39 Services from tools.halowerk.com

Classifies a German-language goods description into its 6-digit Harmonized System (HS) customs tariff code, returning chapter, heading, subheading, match terms, and confidence score

Screens a person or company name against consolidated EU, UN, OFAC, OFSI, and SECO sanctions lists with ~49,000 entries and 117,000 name variants using fuzzy matching, word-set comparison, and character distance

Analyzes a URL for security risks by resolving its full redirect chain, checking blocklists, DNSBL, certificate validity, domain age, ASN, and scanning page content for hidden LLM prompt injection.

Runs up to three anomaly detectors (robust z-score, STL residual, isolation forest) over a numeric series and returns per-point scores so callers can apply their own thresholds.

Builds a cohort retention table from raw events, grouping users by their first-event period and tracking re-engagement across subsequent periods, with optional value accumulation metrics.

Classifies web access log records into human vs. bot clients with multi-signal scoring, grouping records by IP/user-agent and explaining each classification signal.

Fixes common malformed JSON from LLM outputs and external systems, returning the parsed object and a detailed repair log

Analyzes a two-group conversion experiment using both frequentist (p-value, confidence interval, required sample size) and Bayesian (Beta-Binomial posteriors, probability variant wins, expected loss) methods in closed form.

Checks a domain's full email security posture — MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI, TLS, and DNSSEC — and returns a spoofing risk score with actionable DNS records to fix each finding

Analyzes a multi-step conversion funnel from raw events, reporting per-step counts, conversion rates, drop-off, timing stats, and optional segment comparisons — without storing any data.

Analyzes a file's binary signature to determine its true type, detects macros, embedded executables, archive path traversal, PDF JavaScript/launch actions, and extension-content mismatches — without executing or storing the file.

Returns a comprehensive domain profile including DNS records, mail security configuration, TLS certificate details, WHOIS data, registrability status, and subdomains from Certificate Transparency logs.

Validates an IBAN against ISO 13616/ISO 7064 with mod 97-10 checksum verification across 74 countries, decomposes BBAN into sort code and account number for 11 countries, reports SEPA membership, and optionally validates an accompanying BIC for format and country consistency.

Validates image files (PNG, JPEG, GIF, WebP, SVG) against technical requirements by reading format, dimensions, color space, bit depth, alpha channel, ICC profile, and metadata from the file header.

Scans text or source code for 20 types of secrets and credentials (AWS, GitHub, Slack, OpenAI, JWT, database URLs, etc.) and returns rule, severity, line, column, and redacted preview for each finding.

Audits a website URL across technology, speed, security, discoverability, and accessibility, returning scored sections with detailed evidence-backed findings.

Converts SenML (JSON or CBOR) and LwM2M TLV payloads into a unified record shape with resolved names, units, absolute timestamps, and typed values, with optional time-axis alignment.

Parses single-line or multi-line addresses into structured fields (street, house number, suffix, postal code, city, country), validates postal code patterns for 16 countries, and detects P.O. box and automated addresses.

Fetches given sources, splits them into sentences, finds passages with the highest term overlap to a claim, returns verbatim quotes with citations, detects negation, and checks whether numbers from the claim appear in the sources.

Extracts monetary amounts from free text, correctly interpreting German and English thousand/decimal separators, abbreviations (Mio, Mrd, Tsd, k), and 50 currencies by symbol, code, or word — returning the numeric value, currency code, smallest unit, and text position.

Calculates driving, cycling, or walking distances and travel times between up to 25 points as a full matrix or origin-destination cross, with built-in geocoding and OpenStreetMap-based routing.

Accepts CSV text or a list of objects, auto-detects delimiters, normalizes column names, infers types (including German/English number and date formats), removes duplicates, blank rows, and empty columns, and returns a cleaned dataset with a per-column schema and change report.

Detects and redacts personally identifiable information (PII) — including email, phone, IBAN, credit card, IP address, tax ID, VAT number, license plate, social security number, and birth date — from text, returning per-match category, position metadata, and three redaction variants without storing the found values.

Compares ICON, ECMWF, GFS, MeteoFrance, UKMO, and JMA weather models for a single geographic point, returning hourly ensemble statistics including median, spread, model agreement, and derived precipitation probability.

Validates a European VAT ID by checking country prefix, length, character set, and check digit, then queries the EU Commission's VIES service to retrieve verified company name, legal form, and structured address.

Performs forward and reverse geocoding with normalized address output (street, number, postcode, city, state, country) and result caching, requiring no API key or account.

Returns public holiday lists by German/Austrian/Swiss federal state, checks if a date is a workday, calculates workdays between two dates, adds workdays to a date, and returns timezone offsets including DST.

Parses and normalizes phone numbers from any notation, detects country codes from 150 prefixes, splits into area code and subscriber number, and returns E.164, international, national, and tel-URI formats with German line-type classification.

Detects CMS, shop system, framework, server, CDN, analytics, consent tool, payment provider, and marketing stack from HTTP headers, HTML, and script URLs of a given website.

Renders a URL in Headless Chrome and returns a PNG screenshot as Base64 plus a short-lived pickup URL, with configurable viewport, full-page capture, and wait conditions.

Merges and cross-validates company identity data (name, legal form, address, VAT ID, registry number, contacts, authorized persons) from user input and EU VIES, reporting the source and any conflicts per field.

Checks whether a given URL permits AI agent access by evaluating robots.txt for 23 named AI agents, X-Robots-Tag headers, meta tags, noai directives, paywalls, license references, terms of use, and TDM reservations via /.well-known/tdmrep.json.

Scans a domain's well-known convention paths for OpenAPI, MCP, x402, GraphQL, Feeds, llms.txt, security.txt, and structured data, then scores its agent-readiness.

Scans external text for prompt injection attacks across 12 attack patterns (German and English), invisible control characters, Unicode tag smuggling, and Base64-encoded instructions before LLM processing

Analyzes an IP address for ASN, network operator, country, reverse DNS, bogon status, Tor exit node detection, and datacenter probability

Fetches multiple RSS or Atom feeds in parallel, normalizes titles and timestamps, and clusters duplicate stories from different sources into unified items with a source-count relevance signal.

Verifies the trustworthiness of unknown x402 payment endpoints before an agent calls or pays them

Crawls a website and returns a structured inventory of its pages

Validates an email address across syntax, domain, MX records, disposable/role/freemail checks, typo suggestions, and optionally performs an SMTP handshake to verify mailbox existence.