Skip to content

Free Security APIs with no API key

25 Security APIs that need no API key, account or credit card. 11 of them also allow CORS, so you can call them straight from browser JavaScript. Listed by uptime and ease of use.

  1. 1Presend logo

    Presend API

    Online · 399 ms

    Security and developer utility API -- malware, vulnerability, and domain checks, no signup.

    • No API key needed
    • Fast: 399 ms response
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  2. 2IPGuardian logo

    IPGuardian API

    Online · 940 ms

    Check IP addresses against 140+ public threat intelligence blocklists.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  3. 3IPLogs logo

    IPLogs API

    Online · 762 ms

    Free VPN, proxy, Tor and datacenter IP detection. 13 sources, active probing.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  4. 4OSV logo

    OSV API

    Online · 608 ms

    Open source vulnerability database and distributed triage infrastructure.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  5. 5Passwordinator logo

    Passwordinator API

    Online · 730 ms

    Generate random passwords of varying complexities.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  6. 6VPNDetection logo

    VPNDetection API

    Online · 726 ms

    Check whether an IPv4 or IPv6 address belongs to VPN infrastructure, no key needed.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  7. 7

    dead-drop API

    Online · 688 ms

    Ephemeral zero-knowledge encrypted data sharing.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  8. 8URLhaus logo

    URLhaus API

    Online · 317 ms

    Database of malicious URLs used for malware distribution.

    • No API key needed
    • Fast: 317 ms response
    • HTTPS
    No authHTTPSCORS ?
  9. 9CSR.plus logo

    CSR.plus API

    Online · 1200 ms

    Generate certificate signing requests and private keys without OpenSSL.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  10. 10FilterLists logo

    FilterLists API

    Online · 1008 ms

    Lists of filters for adblockers and firewalls.

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?
  11. 11Microsoft Security Response Center (MSRC) logo

    Microsoft Security Response Center (MSRC) API

    Online · 1079 ms

    Programmatic interfaces to engage with the Microsoft Security Response Center (MSRC).

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?
  12. 12Mozilla http scanner logo

    Mozilla http scanner API

    Online · 1126 ms

    Mozilla observatory http scanner. A free security API by mozilla.

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?
  13. 13Mozilla tls scanner logo

    Mozilla tls scanner API

    Online · 989 ms

    An observatory for TLS configurations, X509 certificates, and more.

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?
  14. 14SSL Labs logo

    SSL Labs API

    Online · 589 ms

    Deep SSL/TLS server analysis with A+ to F grading.

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?
  15. 15UK Police logo

    UK Police API

    Online · 617 ms

    UK Police data. A free security API by data.police.uk.

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?
  16. 16Agent Verifier logo

    Agent Verifier API

    Online · 1040 ms

    Self-check for AI agents: verifies Web Bot Auth signatures and shows how a request looks.

    • No API key needed
    • HTTPS
    No authHTTPSNo CORS
  17. 17Escape logo

    Escape API

    Online · 689 ms

    An API for escaping different kind of queries.

    • No API key needed
    • HTTPS
    No authHTTPSNo CORS
  18. 18National Vulnerability Database logo

    National Vulnerability Database API

    Online · 1268 ms

    U.S. National Vulnerability Database. A free security API by nvd.nist.gov.

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?
  19. 19EmailRep logo

    EmailRep API

    Online · 2031 ms

    Email address threat and risk prediction.

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?
  20. 20Tanod logo

    Tanod API

    Online · 1424 ms

    Pay-per-call scans of smart contracts, addresses and MCP/skill packages; small free daily tier.

    • No API key needed
    • HTTPS
    No authHTTPSNo CORS
  21. 21

    Classify API

    Last check failed

    Encrypting & decrypting text messages.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  22. 22

    Hashable API

    Last check failed

    A REST API to access high level cryptographic functions and methods.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  23. 23

    Virushee API

    Last check failed

    Virushee file/data scanning. A free security API by virushee.com.

    • No API key needed
    • Callable from the browser (CORS)
    • HTTPS
    No authHTTPSCORS
  24. 24Dehash.lt logo

    Dehash.lt API

    Last check failed

    Hash decryption MD5, SHA1, SHA3, SHA256, SHA384, SHA512.

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?
  25. 25PhishStats logo

    PhishStats API

    Last check failed

    Phishing database. A free security API by phishstats.info.

    • No API key needed
    • HTTPS
    No authHTTPSCORS ?

Keyless Security APIs compared

Security APIs with no API key
APIAPI keyHTTPSCORSUptimeResponseRating
Presend logoPresendNoYesYesUp399 msNot rated
IPGuardian logoIPGuardianNoYesYesUp940 msNot rated
IPLogs logoIPLogsNoYesYesUp762 msNot rated
OSV logoOSVNoYesYesUp608 msNot rated
Passwordinator logoPasswordinatorNoYesYesUp730 msNot rated
VPNDetection logoVPNDetectionNoYesYesUp726 msNot rated
dead-dropNoYesYesUp688 msNot rated
URLhaus logoURLhausNoYesUnknownUp317 msNot rated
CSR.plus logoCSR.plusNoYesYesUp1200 msNot rated
FilterLists logoFilterListsNoYesUnknownUp1008 msNot rated
Microsoft Security Response Center (MSRC) logoMicrosoft Security Response Center (MSRC)NoYesUnknownUp1079 msNot rated
Mozilla http scanner logoMozilla http scannerNoYesUnknownUp1126 msNot rated
Mozilla tls scanner logoMozilla tls scannerNoYesUnknownUp989 msNot rated
SSL Labs logoSSL LabsNoYesUnknownUp589 msNot rated
UK Police logoUK PoliceNoYesUnknownUp617 msNot rated
Agent Verifier logoAgent VerifierNoYesNoUp1040 msNot rated
Escape logoEscapeNoYesNoUp689 msNot rated
National Vulnerability Database logoNational Vulnerability DatabaseNoYesUnknownUp1268 msNot rated
EmailRep logoEmailRepNoYesUnknownUp2031 msNot rated
Tanod logoTanodNoYesNoUp1424 msNot rated
ClassifyNoYesYesDown–Not rated
HashableNoYesYesDown–Not rated
VirusheeNoYesYesDown–Not rated
Dehash.lt logoDehash.ltNoYesUnknownDown–Not rated
PhishStats logoPhishStatsNoYesUnknownDown–Not rated

See also: best Security APIs · all 61 Security APIs · every API with no key

FAQ

Are there free Security APIs without an API key?

Yes. 25 free Security APIs need no API key or sign-up, including Presend API, IPGuardian API and IPLogs API. You can send a request straight away.

Which keyless Security APIs can I call from JavaScript in the browser?

11 of them also support CORS, including Presend API, IPGuardian API and IPLogs API, so a plain fetch from a web page works.

Do APIs without a key have limits?

Usually, yes. Keyless APIs typically rate-limit by IP address, so cache responses and avoid tight loops. For production traffic, an API with a free key tier often gives higher, more predictable limits.