ATK Security Checks

Endpoints (11 live)

• POST /agent/v1/wazuh-audit — Full Wazuh custom-rule load audit: every rule that passes wazuh-analysisd -t but is dropped at load, with the fix. (0.05 USDC on Base)
• POST /agent/v1/wazuh-testfire — Run your Wazuh rules and decoders on a real wazuh-manager 4.14.9 against up to 10 log lines: did your rule fire, decoded fields, full alert, load warnings. (0.008 USDC on Base)
• GET /agent/v1/email-verify — Check an email address without contacting the mailbox: syntax, domain accepts mail (MX, null MX), disposable provider, role account, free provider. Verdict ok / risky / undeliverable / invalid. (0.001 USDC on Base)
• GET /agent/v1/email-auth — Grade a domain's email authentication A-F: SPF (lookup count, all-qualifier, duplicates), DMARC policy and reporting, MTA-STS mode, BIMI. Use before sending campaigns or to assess spoofing risk of a vendor's domain. (0.002 USDC on Base)
• GET /agent/v1/security-headers — HTTPS security headers of a public website's homepage (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) with concrete fixes. (0.002 USDC on Base)
• GET /agent/v1/domain-snapshot — One call, whole outside view of a domain: DNS records, email authentication grade (SPF, DMARC, MTA-STS), TLS certificate expiry and chain, post-quantum key exchange (X25519MLKEM768), HTTPS security headers, and a to-do list. (0.005 USDC on Base)
• POST /agent/v1/tls-batch — Up to 10 public hostnames in one call: post-quantum TLS (X25519MLKEM768), certificate expiry, chain validity and what to fix. (0.005 USDC on Base)
• GET /agent/v1/dns — Public DNS records of a domain in one call: A, AAAA, MX, NS, TXT, CAA. (0.001 USDC on Base)
• GET /agent/v1/wazuh-testfire (free)
• GET /agent/v1/tls-batch (free)
• GET /agent/v1/wazuh-audit (free)