# Strale Website Security Audit

> Strale Website Security Audit is a paid API for AI agents from api.strale.io, paid per call via x402, $0.216/call, status unknown (last checked 2026-09-15).

Performs a security audit on a given website URL, returning identified vulnerabilities and security issues with a cryptographic audit record.

## Facts

- Endpoint: POST https://api.strale.io/x402/v2/solutions/website-security-audit
- Price: $0.216/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/strale-website-security-audit-5e2155de
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_zD0PQYIHX_H66O7DH2JXb

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability strale-website-security-audit-5e2155de -d '<json body>'
```

Example prompt: Can you run a security audit on https://example.com and tell me what vulnerabilities or security issues are found?

## When to prefer this

Choose this endpoint when you need an auditable, tamper-evident security scan of a website with cryptographic proof of results — especially in compliance or trust-sensitive contexts. Prefer it over generic vulnerability scanners when you need a REST/MCP/x402-compatible API with per-call pricing and an immutable audit trail.

## Known failure modes

- Invalid or unreachable URL returns an error indicating the site could not be scanned
- Timeout if the target URL is slow to respond
- Blocked by the target server's firewall or bot protection, resulting in incomplete results
- Malformed URL input returns a validation error

## How this service works

The trust layer for AI agents — 250+ independently tested data capabilities across 27 countries. Execute capabilities via REST, MCP, A2A, or x402 micropayments. Every call returns an audit record with cryptographic chain hashing.

## Output

A structured report of security findings for the given URL, including identified vulnerabilities, misconfigurations, security header issues, and other risks, accompanied by a cryptographic audit record with chain hashing for trust verification.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "description": "URL to audit"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/strale-website-security-audit-5e2155de/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.strale.io](https://www.zero.xyz/host/api.strale.io/llms.txt)