Know how your public endpoint responds.
Inspect a public API endpoint for response status, timing, headers, and response structure without sending write operations.
- HTTP status and response timing
- Response content type and structure
- Transport and relevant response headers
- Bounded read-only endpoint behavior
A report with clear boundaries.
Each report lists the checks performed, the resources reached, and any checks skipped. Findings include observed or heuristic confidence so you can judge the evidence.
- Public read-only endpoints only; do not include API keys or credentials in the URL.
- Not a load test, security audit, or a guarantee of API correctness.
- No uptime or continuous monitoring interval is implied.
Account and target verification are required for subscriptions. Payment and report access are confirmed by the server.
One-time purchases cover one paid run and do not renew. Monthly plans renew automatically and include four paid runs per billing period for one verified target. Unused runs do not roll over. Cancel through the billing portal before your next renewal; access continues until the current paid period ends. Prices in USD. You’ll see the total before payment. Terms of use · Privacy policy.
Before you start
What does the free preview include?
1 endpoint. The preview shows up to five findings with the scope and limitations of the scan. Zero findings means no issues were detected by those checks, not a guarantee that none exist.
What does a paid run include?
Up to 10 endpoints per run. A confirmed purchase unlocks the paid allowance and full available findings, plus HTML and PDF exports. Reports remain private to the owning session or account.
Can I check a private target?
Use a public HTTPS endpoint on your verified domain. You may select an encrypted, saved read-only API credential from your account. Internal network targets remain blocked.
