Lint a Content-Security-Policy header string for unsafe-eval, wildcard script sources, and default-src restrictions.

Verify domain DMARC policy (p=reject or quarantine pct=100) and SVG Tiny PS requirements for BIMI inbox logos.

Compute the exact deterministic EVM contract address deployed via CREATE2 from deployer address, 32-byte salt, and initCodeHash.

Audit Set-Cookie attributes for Secure, HttpOnly, SameSite, and RFC 6265bis __Host- prefix compliance.

Simulate browser CORS OPTIONS preflight resolution for custom x402 headers (PAYMENT-SIGNATURE, X-PAYMENT).

Verify data lifecycle schedules balancing GDPR 90-day IP log minimization with IRS 7-year financial ledger retention.

Validate a 5-field cron schedule expression and timezone, classifying execution cadence and field breakdown.

Compute realized capital gain/loss across FIFO, LIFO, and HIFO accounting methods for digital asset disposals.

Compute exact CVSS v3.1 Base Score (0.0-10.0) and severity rating from a CVSS v3.1 vector string.

Validate a CSV header list and sample row for column count parity, duplicate column names, and snake_case naming.

Screen up to 10 comma-separated EVM addresses on Base against the daily OFAC SDN sanctions list in a single call.

Validate OIDC /.well-known/openid-configuration metadata for HTTPS issuer, JWKS URI, and asymmetric signing algorithms.

Validate an MCP server tool definition (tool_name, description, transport, protocol_version 2025-06-18) for Streamable HTTP MCP compatibility.

Compute and verify a sorted-pair Keccak-256 Merkle tree root from leaf and sibling hashes (OpenZeppelin MerkleProof format).

Estimate the LLM prompt token footprint consumed by an MCP server's tools/list schemas.

Compute Net Present Value and Internal Rate of Return (IRR %) for a comma-separated series of periodic cashflows.

Validate a 32-byte hex EIP-3009 authorization nonce for bit entropy, sequential/zero-padding traps, and replay safety.

Compute composite NIST Cybersecurity Framework 2.0 maturity tier across Govern, Identify, Protect, Detect, Respond, and Recover.

Validate Nginx server configuration for server_tokens off, modern TLSv1.2/TLSv1.3 protocols, and HSTS headers.

Evaluate an API endpoint against OWASP API Top 10 controls (BOLA, BOPLA field allowlisting, rate limiting, and SSRF protection).