The cybersecurity API directory
A curated, automatically-updated list of 221 free cybersecurity APIs — threat intelligence, breach & leak checks, DNS/SSL, IP reputation, email verification, authentication and more. Refreshed weekly from the open-source public-API lists, filtered to what actually matters for security work. To check a link without any lookup, try the Is this link safe? checker (in-browser heuristics).
All 221 APIs with category, auth type, CORS, pricing, source and link, ready for a spreadsheet, a SIEM lookup table or your own tooling.

Recently added
Anti-Fraud & Phishing (12)
Dymo API
Multi-account and fraud detection. Sending emails without ending up in SPAM
Email Spam Tester
Send a test message and get a spam score, 41 checks with RFC citations and a fix plan
Email Validation
Validate email addresses for deliverability and spam
FingerprintJS Pro
Fraud detection API offering highly accurate browser fingerprinting
FraudCoins
On-chain top-10 holder concentration and contract permissions for crypto tokens
FraudLabs Pro
Screen order information using AI to detect frauds
NoPhishy
Check links to see if they're known phishing attempts
OOPSpam
Multiple spam filtering service
PhishStats
Phishing database
Spam Hunter
Free service to classify text for spam using ML
VeriRoute Intel
CNAM caller ID, carrier/LRN lookup and spam scoring for North American phone numbers
mailfloss
newStop spam signups: block disposable and invalid emails and suggest typo fixes. 500 free a month
Authentication & Identity (16)
Auth0
Easy to implement, adaptable authentication and authorization platform
Best Temp Mail
Disposable inboxes for automated email testing, with OTP extraction
CO2 Offset
API calculates and validates the carbon footprint
Climatiq
Calculate the environmental footprint created by a broad range of emission-generating activities
GetOTP
Implement OTP flow quickly
Jumio
Provides identity verification, KYC (Know Your Customer), and AML (Anti-Money Laundering) solutions, including document verification and biometric authentication
LoginRadius
Managed User Authentication Service
Micro User Service
User management and authentication
MojoAuth
Secure and modern passwordless authentication platform
Neetix Liveliness
Face liveness, presentation-attack detection and 1:1 face match for identity verification
SAWO Labs
Simplify login and improve user experience by integrating passwordless authentication in your app
TempMailGrab
Disposable inboxes for email testing with OTP extraction and webhooks
TotalShiftLeft Sandbox
Free multi-protocol sandbox: REST, GraphQL & SOAP with OAuth2/JWT auth and OpenAPI 3.0 spec
Website Carbon
API to estimate the carbon footprint of loading web pages
Xeramail Temp Mail
Temp email address REST API for privacy, testing, automation with OTP extraction
inboxsink
Disposable inboxes for end-to-end tests that wait for the email and extract OTP codes
Breach & Leak Intel (5)
ClassiFinder
Detect leaked secrets and prompt-injection in text and return redacted output
HackMyIP
IP geolocation, ISP and privacy/VPN scoring, email breach checks, DNS and WHOIS lookups
HaveIBeenPwned
Passwords which have previously been exposed in data breaches
ThreatCluster
Threat intelligence: incident clusters, validated IOCs, CVEs, ransomware leak-site victims
XposedOrNot
newCheck an email against known data breaches, read its breach history and get domain breach counts
Compliance & Privacy (11)
Africa Compliance Data
newPublic holidays and business days for African countries, with sources and per-country coverage
ArcNautical
Screen any ship by IMO for OFAC/EU/UN/UK sanctions, ownership opacity and a vetting grade
ArcNautical Vessel Check
Vessel sanctions screening, ownership transparency scoring, and vetting intelligence
CompliAPI
Screen crypto addresses, emails, websites, IDs and countries against OFAC, EU, UK sanctions lists
MediaCraft AI
Chinese content compliance review (17 platforms), EN↔CN translation, and SEO optimization. Pay-per-call via x402 (Solana USDC).
OpenSanctions
Data on international sanctions, crime and politically exposed persons
Privacy.com
Generate merchant-specific and one-time use credit card numbers that link back to your bank
Right to Disconnect
Right-to-disconnect employment law by EU country: binding status, statute, and sanctions
Sanctions Screening
newFuzzy name screening against OFAC, UN, EU and UK sanctions lists plus PEPs, with list versions
W System EU Business Data
newEU VAT (VIES) and EORI validation, company registers, EU/UN/OFAC/UK sanctions screening
gankdat
UK & EU tenders, UK planning, UK sanctions, US exclusions, UK insolvency and incorporations as JSON
Crypto & Secrets (10)
API Snap
Free utility API platform. QR codes, screenshots, PDFs, image resize, hashing, and more
BitWarden
Best open-source password manager
Classify
Encrypting & decrypting text messages
Dehash.lt
Hash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512
GitGuardian
Scan files for secrets (API Keys, database credentials)
Hashable
A REST API to access high level cryptographic functions and methods
Passwordinator
Generate random passwords of varying complexities
Secrets-APi
Used For Learning purpose Learn all security types with this api
Utilorax
203 JSON endpoints: hashing, encoding, unit conversion, text, dates and file conversion
dead-drop
Ephemeral zero-knowledge encrypted data sharing
DNS, SSL & Domain (52)
AGPC Domain Check
Check a domain's SPF, DKIM, DMARC and MX with a graded shareable report
APIFreaks
API hub with DNS, WHOIS, Screenshot, IP Geolocation, Weather, Commodity & Currency APIs
AgentPay Domain Lookup
DNS records, WHOIS/RDAP, IP ownership and domain reports for AI agents, paid per call via x402
Alpha (Mossland)
Korean crypto channel stance + RAG Q&A + canonical entity/topic/event store
CSR.plus
Generate certificate signing requests and private keys without OpenSSL
Cloudflare
Manage DNS, CDN, Workers and other services; documented with an official OpenAPI 3.0 spec
Cloudflare Trace
Get IP Address, Timestamp, User Agent, Country Code, IATA, HTTP Version, TLS/SSL Version & More
Cloudmersive Validate
Validate email addresses, phone numbers, VAT numbers and domain names
Company Enrichment
newDomain, URL or email to company name, industry, size, HQ, tickers and socials, 125k companies
Compresso
Visually lossless image compression for PNG, JPEG and WebP
Creative Commons Catalog
Search among openly licensed and public domain works
DigMyName
Domain availability and registrar pricing across 52 TLDs
Disban
Classify email domains as disposable, free, alias, testing or parked to block fake signups
Domain Info by LifeStep
DNS records, SPF/DMARC detection and TLS certificate expiry
Domain Intelligence
DNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel call
DomainDb Info
Domain name search to find all domains containing particular words/phrases/etc
Domainsdb.info
Registered Domain Names Search
Enterno
newHTTP headers, DNS, SSL, WHOIS and redirect checks as plain text, JSON or CSV
FontDownloader
A hassle free API for managing web fonts provided by Google Fonts
Google Safe Browse
Google Link/Domain Flagging
Google Safe Browsing
Google Link/Domain Flagging
Host.io
Domains Data API for Developers
IP2WHOIS Hosted Domain Lookup
WHOIS domain name and hosted domain lookup
IP2WHOIS Information Lookup
WHOIS domain name lookup
IPFinder
Geolocation API,ASN API,IP Ranges API,IP Firewall API,Domain API
Is This Site Down?
Check if any website is down, from two continents; live status, uptime history and TLS expiry
JSON 2 JSONP
Convert JSON to JSONP (on-the-fly) for easy cross-domain data requests using client-side JavaScript
Kiprio SSL Inspector
TLS certificate analysis with protocol matrix, cipher suite and HSTS grading
Lix.li
URL shortener with analytics, QR codes, UTM tags and custom domains
Logoapi
newFree SVG company logos by domain, plus search by name. No signup
MailSenpai DNS Check
Check a domain's SPF, DKIM, DMARC and MX records and get what to fix, with the values to publish
Mockerito
Free mock REST APIs across different business domains
Mozilla tls scanner
Mozilla observatory tls scanner
Namedesk
newDomain name registration statistics by TLD, registry and registrar
NetworkCalc
Network calculators, including subnets, DNS, binary, and security tools
PositiveQuotation
Source-verified public-domain English proverbs with provenance
RedirHub
URL redirect management with custom domains, HTTPS, analytics, and REST API
SSL Domain Health Check
SSL certificate validity, domain WHOIS status, and DNS record checks for any domain
SSL Labs
Deep SSL/TLS server analysis with A+ to F grading
SecurityTrails
Domain and IP related information such as current and historical WHOIS and DNS records
Short Link
Short URLs support so many domains
Shrtcode
URl Shortener with multiple Domains
Sonar
Project Sonar DNS Enumeration API
Universities List
University names, countries and domains
Vetto
newCheck email domains in bulk for disposable providers and dead domains, no key needed
Website Security Scanner
newPassive website security audit: TLS, security headers, exposed files and a 0-100 score
anon.li
newCreate and manage anonymous email aliases, forwarding recipients and custom domains
dotsweep
Domain availability across 1200+ TLDs with registration and renewal prices
host-t.com
Basic DNS query via HTTP GET request
ip-api
Find location with IP address or domain
ipfind.io
Geographic location of an IP address or any domain name along with some other useful information
ipwhois
IP geolocation with country, city, coordinates, ISP, timezone and flag data
Email Verification (14)
Abstract API
Suite of APIs including email validation, IP geolocation, phone validation, exchange rates and more
B2B Email & Domain Scorer
newEmail verification: MX, disposable/free/role detection, typo fix and a keep/fix/drop action
Hunter
API for domain search, professional email finder, author finder and email verifier
Kickbox
Email verification API
Kiprio Email Validate
Free email validation: MX check, disposable detection, syntax
Kiprio Email Validation
Email address validation with MX, disposable, role and typo detection
Mailsac
Disposable Email
Meirra
SEO monitoring, email verification, lead generation, and marketing analytics
Micro-SaaS AI Suite
8 serverless AI APIs for sentiment analysis, copy generation, email verification, & OCR
PeopleSearch
People and company search in plain English, with verified work emails and email verification
Signaliz
GTM enrichment, lead generation, email verification, and company signals
SpryTools Email Validation
Syntax + MX + disposable/role-based email validation
Tomba email finder
Email Finder for B2B sales and email marketing and email verifier
uchecker
Bulk email verification with full SMTP server responses
IP Intelligence (23)
17NAS
newFree IP geolocation API with IPv4/IPv6 detection, ASN and country info, no auth required
Airtel IP
IP Geolocation API. Collecting data from multiple sources
Airtel IP
IP Geolocation API. Collecting data from multiple sources
ApogeoAPI
Bundled API for countries, states, cities, IP geolocation, and live exchange rates
BigDataCloud
Provides fast and accurate IP geolocation APIs along with security checks and confidence area
Data and APIs
newSearch, read and call 125+ data APIs: sanctions, barcodes, IP intelligence, companies, holidays
FindIP
newIP geolocation with VPN, proxy, Tor, datacenter and malicious IP detection, free
FreeGeoIP
Free geo ip information, no registration required. 15k/hour rate limit
GeoJS
IP geolocation with ChatOps integration
Geolocated.io
Free IP Geolocation API: 2000 daily lookups, multiple servers worldwide
IP Geolocation
Geolocate website visitors from their IPs
IP Intelligence
newCountry, ASN, datacenter, cloud and Tor detection with an explainable risk score for any IP
IP Vigilante
Free IP Geolocation API
IP2Location
IP geolocation web service to get more than 55 parameters
IP2Location.io
Free IP geolocation API to geolocate user's location information
IP99
IP geolocation with proxy, VPN and datacenter risk and the age of the evidence
Network Data Labs
IP geolocation with accuracy radius, ASN, and flags for Tor exits, known VPN networks and hosting
Unblock Master IP
IP geolocation plus datacenter and VPN detection for any IPv4 or IPv6 address
geoPlugin
IP geolocation and currency conversion
ipgeolocation
IP Geolocation AP with free plan 30k requests per month
ipgeolocation
Find geolocation of any IP address with IP Geolocation API
keycdn IP Location Finder
Get the IP geolocation data through the simple REST API. All the responses are JSON encoded
sthan.io IP Geolocation
Look up the geographic location of any IPv4 or IPv6 address
Security (39)
Agent Verifier
Self-check for AI agents: verifies Web Bot Auth signatures and shows how a request looks
Application Environment Verification
Android library and API to verify the safety of user devices, detect rooted devices and other risks
BinaryEdge
Provide access to BinaryEdge 40fy scanning platform
Blooms
Distribute keys once for serverless applications
Botd
Botd is a browser library for JavaScript bot detection
Bugcrowd
Bugcrowd API for interacting and tracking the reported issues programmatically
CISA Known Exploited Vulnerabilities
CISA KEV catalog of actively exploited CVEs as JSON, filterable by vendor, with CWE and due dates
CRXcavator
Chrome extension risk scoring
CVE.report
CVE records with NVD KEV and EPSS enrichment
Censys
Search engine for Internet connected host and devices
Complete Criminal Checks
Provides data of offenders from all U.S. States and Pureto Rico
Escape
An API for escaping different kind of queries
FOFA
Search engine for Internet connected assets and devices
FilterLists
Lists of filters for adblockers and firewalls
FishFish
A volunteer cybersecurity project focused on providing resources and services that improve safety across Discord
FullHunt
Searchable attack surface database of the entire internet
GreyNoise
Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data
HackerOne
The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting
IPLogs
Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing
IPScanner
IP network class (residential, mobile, hosting, VPN, residential proxy, Tor) with a confidence score
Maskbreak
Detect VPNs, proxies, Tor, bots and antidetect browsers at signup, login and checkout
Metacert
Metacert Link Flagging
Microsoft Security Response Center (MSRC)
Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)
Mozilla http scanner
Mozilla observatory http scanner
National Vulnerability Database
U.S. National Vulnerability Database
OSV
Open source vulnerability database and distributed triage infrastructure
Portscan
Scans the requesting client's IP for open TCP ports with fast or deep modes on IPv4/IPv6
RealBots
newVerify whether requests claiming to be GPTBot, ClaudeBot & other AI crawlers are real
Sealed Rose
AI media forensics and synthetic content verification for video, audio, image, and text
Shodan
Search engine for Internet connected devices
Spyse
Access data on all Internet assets and build powerful attack surface management applications
Tanod
newPay-per-call scans of smart contracts, addresses and MCP/skill packages; small free daily tier
UK Police
UK Police data
URLScan.io
Scan and Analyse URLs
VPNDetection
Check whether an IPv4 or IPv6 address belongs to VPN infrastructure, no key needed
VirusTotal
VirusTotal File/URL Analysis
VirusTotal
VirusTotal File/URL Analysis
Virushee
Virushee file/data scanning
VulDB
VulDB API allows to initiate queries for one or more items along with transactional bots
Security Utilities (4)
SonarQube
SonarQube REST APIs to detect bugs, code smells & security vulnerabilities
Stytch
User infrastructure for modern applications
Warrant
APIs for authorization and access control
snapWONDERS
newPhoto and video forensic analysis, steganography and media format conversion
Threat Intelligence (35)
AbuseIPDB
IP/domain/URL reputation
AlienVault Open Threat Exchange (OTX)
IP/domain/URL reputation
CAPEsandbox
Malware execution and analysis
DefenceLevel Index
newDaily cyber threat level (DEFCON 5 to 1) with open method, history in JSON/CSV and a badge
EmailRep
Email address threat and risk prediction
Hybrid Analysis
File and URL malware analysis powered by Falcon Sandbox
IP-API.io
IP geolocation with VPN/proxy/Tor detection, reputation and risk score
IPASIS
Real-time bot detection and fraud prevention API combining IP reputation, proxy/VPN detection, and email validation in a single call
IPGuardian
Check IP addresses against 140+ public threat intelligence blocklists
IPLocate.io
Fast, free, accurate IP geolocation and threat data (proxy/VPN/hosting detection) API
IPWhois.net Blacklist
Community IP blacklist to check and report abusive IP addresses
IPstack MCP
IP geolocation, threat and timezone lookups for agents
Intelligence X
Perform OSINT via Intelligence X
Kiprio IP Lookup
IP geolocation and reputation with proxy, VPN, and hosting detection
MadeOnSol
Real-time Solana & Robinhood Chain KOL trades, deployer reputation, and DEX activity
MalDatabase
Provide malware datasets and threat intelligence feeds
MalShare
Malware Archive / file sourcing
Malwagon
Detonates files and URLs in instrumented VMs and returns behaviour, IOCs and ATT&CK
MalwareBazaar
Collect and share malware samples
Pharos API
Stablecoin risk, peg, liquidity, safety score, blacklist, mint/burn, yield, and chain-health data
Phisherman
IP/domain/URL reputation
Presend
Security and developer utility API -- malware, vulnerability, and domain checks, no signup
Pulsedive
Scan, search and collect threat intelligence data in real-time
ScanMalware
Scan URLs in a sandboxed browser and search past scans by domain, IP, ASN, JARM or favicon hash
Scanii
Simple REST API that can scan submitted documents/files for the presence of threats
Threat Jammer
Risk scoring service from curated threat intelligence data
URLhaus
Bulk queries and Download Malware Samples
URLhaus
Database of malicious URLs used for malware distribution
Web Of Trust (WOT)
Website reputation
Web of Trust
IP/domain/URL reputation
WhoisJSONApi
Domain WHOIS information to detect and prevent online threats, enhancing overall online safety for individuals and organizations
Whoisfreaks
Domain and DNS related information that will equip organizaion with comprehensive threat intelligence and attack surface analysis capabilities for enhanced security
ipgeolocationapi
IP geolocation with ASN, timezone, currency and threat data, 5,000 keyless calls a day
ipv4 Network Tools
newDNS, WHOIS, SSL, email validation, IP geolocation and blacklist lookups
isMalicious
Reputation of IPs, domains, URLs and file hashes from aggregated threat feeds, plus CVE lookups
What is a cybersecurity API?
A cybersecurity API is a web service your code can call to get security data or a verdict — for example whether an IP address, domain, URL or file hash is known to be malicious, whether an email address appears in a breach, or which DNS and TLS records a domain publishes — so checks run automatically instead of by hand.
Security teams use them to enrich SIEM and SOAR alerts, score sign-ups and logins for fraud, screen links and attachments, monitor their own domains and certificates, and give AI agents a controlled way to look things up. When choosing one from this directory:
- Auth — "No auth" APIs are quickest to try; API-key services usually offer higher limits and accountability.
- CORS — matters only if you call the API directly from a browser; server-side calls do not need it.
- Limits and terms — free tiers are usually rate-limited and some do not allow commercial use, so read the provider's terms before relying on one in production.
- Freshness and privacy — check how often the data is updated and what the provider stores about your queries, especially if you send user IPs or email addresses.
Build your security program, not just call APIs
PlayCISO turns security decisions into practice — a Cyber War Room incident simulator, breach-cost modelling, and free scanners for your stack.
Entries are sourced from community-maintained open lists (public-apis, public-api-lists) and filtered for security relevance. Listings are informational; verify each provider's terms before use.