Security, SSL/TLS, DNS, tech-stack, performance, API documentation, and SEO scans — delivered in seconds. Built for developers, AI agents, and CI/CD pipelines.
Each service scans a target URL and returns a structured JSON artifact with scores, grades, and an actionable remediation list. Every partner gets 10 free scans per month.
HTTP headers, TLS certificate health, redirect chain, mixed content detection, risk scoring (0-100), and AI triage recommendations.
Discovers link structure, detects API-pattern endpoints, extracts form inputs, collects response headers, and generates documentation.
Response time breakdown, page weight measurement, compression detection, caching analysis, and optimization recommendations with letter grades.
Title & meta analysis, heading structure, Open Graph data, canonical URLs, viewport check, and structured SEO scoring.
Deep TLS inspection: negotiated protocol & cipher, full certificate chain with expiry & key strength, HSTS analysis, and preload-eligibility check.
Authoritative DNS audit: A/AAAA/NS/MX/TXT/CAA records, SPF/DKIM/DMARC email auth, DNSSEC signing, and NS redundancy across organisations.
Detects CMS, framework, server, language, CDN, analytics, and e-commerce platforms from response headers, cookies, and HTML markers. ~60 signatures.
Security Snapshot + SSL/TLS Report + DNS Health in a single call. One combined artifact with an overall posture score and a single prioritised remediation list.
Three steps. No accounts required. Crypto payments via TimeLightHub.
POST to /purchase with your target URL and chosen SKU. You receive an invoice with a checkout link.
Pay via Bitcoin or crypto using the checkout link. TimeLightHub confirms payment via signed webhook.
Your scan runs automatically. Download the structured JSON artifact from the API or client portal.
No subscriptions. No commitments. Pay only for what you use.
| Service | SKU | Price | Output |
|---|---|---|---|
| Security Snapshot | security_snapshot |
$4 | JSON report + score + triage |
| Performance Audit | performance_audit |
$3 | JSON report + grade + recommendations |
| API Doc Brief | api_doc_brief |
$3 | JSON report + endpoint discovery |
| SEO Health Check | seo_check |
$2 | JSON report + grade + issues |
| SSL / TLS Report | ssl_tls_report |
$2 | JSON report + cert chain + HSTS analysis |
| DNS Health | dns_health |
$2 | JSON report + SPF/DKIM/DMARC/DNSSEC audit |
| Tech Stack Fingerprint | tech_stack_fingerprint |
$3 | JSON report + detected platforms by category |
| Security Pack (bundle) | security_pack |
$6 | Security Snapshot + SSL/TLS + DNS combined — overall score + one remediation list ($8 separately) |
Plain HTTP. No SDK required. AI agents can call it directly.
curl -X POST https://afc.timelighthub.com/purchase \
-H "Content-Type: application/json" \
-d '{
"requestId": "req_001",
"customerId": "cust_001",
"sku": "security_snapshot",
"input": {
"targetUrl": "https://example.com"
}
}'curl https://afc.timelighthub.com/catalog | jqcurl -X POST https://afc.timelighthub.com/partner/register \
-H "Content-Type: application/json" \
-d '{
"partnerId": "bot_assistant_v1"
}'curl https://afc.timelighthub.com/portal/customer/cust_001 | jq/health — Service health status/catalog — List all services & pricing/partner/register — Self-service API key registration for AI bots/purchase — Create scan & get invoice/portal/customer/{id} — Customer request history/artifacts/{file} — Download report artifactAgent Forge Commerce is built specifically to be natively integrated into AI assistants and autonomous bot pipelines.
Package includes a fully functional Model Context Protocol (MCP) server. Plug it directly into Claude Desktop or Cursor so your AI can autonomously scan URLs in-chat.
Don't want your bot to poll the API? Pass a webhookUrl in your POST request, and we will automatically push the final JSON artifact to your endpoint as soon as the scan completes.
High-volume bots can bypass the crypto checkout process entirely. Registered AI partners receive a monthly cap, instant fulfillment, and settle their balance automatically.
Timing-safe signature verification on every payment webhook. No fulfillment without confirmed payment.
JWT-protected kill switch instantly pauses all purchases and fulfillment. Full audit trail preserved.
Daily and monthly spending limits. Partner API keys with per-partner caps. No runaway billing.
Duplicate webhooks are detected and ignored. Each request fulfills exactly once.
Every request, webhook, fulfillment, and error is logged with timestamps and context.
Per-IP sliding window rate limiter prevents abuse and ensures fair access for all users.