered to what actually matters for security work.

DNS, SSL & Domain (33)

AGPC Domain Check

new

Check a domain's SPF, DKIM, DMARC and MX with a graded shareable report

No authCORSfree

APIFreaks

API hub with DNS, WHOIS, Screenshot, IP Geolocation, Weather, Commodity & Currency APIs

API keyfree

Alpha (Mossland)

Korean crypto channel stance + RAG Q&A + canonical entity/topic/event store

No authCORSfree

Cloudflare

new

Manage DNS, CDN, Workers and other services; documented with an official OpenAPI 3.0 spec

API keyfree

Cloudflare Trace

Get IP Address, Timestamp, User Agent, Country Code, IATA, HTTP Version, TLS/SSL Version & More

No authCORSfree

Cloudmersive Validate

Validate email addresses, phone numbers, VAT numbers and domain names

API keyCORSfree

Creative Commons Catalog

Search among openly licensed and public domain works

OAuthCORSfree

Domain Intelligence

DNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel call

API keyfree

DomainDb Info

Domain name search to find all domains containing particular words/phrases/etc

No authfree

Domainsdb.info

Registered Domain Names Search

No authfree

FontDownloader

A hassle free API for managing web fonts provided by Google Fonts

No authCORSfree

Google Safe Browse

Google Link/Domain Flagging

API keyfree

Google Safe Browsing

Google Link/Domain Flagging

API keyfree

Host.io

Domains Data API for Developers

API keyCORSfree

IP2WHOIS Hosted Domain Lookup

WHOIS domain name and hosted domain lookup

API keyfree

IP2WHOIS Information Lookup

WHOIS domain name lookup

API keyfree

IPFinder

Geolocation API,ASN API,IP Ranges API,IP Firewall API,Domain API

API keyCORSfree

JSON 2 JSONP

Convert JSON to JSONP (on-the-fly) for easy cross-domain data requests using client-side JavaScript

No authfree

Kiprio SSL Inspector

TLS certificate analysis with protocol matrix, cipher suite and HSTS grading

API keyCORSfree

Mockerito

Free mock REST APIs across different business domains

No authCORSfree

Mozilla tls scanner

Mozilla observatory tls scanner

No authfree

NetworkCalc

Network calculators, including subnets, DNS, binary, and security tools

No authCORSfree

RedirHub

URL redirect management with custom domains, HTTPS, analytics, and REST API

API keyCORSfree

SSL Domain Health Check

new

SSL certificate validity, domain WHOIS status, and DNS record checks for any domain

API keyfree

SecurityTrails

Domain and IP related information such as current and historical WHOIS and DNS records

API keyfree

Short Link

Short URLs support so many domains

No authfree

Shrtcode

URl Shortener with multiple Domains

No authCORSfree

Sonar

Project Sonar DNS Enumeration API

No authCORSfree

Universities List

University names, countries and domains

No authfree

dotsweep

new

Domain availability across 1200+ TLDs with registration and renewal prices

No authCORSfree

host-t.com

Basic DNS query via HTTP GET request

No authfree

ip-api

Find location with IP address or domain

No authfree

ipfind.io

Geographic location of an IP address or any domain name along with some other useful information

API keyCORSfree

Security (30)

Application Environment Verification

Android library and API to verify the safety of user devices, detect rooted devices and other risks

API keyCORSfree

BinaryEdge

Provide access to BinaryEdge 40fy scanning platform

API keyCORSfree

Blooms

Distribute keys once for serverless applications

No authfree

Botd

Botd is a browser library for JavaScript bot detection

API keyCORSfree

Bugcrowd

Bugcrowd API for interacting and tracking the reported issues programmatically

API keyfree

CRXcavator

Chrome extension risk scoring

API keyfree

CVE.report

CVE records with NVD KEV and EPSS enrichment

No authCORSfree

Censys

Search engine for Internet connected host and devices

API keyfree

Complete Criminal Checks

Provides data of offenders from all U.S. States and Pureto Rico

API keyCORSfree

Escape

An API for escaping different kind of queries

No authfree

FOFA

new

Search engine for Internet connected assets and devices

API keyfree

FilterLists

Lists of filters for adblockers and firewalls

No authfree

FishFish

A volunteer cybersecurity project focused on providing resources and services that improve safety across Discord

No authfree

FullHunt

Searchable attack surface database of the entire internet

API keyfree

GreyNoise

Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data

API keyfree

HackerOne

The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting

API keyfree

IPLogs

Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing

No authCORSfree

Metacert

Metacert Link Flagging

API keyfree

Microsoft Security Response Center (MSRC)

Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)

No authfree

Mozilla http scanner

Mozilla observatory http scanner

No authfree

National Vulnerability Database

U.S. National Vulnerability Database

No authfree

Portscan

Scans the requesting client's IP for open TCP ports with fast or deep modes on IPv4/IPv6

No authCORSfree

Shodan

Search engine for Internet connected devices

API keyfree

Spyse

Access data on all Internet assets and build powerful attack surface management applications

API keyfree

UK Police

UK Police data

No authfree

URLScan.io

Scan and Analyse URLs

API keyfree

VirusTotal

VirusTotal File/URL Analysis

API keyfree

VirusTotal

VirusTotal File/URL Analysis

API keyfree

Virushee

Virushee file/data scanning

No authCORSfree

VulDB

VulDB API allows to initiate queries for one or more items along with transactional bots

API keyfree

Threat Intelligence (24)

AbuseIPDB

IP/domain/URL reputation

API keyfree

AlienVault Open Threat Exchange (OTX)

IP/domain/URL reputation

API keyfree

CAPEsandbox

Malware execution and analysis

API keyfree

EmailRep

Email address threat and risk prediction

No authfree

Hybrid Analysis

new

File and URL malware analysis powered by Falcon Sandbox

API keyfree

IP-API.io

IP geolocation with VPN/proxy/Tor detection, reputation and risk score

API keyCORSfree

IPASIS

Real-time bot detection and fraud prevention API combining IP reputation, proxy/VPN detection, and email validation in a single call

API keyCORSfree

IPLocate.io

Fast, free, accurate IP geolocation and threat data (proxy/VPN/hosting detection) API

No authCORSfree

Intelligence X

Perform OSINT via Intelligence X

API keyfree

Kiprio IP Lookup

IP geolocation and reputation with proxy, VPN, and hosting detection

API keyCORSfree

MalDatabase

Provide malware datasets and threat intelligence feeds

API keyfree

MalShare

Malware Archive / file sourcing

API keyfree

MalwareBazaar

Collect and share malware samples

API keyfree

Pharos API

Stablecoin risk, peg, liquidity, safety score, blacklist, mint/burn, yield, and chain-health data

API keyfree

Phisherman

IP/domain/URL reputation

API keyfree

Pulsedive

Scan, search and collect threat intelligence data in real-time

API keyfree

Scanii

Simple REST API that can scan submitted documents/files for the presence of threats

API keyCORSfree

Threat Jammer

Risk scoring service from curated threat intelligence data

API keyfree

URLhaus

Bulk queries and Download Malware Samples

No authCORSfree

URLhaus

Database of malicious URLs used for malware distribution

No authfree

Web Of Trust (WOT)

Website reputation

API keyfree

Web of Trust

IP/domain/URL reputation

API keyfree

WhoisJSONApi

Domain WHOIS information to detect and prevent online threats, enhancing overall online safety for individuals and organizations

API keyfree

Whoisfreaks

Domain and DNS related information that will equip organizaion with comprehensive threat intelligence and attack surface analysis capabilities for enhanced security

API keyfree

Build your security program, not just call APIs

PlayCISO turns security decisions into practice — a War Room incident simulator, breach-cost modelling, and free scanners for your stack.

Entries are sourced from community-maintained open lists (public-apis, public-api-lists) and filtered for security relevance. Listings are informational; verify each provider's terms before use.