dead-drop
Security
Ephemeral zero-knowledge encrypted data sharing
No keyCORSHTTPS
OSV
Open source vulnerability database and distributed triage infrastructure
API key
Not required
HTTPS
Supported
Browser calls
Yes, CORS enabled
Status
Not yet checked
How to call it
A starting template for OSV. Replace ENDPOINT with the path from the official documentation, which we link above rather than guess at.
# No authentication required.
curl -s "https://google.github.io/ENDPOINT" \
-H "Accept: application/json"Where this listing comes from
Aggregated from one public source (public-apis), then normalised and checked by us.
Report an issue with this listing ↗Other Security APIs
See all 84 →IPGuardian
Security
Check IP addresses against 140+ public threat intelligence blocklists
No keyCORSHTTPS
Microsoft Security Response Center (MSRC)
Security
Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC)
No keyCORSHTTPS
National Vulnerability Database
Security
U.S. National Vulnerability Database
No keyCORSHTTPS
Presend
Security
Security and developer utility API -- malware, vulnerability, and domain checks, no signup
No keyCORSHTTPS
FishFish
Security
FishFish is an automated service designed to quickly detect and mitigate phishing threats before they can be exploited for malicious purposes. It provides a streamlined solution for identifying harmful resources efficiently.
No keyCORSHTTPS
OSV — common questions
Answered from what our own scheduled checks found, not from the provider's marketing.
Is OSV free to use?
OSV is listed in our free catalogue and required no credential when we called it. It needs no authentication at all, so you can send a request without signing up. Free tiers can still carry rate limits or non-commercial terms, so check the provider's own terms before shipping.
Does OSV need an API key?
No. We called OSV on our last run with no key, no token and no Authorization header, and it responded. That is what puts it in our no-key collection.
Can I call OSV from browser JavaScript?
Yes. OSV returned CORS headers when we checked it, so a browser will let your page read the response. You can fetch it directly from client-side JavaScript with no proxy and no backend.
Is OSV available over HTTPS?
Yes. OSV serves over HTTPS, so you can call it from a secure page without triggering a mixed-content block.