shipapis
StarSubmit an APISubmit API

Free Security APIs

Threat intel, breach checks and validation utilities. Keyless tiers only. 21 of 21 on our probe schedule · 1 probed.

21In catalog1Probed by us0Healthy now0Degraded / dying—Median P50NaN%Median uptime · 30d
dead-dropSecurityEphemeral zero-knowledge encrypted drops over a keyless APIUNMONITOREDauth noneSecurityUNMONITORED—%—none1h agoFilterListsSecurityThe directory of adblock and firewall filter listsUNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowMicrosoft Security Response Center (MSRC)SecurityMicrosoft's security update documents, as CVRF JSONUNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowNational Vulnerability DatabaseSecurityThe US government's CVE vulnerability databaseUNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowUK PoliceSecurityStreet-level crime and policing data for England & WalesUNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowPhishStatsSecurityPhishStats — Phishing databaseUNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowIP Proxy DetectionSecurityIP Proxy Detection — GetIPIntel.net provides a free API that detects proxy, …UNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowAuthenticationSecurityAuthentication — Personio Authentication APIUNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowPortscanSecurityPortscan — Scans the requesting client's IP for open TCP ports wit…UNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowURLScan.ioSecurityURLScan.io — free tier with API keyUNMONITOREDauth apiKeySecurityUNMONITORED—%—apiKeyjust nowDomain IntelligenceSecurityDomain Intelligence — free tier with API keyUNMONITOREDauth apiKeySecurityUNMONITORED—%—apiKeyjust nowFullHuntSecurityFullHunt — free tier with API keyUNMONITOREDauth apiKeySecurityUNMONITORED—%—apiKeyjust nowVulDBSecurityVulDB — free tier with API keyUNMONITOREDauth apiKeySecurityUNMONITORED—%—apiKeyjust nowCVEDBSecurityCVE vulnerability lookupUNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowArkForge Trust LayerSecurityArkForge Trust Layer — free tier with API keyUNMONITOREDauth apiKeySecurityUNMONITORED—%—apiKeyjust nowComplete Criminal ChecksSecurityComplete Criminal Checks — free tier with API keyUNMONITOREDauth apiKeySecurityUNMONITORED—%—apiKeyjust nowFingerprintJS ProSecurityFingerprintJS Pro — free tier with API keyUNMONITOREDauth apiKeySecurityUNMONITORED—%—apiKeyjust nowAbuseIPDBSecurityAbuseIPDB — free tier with API keyUNMONITOREDauth apiKeySecurityUNMONITORED—%—apiKeyjust nowMalwareBazaarSecurityMalwareBazaar — free tier with API keyUNMONITOREDauth apiKeySecurityUNMONITORED—%—apiKeyjust nowEmailRepSecurityEmailRep — Email address reputation lookupUNMONITOREDauth noneSecurityUNMONITORED—%—nonejust nowJumpseller APISecurityJumpseller API — keyless JSON APIUNMONITOREDauth noneSecurityUNMONITORED—%—nonejust now
0 MATCHES

0 matches

Try fewer filters, or browse by category.

🌦 Weather📈 Finance🗺 Geo & Maps🔭 Science & Space🐕 Animals

Free Security APIs — FAQ

Are there free Security APIs with no API key?

Yes — 12 of the 21 free security APIs we list need no API key or signup (dead-drop is a good starting point). Use the "No key" filter above to see them; they're the fastest to prototype with.

Which free Security API is the most reliable?

Of the 1 security API on our probe schedule, dead-drop leads on measured uptime (—% over 90 days). Reliability here is verified from our own scheduled checks, not the provider's claims — sort by "Reliable" to rank the rest.

Can I call these Security APIs from the browser?

8 of these security APIs send CORS headers over HTTPS, so you can fetch them straight from front-end code — no backend proxy. Filter by "Browser OK" to see them; the rest need a server-side call.

Are these free Security APIs OK for commercial use?

2 of the 21 security APIs allow commercial use on the free tier; the rest are unclear or personal-only. We record service terms and the data license as separate fields on every listing — check both before you ship.

How often are these Security APIs checked?

21 of the 21 security APIs are on our probe schedule and re-tested every sweep. We log uptime, latency and response-shape changes on each, and move any that stay down to the graveyard so you can see what died and when.