knowngood.sh
menu

ContrastAPI

api.contrastcyber.com · visit site →

Probe-verified · tier 2 · checked 26 Sep 2026

Security intelligence API offering 55 tools including CVE lookup with EPSS/KEV enrichment, domain reconnaissance (DNS, WHOIS, SSL, subdomains, WAF), IP/ASN lookup, email and username OSINT, IOC and threat intelligence, exploit search, tech fingerprinting, audits, threat reports, bulk lookups, and code security checks.

security and identitysecurity-identity

What we tested

Probed live on 26 Sep 2026 against rubric v1.2. 1 of 5 checks passed. 2 unknown.

PROBE-VERIFIEDtier 2 of 3
?Markdown negotiationAccept: text/markdown · unknown
?Markdown twin at a predictable URL/page.md · unknown
✓llms.txt/llms.txt
—API catalogRFC 9727
—MCP endpoint answers tools/listinitialize → tools/list, no credentials
—MCP server card
/.well-known/mcp/server-card.json · dead; names nothing that answered
not scored
—Platform-supplied
not applicable — no MCP endpoint answered
not scored
—Other agent files at well-known paths
agent-skills/index.json · oauth-authorization-server · oauth-protected-resource · http-message-signatures-directory · none found
not scored

Context

342 sites in the index share the category security and identity. 80 transactional sites share it.

How we grade

Three tiers. Every listing shows which one it has reached, and when. The rubric.

tier 1
Declared
The site says agents are welcome in its robots.txt. A permission, not a capability.
✓
tier 2
Probe-verified
We fetched the site and tested each signal ourselves. Dated, repeatable, re-checked on a schedule.
this site · 26 Sep 2026
tier 3
Behaviourally verified
An agent completed the action end to end — booked, bought, submitted — and it worked.
coming
Own this site?

2 checks did not pass when we last looked: API catalog, MCP endpoint answers tools/list. Each is a small, specific fix; the rubric says exactly what we look for.

Behavioural verification — an agent completing your key actions end to end, with the date published here — opens to a small founding cohort first. Leave an email to be in it.

Related verified sites

Vigil
Local smart-home and self-monitored security software for Mac and Windows, featuring private room sensing, scenes, and optional sensor hardware, available for purchase with Stripe-verified prices and live availability.
security and identity
mcp.phishunt.io
Phishunt MCP provides an API service for detecting and analyzing phishing domains and URLs, offering tools to check domains, list brand-targeted phishing sites, retrieve recent detections, and analyze URLs for phishing signals.
security and identity
ScruteX
ScruteX offers continuous threat exposure management, attack surface monitoring, dark web and brand protection solutions via a CTEM platform, accessible online with API and OAuth support.
security and identity
Sigma Auth
OAuth 2.1 and OpenID Connect authorization server allowing authentication with Bitcoin (BAP) identity keys instead of passwords, supporting PKCE, device authorization grant, dynamic client registration, and AI agent capabilities.
security and identity
AuthZed
Authorization infrastructure and permissions database SpiceDB for modern applications, enabling fine-grained access control, scalable and secure permission systems, with cloud and dedicated deployment options, developer tools, and AI authorization support.
security and identity
Hacktron Docs
AI-powered security code-review platform reviewing repositories for vulnerabilities with pull-request comments and dashboard findings, offering per-PR reviews and whitebox scans (pentests) for software security assessment.
security and identity
LeakData.io
LeakData.io provides data breach intelligence and digital risk services, including verified email breach exposure checks and password hash prefix checks via API and MCP endpoints.
security and identity
Agent Identity Protocol
Agent Identity Protocol provides a standard for AI agent identity attestation, enabling security controls, per-action authorization policies, identity management, revocation, and immutable audit trails for AI agents.
security and identity

Record generated from a live database query. Method: about the index.

How we found this site: probe discovery. This site didn’t declare agent access — we found it by checking the open web. Everything above was tested the same way, against the same rubric, on the date shown. How we choose what to check, and how to opt out →

Where this sits
More saas security and identity Browse the index How we grade