Assess whether a company, API, or product description is a strong fit for x402/AP2-style agentic commerce.

Review Cloudflare Worker source and optional wrangler.toml for hardcoded secrets, unsafe CORS, missing admin auth, sensitive logging, and dynamic code execution.

Analyze Cloudflare Zero Trust Access policy JSON for bypass rules, allow-everyone patterns, and weak identity constraints.

Map compliance audit email requests to evidence items, owners, systems, and follow-up questions by framework.

Audit a domain's DNS and email authentication posture including MX, SPF, DMARC, DKIM, BIMI, and MTA-STS/TLS reporting records.

Summarize vendor email risk for compliance claims, subprocessors, retention, DPA language, and breach notifications.

Scan GitHub Actions workflow YAML for pull_request_target misuse, over-permissive tokens, secret leakage, unpinned actions, and unsafe fork checkout patterns.

Return a focused AWS IAM risk score and severity summary for a submitted IAM policy document.

Scan submitted text for exposed secrets and return redacted output without exposing matched secret values.

Triage security alert emails for urgency, severity, likely cause, and evidence collection steps without storing message bodies.

Scan Terraform for IAM wildcard policies, public S3/RDS exposure, open security groups, broad assume-role trust, and missing encryption hints.

Validate AWS IAM and Cloudflare Zero Trust policy JSON for risky wildcards, bypass rules, weak scoping, and embedded secrets.

Audit a Cloudflare wrangler.toml for production-unsafe settings, plaintext secrets in vars, risky routes, and missing observability.