# StatePulse Network Audit

> StatePulse Network Audit is a paid API for AI agents from statepulse-api.hahavoid0.workers.dev, paid per call via x402, $0.1/call, status unknown (last checked 2026-09-15).

Audits a hostname for SSL certificate expiry, DNS security (CAA records, DNSSEC), and HTTP security headers, returning an overall letter grade and score.

## Facts

- Endpoint: POST https://statepulse-api.hahavoid0.workers.dev/network/audit
- Price: $0.1/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/statepulse-network-audit-fcfdabde
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_CEXY0Uhhzq0YwI793cWr0

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability statepulse-network-audit-fcfdabde -d '<json body>'
```

Example prompt: Can you run a full security audit on example.com — I want to know the SSL expiry, whether DNSSEC is enabled, the CAA records, and an overall security grade?

## When to prefer this

Use this endpoint when you need a combined, pay-per-call network security audit covering SSL, DNS, and HTTP headers in a single call without managing API keys. Ideal for AI agents doing one-off security checks on arbitrary domains rather than continuous monitoring platforms.

## Known failure modes

- Invalid or unreachable hostname returns an error or supported:false
- DNS resolution failure for the target host
- Timeout if the remote host is slow to respond
- SSL certificate missing or invalid may return partial results
- Malformed host input returns a validation error

## How this service works

Scans an IP address or hostname to audit DNSSEC safety, SSL expiration status, HTTP security headers, and geodata compliance. Matches: network security audit, scan website ports, VPS shield test, audit host headers.

## Output

A JSON object containing: SSL expiry status (expired boolean and days remaining), DNS security details (CAA records array and DNSSEC enabled flag), HTTP security headers score, an overall numeric score (0–100), an overall letter rating (e.g. 'A'), and a confidence level ('high'/'medium'/'low').

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "result": {
   "host": "google.com",
   "ssl_expiry": {
    "expired": false,
    "days_remaining": 81
   },
   "dns_security": {
    "caa_records": [
     "0 issue \"pki.goog\""
    ],
    "dnssec_enabled": true
   },
   "overall_score": 85,
   "overall_rating": "A",
   "security_headers": {
    "score": 60
   }
  },
  "supported": true,
  "confidence": "high"
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/statepulse-network-audit-fcfdabde/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from statepulse-api.hahavoid0.workers.dev](https://www.zero.xyz/host/statepulse-api.hahavoid0.workers.dev/llms.txt)