Security & identity

Application security: scan repositories, triage vulnerabilities, schedule scans and export SARIF

Domain analysis: check availability, health, SSL, DNS, WHOIS and typosquatting for domains

Account management: members, invitations, roles, workspaces and subscriptions

Secrets security: find leaked credentials, manage incidents, scan content, and automate fixes

Secure access: publish private and public resources, route sites, manage users, roles and AI providers

Authorization: manage relationship tuples, check permissions, expand relations and validate OPL syntax

Open-source supply chain: manage catalogs, projects, licenses, alignments, reports and vulnerabilities

Alignment checks, drift detection and agent governance: manage agents, manifests, containment and risk scores

Application security scanning: manage applications, scans, findings, scan schedules and API traffic collectors

Registry, tax, court and sanctions lookups for people (CPF) and companies (CNPJ) in Brazil and abroad

Cloud compliance orchestration: register assessment tools, manage catalogs, controls, metrics and certificates

Identity security: manage organizations, devices, users, MFA, phishing configs and Shared Signals

Due diligence: run client checks, findings, teams, brands and user management

Fraud detection: send events, score identities and devices, manage escalations, datasets and alert channels

Vault: store OAuth connections, API keys and tokens for consumers, plus their sessions and request logs

Child safety: detect grooming, bullying and other harms in text, voice and images for kids' apps

Crypto address screening: risk scores, owner identification, and fund tracing to cash-outs or sources

Authentication: sign in, register, reset passwords, and manage two-factor and WebAuthn keys

Rights clearance: check license permissions, issue signed rights receipts, and register agents

Verification for agent actions: pre-action verdicts, signed proofs, and an auditable on-chain ledger

Single sign-on: manage SSO and directory sync connections, setup links, users, groups and OAuth tokens

Identity verification: manage inquiries, verifications, cases, accounts, devices and webhooks

Identity verification: run inquiries, cases, verifications, devices and webhooks, with API keys and audit logs