Security audits designed for the AI development era. Your agent can request audits via API, or submit a request yourself. Multi-agent scanning with CVSS-scored reports.
// Your agent requests a security audit { "target_url": "https://your-app.com", "scan_type": "full", "callback_url": "https://your-app.com/webhook", "contact_email": "[email protected]" } // Response { "status": "accepted", "audit_id": "aud_7x9k2m", "agents_assigned": 5 }
No UI required. Send a POST request with your target, receive a structured vulnerability report via webhook. JSON in, JSON out.
{
"target_url": "https://your-app.com",
"scan_type": "full" | "quick" | "contracts",
"callback_url": "https://your-app.com/webhook",
"contact_email": "[email protected]",
"agent_name": "BuilderBot/1.0",
"services": ["web", "api", "infra", "contracts"],
"priority": "standard" | "high"
}
{
"status": "accepted",
"audit_id": "aud_7x9k2m",
"estimated_time": "10-15 minutes",
"agents_assigned": 5,
"report_url": "https://0xaudit.com/r/aud_7x9k2m",
"pricing": {
"plan": "agent",
"amount": 300,
"currency": "USD"
}
}
{
"event": "audit.completed",
"audit_id": "aud_7x9k2m",
"summary": {
"total": 27,
"critical": 2,
"high": 5,
"medium": 11,
"low": 9
},
"report_url": "https://0xaudit.com/r/aud_7x9k2m",
"report_pdf": "https://0xaudit.com/r/aud_7x9k2m.pdf"
}
{
"plans": [
{ "id": "quick", "price": 0 },
{ "id": "agent", "price": 300 },
{ "id": "pro", "price": 2000 },
{ "id": "enterprise", "price": 5000,
"note": "starting price" }
],
"currency": "USD"
}
No SDK or API key required. Send a POST request, receive an audit. Webhook notification on completion. Full API reference is available below.
AI-generated code introduces security blind spots at scale. We identify vulnerabilities before they reach production.
Prompt injection resistance, API key exposure, data leakage through responses, authentication and authorization flow testing.
Full-stack security assessment. REST and GraphQL endpoints, injection vectors, CORS, security headers, SSL/TLS, rate limiting.
Solidity and EVM bytecode analysis using Slither and Mythril. Reentrancy, integer overflow, access control, economic attack vectors.
Network reconnaissance, cloud misconfiguration detection, container security, exposed services, DNS enumeration.
Ongoing automated scanning of your attack surface. Alerts on new vulnerabilities, configuration drift, and exposed assets.
Agent-to-agent protocol support. Your build agent can trigger audits, receive results, and act on findings — no human in the loop.
Submit via form or API. Define targets, services, and priority.
Five specialized agents scan in parallel — web, API, infrastructure, contracts, OSINT.
CVSS-scored findings with proof-of-concept and remediation guidance.
Apply fixes. We re-scan to confirm remediation.
Representative findings from client assessments.
AI Trading Platform · stratwise.ai
vulnerabilities identified
Authentication bypass, API key exposure, missing rate limiting, and insecure direct object references across the trading API.
Crypto Wallet · app.novawallet.org
vulnerabilities identified
Smart contract vulnerabilities, web application misconfigurations, and infrastructure issues across the full deployment stack.
Same pricing for API and manual requests. Agents can query plans via GET /api/pricing
quick
agent
pro
enterprise
Base URL: https://0xaudit.com
Request body
{
"target_url": "string", // required
"scan_type": "string", // "quick" | "full" | "contracts"
"callback_url": "string", // webhook endpoint
"contact_email": "string", // report delivery
"agent_name": "string", // optional identifier
"services": ["string"], // web, api, infra, contracts, osint
"priority": "string" // "standard" | "high"
}
Response 200
{
"status": "accepted",
"audit_id": "aud_7x9k2m",
"estimated_time": "10-15 minutes",
"agents_assigned": 5,
"report_url": "https://0xaudit.com/r/{audit_id}",
"pricing": {
"plan": "agent",
"amount": 300,
"currency": "USD"
}
}
{
"audit_id": "aud_7x9k2m",
"status": "in_progress" | "completed" | "failed",
"progress": 72,
"agents_active": 3,
"findings_so_far": 14
}
{
"audit_id": "aud_7x9k2m",
"target": "https://your-app.com",
"completed_at": "2025-01-15T10:32:00Z",
"summary": {
"total": 27,
"critical": 2,
"high": 5,
"medium": 11,
"low": 9
},
"findings": [
{
"id": "VLN-001",
"severity": "critical",
"cvss": 9.8,
"title": "Authentication Bypass via JWT",
"description": "...",
"remediation": "...",
"proof_of_concept": "..."
}
],
"report_pdf": "https://0xaudit.com/r/aud_7x9k2m.pdf"
}
{
"plans": [
{
"id": "quick",
"price": 0,
"name": "Quick Scan",
"includes": ["headers", "ssl", "cors", "basic_misconfigs"]
},
{
"id": "agent",
"price": 300,
"name": "AI Agent Audit",
"includes": ["full_scan", "5_agents", "cvss_report", "1_rescan"]
},
{
"id": "pro",
"price": 2000,
"name": "Professional",
"includes": ["manual", "contracts", "infra", "prompt_injection", "3_rescans"]
},
{
"id": "enterprise",
"price": 5000,
"name": "Enterprise",
"note": "starting price, contact for quote"
}
],
"currency": "USD"
}
# Submit an audit curl -X POST https://0xaudit.com/api/audit-request \ -H "Content-Type: application/json" \ -d '{ "target_url": "https://your-app.com", "scan_type": "full", "contact_email": "[email protected]" }' # Check status curl https://0xaudit.com/api/audit/aud_7x9k2m # Get report curl https://0xaudit.com/api/audit/aud_7x9k2m/report # Get pricing curl https://0xaudit.com/api/pricing