# Free Cybersecurity APIs Directory

> A curated, weekly-updated directory of 153 free cybersecurity APIs — threat intelligence, breach & leak checks, DNS/SSL, IP reputation, email verification and authentication. https://playciso.com/security-apis

## Anti-Fraud & Phishing

- **Dymo API** — Multi-account and fraud detection. Sending emails without ending up in SPAM (API key, free) https://dymo.tpeoficial.com/
- **Email Validation** — Validate email addresses for deliverability and spam (API key, free) https://www.abstractapi.com/email-verification-validation-api
- **FingerprintJS Pro** — Fraud detection API offering highly accurate browser fingerprinting (API key, free) https://dev.fingerprintjs.com/docs
- **FraudLabs Pro** — Screen order information using AI to detect frauds (API key, free) https://www.fraudlabspro.com/developer/api/screen-order
- **NoPhishy** — Check links to see if they're known phishing attempts (API key, free) https://rapidapi.com/Amiichu/api/exerra-phishing-check/
- **OOPSpam** — Multiple spam filtering service (no auth, free) https://oopspam.com/
- **PhishStats** — Phishing database (no auth, free) https://phishstats.info/
- **Spam Hunter** — Free service to classify text for spam using ML (API key, free) https://spam-hunter.ru
- **VeriRoute Intel** — CNAM caller ID, carrier/LRN lookup and spam scoring for North American phone numbers (API key, free) https://verirouteintel.com

## Authentication & Identity

- **Auth0** — Easy to implement, adaptable authentication and authorization platform (API key, free) https://auth0.com
- **CO2 Offset** — API calculates and validates the carbon footprint (no auth, free) https://co2offset.io/api.html
- **Climatiq** — Calculate the environmental footprint created by a broad range of emission-generating activities (API key, free) https://docs.climatiq.io
- **GetOTP** — Implement OTP flow quickly (API key, free) https://otp.dev/en/docs/
- **Jumio** — Provides identity verification, KYC (Know Your Customer), and AML (Anti-Money Laundering) solutions, including document verification and biometric authentication (API key, free) https://www.jumio.com/developer/
- **LoginRadius** — Managed User Authentication Service (API key, free) https://www.loginradius.com/docs/
- **Micro User Service** — User management and authentication (API key, free) https://m3o.com/user
- **MojoAuth** — Secure and modern passwordless authentication platform (API key, free) https://mojoauth.com
- **SAWO Labs** — Simplify login and improve user experience by integrating passwordless authentication in your app (API key, free) https://sawolabs.com
- **TotalShiftLeft Sandbox** — Free multi-protocol sandbox: REST, GraphQL & SOAP with OAuth2/JWT auth and OpenAPI 3.0 spec (no auth, free) https://demo.totalshiftleft.ai/
- **Website Carbon** — API to estimate the carbon footprint of loading web pages (no auth, free) https://api.websitecarbon.com/

## Breach & Leak Intel

- **ClassiFinder** — Detect leaked secrets and prompt-injection in text and return redacted output (API key, free) https://classifinder.ai
- **HackMyIP** — IP geolocation, ISP and privacy/VPN scoring, email breach checks, DNS and WHOIS lookups (no auth, free) https://hackmyip.com/api
- **HaveIBeenPwned** — Passwords which have previously been exposed in data breaches (API key, free) https://haveibeenpwned.com/API/v3

## Compliance & Privacy

- **ArcNautical Vessel Check** — Vessel sanctions screening, ownership transparency scoring, and vetting intelligence (no auth, free) https://github.com/SaltyTaro/vessel-check-api
- **Conformi** — EU legal research over the EUR-Lex corpus (DE/EN/FR) with verifiable CELEX citations; semantic search, knowledge reports, legal timelines for GDPR, AI Act, NIS2, DORA (API key, free) https://conformi.eu/api/v1/openapi.json
- **MediaCraft AI** — Chinese content compliance review (17 platforms), EN↔CN translation, and SEO optimization. Pay-per-call via x402 (Solana USDC). (API key, free) https://mediacraft-x402-api.onrender.com
- **OpenSanctions** — Data on international sanctions, crime and politically exposed persons (no auth, free) https://www.opensanctions.org/docs/api/
- **Privacy.com** — Generate merchant-specific and one-time use credit card numbers that link back to your bank (API key, free) https://privacy.com/developer/docs

## Crypto & Secrets

- **API Snap** — Free utility API platform. QR codes, screenshots, PDFs, image resize, hashing, and more (API key, free) https://api-snap.com
- **BitWarden** — Best open-source password manager (oauth, free) https://bitwarden.com/help/api/
- **Classify** — Encrypting & decrypting text messages (no auth, free) https://classify-web.herokuapp.com/#/api
- **Dehash.lt** — Hash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512 (no auth, free) https://github.com/Dehash-lt/api
- **GitGuardian** — Scan files for secrets (API Keys, database credentials) (API key, free) https://api.gitguardian.com/doc
- **Hashable** — A REST API to access high level cryptographic functions and methods (no auth, free) https://hashable.space/pages/api/
- **Passwordinator** — Generate random passwords of varying complexities (no auth, free) https://github.com/fawazsullia/password-generator/
- **Secrets-APi** — Used For Learning purpose Learn all security types with this api (API key, free) https://secrets-api.appbrewery.com/
- **Utilorax** — 203 JSON endpoints: hashing, encoding, unit conversion, text, dates and file conversion (API key, free) https://utilorax.com/api
- **dead-drop** — Ephemeral zero-knowledge encrypted data sharing (no auth, free) https://api.dead-drop.xyz/api/v1/docs

## DNS, SSL & Domain

- **AGPC Domain Check** — Check a domain's SPF, DKIM, DMARC and MX with a graded shareable report (no auth, free) https://guild.tradeuniquecapital.com/api
- **APIFreaks** — API hub with DNS, WHOIS, Screenshot, IP Geolocation, Weather, Commodity & Currency APIs (API key, free) https://apifreaks.com/docs
- **Alpha (Mossland)** — Korean crypto channel stance + RAG Q&A + canonical entity/topic/event store (no auth, free) https://alpha.moss.land/developers
- **Cloudflare** — Manage DNS, CDN, Workers and other services; documented with an official OpenAPI 3.0 spec (API key, free) https://developers.cloudflare.com/api/
- **Cloudflare Trace** — Get IP Address, Timestamp, User Agent, Country Code, IATA, HTTP Version, TLS/SSL Version & More (no auth, free) https://github.com/fawazahmed0/cloudflare-trace-api
- **Cloudmersive Validate** — Validate email addresses, phone numbers, VAT numbers and domain names (API key, free) https://cloudmersive.com/validate-api
- **Creative Commons Catalog** — Search among openly licensed and public domain works (oauth, free) https://api.creativecommons.engineering/
- **Domain Intelligence** — DNS, WHOIS/RDAP, SSL, subdomain enumeration, and email security in one parallel call (API key, free) https://oti-labs.com/domain-intelligence-api
- **DomainDb Info** — Domain name search to find all domains containing particular words/phrases/etc (no auth, free) https://api.domainsdb.info/
- **Domainsdb.info** — Registered Domain Names Search (no auth, free) https://domainsdb.info/
- **FontDownloader** — A hassle free API for managing web fonts provided by Google Fonts (no auth, free) https://fontdownloader.org/#API
- **Google Safe Browse** — Google Link/Domain Flagging (API key, free) https://developers.google.com/safe-browsing/
- **Google Safe Browsing** — Google Link/Domain Flagging (API key, free) https://developers.google.com/safe-browsing/
- **Host.io** — Domains Data API for Developers (API key, free) https://host.io
- **IP2WHOIS Hosted Domain Lookup** — WHOIS domain name and hosted domain lookup (API key, free) https://www.ip2whois.com
- **IP2WHOIS Information Lookup** — WHOIS domain name lookup (API key, free) https://www.ip2whois.com/
- **IPFinder** — Geolocation API,ASN API,IP Ranges API,IP Firewall API,Domain API (API key, free) https://ipfinder.io/
- **JSON 2 JSONP** — Convert JSON to JSONP (on-the-fly) for easy cross-domain data requests using client-side JavaScript (no auth, free) https://json2jsonp.com/
- **Kiprio SSL Inspector** — TLS certificate analysis with protocol matrix, cipher suite and HSTS grading (API key, free) https://kiprio.com/ssl-api
- **Mockerito** — Free mock REST APIs across different business domains (no auth, free) https://mockerito.com/?ref=public-api-lists
- **Mozilla tls scanner** — Mozilla observatory tls scanner (no auth, free) https://github.com/mozilla/tls-observatory#api-endpoints
- **NetworkCalc** — Network calculators, including subnets, DNS, binary, and security tools (no auth, free) https://networkcalc.com/api/docs
- **RedirHub** — URL redirect management with custom domains, HTTPS, analytics, and REST API (API key, free) https://redirhub.com
- **SSL Domain Health Check** — SSL certificate validity, domain WHOIS status, and DNS record checks for any domain (API key, free) https://rapidapi.com/goktugbk/api/ssl-domain-health-check
- **SecurityTrails** — Domain and IP related information such as current and historical WHOIS and DNS records (API key, free) https://securitytrails.com/corp/apidocs
- **Short Link** — Short URLs support so many domains (no auth, free) https://github.com/FayasNoushad/Short-Link-API
- **Shrtcode** — URl Shortener with multiple Domains (no auth, free) https://shrtco.de/docs
- **Sonar** — Project Sonar DNS Enumeration API (no auth, free) https://github.com/Cgboal/SonarSearch
- **Universities List** — University names, countries and domains (no auth, free) https://github.com/Hipo/university-domains-list
- **dotsweep** — Domain availability across 1200+ TLDs with registration and renewal prices (no auth, free) https://dotsweep.com/docs
- **host-t.com** — Basic DNS query via HTTP GET request (no auth, free) https://host-t.com
- **ip-api** — Find location with IP address or domain (no auth, free) https://ip-api.com/docs
- **ipfind.io** — Geographic location of an IP address or any domain name along with some other useful information (API key, free) https://ipfind.io

## Email Verification

- **Abstract API** — Suite of APIs including email validation, IP geolocation, phone validation, exchange rates and more (API key, free) https://www.abstractapi.com/
- **Hunter** — API for domain search, professional email finder, author finder and email verifier (API key, free) https://hunter.io/api
- **Kickbox** — Email verification API (no auth, free) https://open.kickbox.com/
- **Kiprio Email Validate** — Free email validation: MX check, disposable detection, syntax (API key, free) https://kiprio.com/v1/email-validate
- **Kiprio Email Validation** — Email address validation with MX, disposable, role and typo detection (API key, free) https://kiprio.com/email-validation-api
- **Mailsac** — Disposable Email (API key, free) https://mailsac.com/docs/api
- **Meirra** — SEO monitoring, email verification, lead generation, and marketing analytics (API key, free) https://meirra.com/api
- **Signaliz** — GTM enrichment, lead generation, email verification, and company signals (API key, free) https://signaliz.docs.buildwithfern.com/signaliz-api-public-docs/introduction
- **SpryTools Email Validation** — Syntax + MX + disposable/role-based email validation (API key, free) https://sprytools.com/apis/email-validation
- **Tomba email finder** — Email Finder for B2B sales and email marketing and email verifier (API key, free) https://tomba.io/api

## IP Intelligence

- **Airtel IP** — IP Geolocation API. Collecting data from multiple sources (no auth, free) https://sys.airtel.lv/ip2country/1.1.1.1/?full=true
- **Airtel IP** — IP Geolocation API. Collecting data from multiple sources (no auth, free) https://aether.epias.ltd/ip2country/1.1.1.1/?full=true
- **ApogeoAPI** — Bundled API for countries, states, cities, IP geolocation, and live exchange rates (API key, free) https://apogeoapi.com
- **BigDataCloud** — Provides fast and accurate IP geolocation APIs along with security checks and confidence area (API key, free) https://www.bigdatacloud.com/ip-geolocation-apis
- **FreeGeoIP** — Free geo ip information, no registration required. 15k/hour rate limit (no auth, free) https://freegeoip.app/
- **GeoJS** — IP geolocation with ChatOps integration (no auth, free) https://www.geojs.io/
- **Geolocated.io** — Free IP Geolocation API: 2000 daily lookups, multiple servers worldwide (API key, free) https://geolocated.io/
- **IP Geolocation** — Geolocate website visitors from their IPs (API key, free) https://www.abstractapi.com/ip-geolocation-api
- **IP Vigilante** — Free IP Geolocation API (no auth, free) https://www.ipvigilante.com/
- **IP2Location** — IP geolocation web service to get more than 55 parameters (API key, free) https://www.ip2location.com/web-service/ip2location
- **IP2Location.io** — Free IP geolocation API to geolocate user's location information (API key, free) https://www.ip2location.io
- **geoPlugin** — IP geolocation and currency conversion (no auth, free) https://www.geoplugin.com
- **ipgeolocation** — IP Geolocation AP with free plan 30k requests per month (API key, free) https://ipgeolocation.io/
- **ipgeolocation** — Find geolocation of any IP address with IP Geolocation API (API key, free) https://ipgeolocation.com/
- **keycdn IP Location Finder** — Get the IP geolocation data through the simple REST API. All the responses are JSON encoded (API key, free) https://tools.keycdn.com/geo

## Security

- **Application Environment Verification** — Android library and API to verify the safety of user devices, detect rooted devices and other risks (API key, free) https://github.com/fingerprintjs/aev
- **BinaryEdge** — Provide access to BinaryEdge 40fy scanning platform (API key, free) https://docs.binaryedge.io/api-v2.html
- **Blooms** — Distribute keys once for serverless applications (no auth, free) https://blooms-production.up.railway.app/api
- **Botd** — Botd is a browser library for JavaScript bot detection (API key, free) https://github.com/fingerprintjs/botd
- **Bugcrowd** — Bugcrowd API for interacting and tracking the reported issues programmatically (API key, free) https://docs.bugcrowd.com/api/getting-started/
- **CRXcavator** — Chrome extension risk scoring (API key, free) https://crxcavator.io/apidocs
- **CVE.report** — CVE records with NVD KEV and EPSS enrichment (no auth, free) https://cve.report/api
- **Censys** — Search engine for Internet connected host and devices (API key, free) https://search.censys.io/api
- **Complete Criminal Checks** — Provides data of offenders from all U.S. States and Pureto Rico (API key, free) https://completecriminalchecks.com/Developers
- **Escape** — An API for escaping different kind of queries (no auth, free) https://github.com/polarspetroll/EscapeAPI
- **FOFA** — Search engine for Internet connected assets and devices (API key, free) https://en.fofa.info/api
- **FilterLists** — Lists of filters for adblockers and firewalls (no auth, free) https://filterlists.com
- **FishFish** — A volunteer cybersecurity project focused on providing resources and services that improve safety across Discord (no auth, free) https://fishfish.gg/
- **FullHunt** — Searchable attack surface database of the entire internet (API key, free) https://api-docs.fullhunt.io/#introduction
- **GreyNoise** — Query IPs in the GreyNoise dataset and retrieve a subset of the full IP context data (API key, free) https://docs.greynoise.io/reference/get_v3-community-ip
- **HackerOne** — The industry’s first hacker API that helps increase productivity towards creative bug bounty hunting (API key, free) https://api.hackerone.com/
- **IPLogs** — Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing (no auth, free) https://iplogs.com/docs
- **Metacert** — Metacert Link Flagging (API key, free) https://metacert.com/
- **Microsoft Security Response Center (MSRC)** — Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC) (no auth, free) https://msrc.microsoft.com/report/developer
- **Mozilla http scanner** — Mozilla observatory http scanner (no auth, free) https://github.com/mozilla/http-observatory/blob/master/httpobs/docs/api.md
- **National Vulnerability Database** — U.S. National Vulnerability Database (no auth, free) https://nvd.nist.gov/vuln/Data-Feeds/JSON-feed-changelog
- **Portscan** — Scans the requesting client's IP for open TCP ports with fast or deep modes on IPv4/IPv6 (no auth, free) https://api.portscan.com
- **Shodan** — Search engine for Internet connected devices (API key, free) https://developer.shodan.io/
- **Spyse** — Access data on all Internet assets and build powerful attack surface management applications (API key, free) https://spyse-dev.readme.io/reference/quick-start
- **UK Police** — UK Police data (no auth, free) https://data.police.uk/docs/
- **URLScan.io** — Scan and Analyse URLs (API key, free) https://urlscan.io/about-api/
- **VirusTotal** — VirusTotal File/URL Analysis (API key, free) https://docs.virustotal.com/reference/overview
- **VirusTotal** — VirusTotal File/URL Analysis (API key, free) https://www.virustotal.com/en/documentation/public-api/
- **Virushee** — Virushee file/data scanning (no auth, free) https://api.virushee.com/
- **VulDB** — VulDB API allows to initiate queries for one or more items along with transactional bots (API key, free) https://vuldb.com/?doc.api

## Security Utilities

- **SonarQube** — SonarQube REST APIs to detect bugs, code smells & security vulnerabilities (oauth, free) https://sonarcloud.io/web_api
- **Stytch** — User infrastructure for modern applications (API key, free) https://stytch.com/
- **Warrant** — APIs for authorization and access control (API key, free) https://warrant.dev/

## Threat Intelligence

- **AbuseIPDB** — IP/domain/URL reputation (API key, free) https://docs.abuseipdb.com/
- **AlienVault Open Threat Exchange (OTX)** — IP/domain/URL reputation (API key, free) https://otx.alienvault.com/api
- **CAPEsandbox** — Malware execution and analysis (API key, free) https://capev2.readthedocs.io/en/latest/usage/api.html
- **EmailRep** — Email address threat and risk prediction (no auth, free) https://docs.emailrep.io/
- **Hybrid Analysis** — File and URL malware analysis powered by Falcon Sandbox (API key, free) https://www.hybrid-analysis.com/docs/api/v2
- **IP-API.io** — IP geolocation with VPN/proxy/Tor detection, reputation and risk score (API key, free) https://ip-api.io
- **IPASIS** — Real-time bot detection and fraud prevention API combining IP reputation, proxy/VPN detection, and email validation in a single call (API key, free) https://ipasis.com/docs
- **IPLocate.io** — Fast, free, accurate IP geolocation and threat data (proxy/VPN/hosting detection) API (no auth, free) https://www.iplocate.io/docs
- **Intelligence X** — Perform OSINT via Intelligence X (API key, free) https://github.com/IntelligenceX/SDK/blob/master/Intelligence%20X%20API.pdf
- **Kiprio IP Lookup** — IP geolocation and reputation with proxy, VPN, and hosting detection (API key, free) https://kiprio.com/ip-api
- **MalDatabase** — Provide malware datasets and threat intelligence feeds (API key, free) https://maldatabase.com/api-doc.html
- **MalShare** — Malware Archive / file sourcing (API key, free) https://malshare.com/doc.php
- **MalwareBazaar** — Collect and share malware samples (API key, free) https://bazaar.abuse.ch/api/
- **Pharos API** — Stablecoin risk, peg, liquidity, safety score, blacklist, mint/burn, yield, and chain-health data (API key, free) https://pharos.watch/about/api/
- **Phisherman** — IP/domain/URL reputation (API key, free) https://phisherman.gg/
- **Pulsedive** — Scan, search and collect threat intelligence data in real-time (API key, free) https://pulsedive.com/api/
- **Scanii** — Simple REST API that can scan submitted documents/files for the presence of threats (API key, free) https://docs.scanii.com/
- **Threat Jammer** — Risk scoring service from curated threat intelligence data (API key, free) https://threatjammer.com/docs/index
- **URLhaus** — Bulk queries and Download Malware Samples (no auth, free) https://urlhaus-api.abuse.ch/
- **URLhaus** — Database of malicious URLs used for malware distribution (no auth, free) https://urlhaus.abuse.ch/api/
- **Web Of Trust (WOT)** — Website reputation (API key, free) https://www.mywot.com/developers/
- **Web of Trust** — IP/domain/URL reputation (API key, free) https://support.mywot.com/hc/en-us/sections/360004477734-API-
- **WhoisJSONApi** — Domain WHOIS information to detect and prevent online threats, enhancing overall online safety for individuals and organizations (API key, free) https://whoisjsonapi.com/
- **Whoisfreaks** — Domain and DNS related information that will equip organizaion with comprehensive threat intelligence and attack surface analysis capabilities for enhanced security (API key, free) https://whoisfreaks.com/


---

PlayCISO is a simulation-first platform for security leaders: a War Room incident simulator, a simulated PCI DSS QSA interview, board-report coaching, free security scanners, and a curated library of free courses. https://playciso.com