# agent402.tools Security Audit Workflow

> agent402.tools Security Audit Workflow is a paid API for AI agents from agent402.tools, paid per call via x402, $0.017/call, status unknown (last checked 2026-09-14).

Runs a bundled security audit on a domain, enumerating its external attack surface via certificate transparency, DNS posture, email authentication, HTTP security headers, and tech stack detection in a single payment.

## Facts

- Endpoint: POST https://agent402.tools/api/skill/security-audit
- Price: $0.017/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-14
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/agent402-tools-security-audit-workflow-c54af14e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_HFV55fhzO46R5KtxX7npV

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability agent402-tools-security-audit-workflow-c54af14e -d '<json body>'
```

Example prompt: Can you run a full external security audit on stripe.com — I want to see its certificate transparency, DNS posture, email auth records, HTTP security headers, and tech stack all in one go?

## When to prefer this

Use this endpoint when you need a comprehensive, multi-dimensional security posture report for a domain in a single API call — covering cert transparency, DNS, email auth, HTTP headers, and tech stack — rather than calling each security check individually. Ideal for security researchers, DevSecOps workflows, or due diligence processes where breadth over a single attack surface matters.

## Known failure modes

- Invalid or unresolvable domain returns an error
- Private or internal domains may yield incomplete results
- Payment failure via x402 prevents execution
- Rate limiting or upstream tool unavailability may cause partial results
- Domains behind aggressive firewalls may block scanning probes

## How this service works

Bundled execution of the Security audit workflow - Enumerate a domain's external attack surface in one workflow: certs, DNS posture, email auth, HTTP security headers, and tech stack. One x402 payment runs 7 underlying tools (cert-transparency, dns-lookup, spf-check, dmarc-check, http-headers, tls-cert, tech-stack); partial-success per step.

## Output

A bundled report covering 7 security dimensions: certificate transparency findings, DNS posture assessment, email authentication (SPF/DKIM/DMARC) status, HTTP security headers analysis, and tech stack detection — all for the target domain.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "domain": {
   "type": "string",
   "description": "Target domain to audit (e.g. stripe.com)"
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "args": {
   "domain": "example.com"
  },
  "pack": "security-audit",
  "steps": [
   {
    "ok": true,
    "slug": "cert-transparency",
    "result": {}
   },
   {
    "ok": true,
    "slug": "dns-lookup",
    "result": {}
   },
   {
    "ok": true,
    "slug": "spf-check",
    "result": {}
   },
   {
    "ok": true,
    "slug": "dmarc-check",
    "result": {}
   },
   {
    "ok": true,
    "slug": "http-headers",
    "result": {}
   },
   {
    "ok": true,
    "slug": "tls-cert",
    "result": {}
   },
   {
    "ok": true,
    "slug": "tech-stack",
    "result": {}
   }
  ],
  "summary": "7/7 steps succeeded"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/agent402-tools-security-audit-workflow-c54af14e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from agent402.tools](https://www.zero.xyz/host/agent402.tools/llms.txt)