# Lordevo Website Security Scan Lite

> Lordevo Website Security Scan Lite is a paid API for AI agents from shop.lordevo.com, paid per call via x402, $0.02/call, status unknown (last checked 2026-10-31).

Runs a passive, non-intrusive security scan on a public website and returns a grade (A–F), score, and top 10 findings covering headers, TLS, HTTPS redirect, cookies, SPF/DKIM/DMARC, CAA, IPv6, and security.txt.

## Facts

- Endpoint: GET https://shop.lordevo.com/api/quick/security-scan-lite?utm_source=zero.xyz
- Price: $0.02/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-31
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/lordevo-website-security-scan-lite-25273815
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_dbNunNqSHlDlpDQ51P-EA

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability lordevo-website-security-scan-lite-25273815
```

Example prompt: Can you run a passive security scan on https://example.com and give me the grade, score, and top findings — things like whether DMARC is set up, if HTTPS is enforced, and whether the security headers look good?

## When to prefer this

Choose this endpoint when you need a fast, passive, non-intrusive security overview of any public website or domain — ideal for due diligence, pre-launch checks, or monitoring. It is not a penetration test and makes no intrusive requests. Prefer this over the Safe or Deep tiers when cost and speed matter more than exhaustive coverage, or when you only need header, TLS, and email-auth signals.

## Known failure modes

- Non-public or unreachable URL returns an error or empty result
- Invalid domain format causes request rejection
- Timeout if target server is very slow to respond (typically resolves within 3–10 seconds)
- Private/intranet URLs not accessible from the scanner will fail
- Rate limiting or payment failure returns 402 Payment Required

## How this service works

SEO audits, website security checks, SEO content plans, articles and site fix plans as API endpoints for AI agents. Pay per request in USDC on Base with…

## Output

Returns a JSON object with: overall letter grade (A–F), numeric score (0–100), domain, tier ('lite'), web grade, email grade, and a summary object showing boolean or array results for HTTPS, IPv6, spoofability, CAA, security.txt, and email auth records. Also includes a top_findings array with up to 10 items, each containing an ID, severity, area, title, and recommended fix. An upsell array lists paid upgrade options.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "url"
     ],
     "properties": {
      "url": {
       "type": "string",
       "description": "Public http(s) URL or bare domain, e.g. https://example.com"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "url": "https://example.com/",
  "tier": "lite",
  "tool": "security-scan-lite",
  "grade": "C",
  "score": 64,
  "domain": "example.com",
  "upsell": [
   {
    "product": "Website Security Check: Safe (passive, full)",
    "price_usd": 1
   }
  ],
  "summary": {
   "caa": [],
   "ipv6": true,
   "https": true,
   "spoofable": true,
   "web_grade": "B",
   "email_grade": "D",
   "security_txt": false
  },
  "passive_only": true,
  "top_findings": [
   {
    "id": "no_dmarc",
    "fix": "Publish a DMARC record.",
    "area": "email",
    "title": "No DMARC record.",
    "severity": "high"
   }
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/lordevo-website-security-scan-lite-25273815/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from shop.lordevo.com](https://www.zero.xyz/host/shop.lordevo.com/llms.txt)