Developer API

Scan any site programmatically.

Same engine as the web scanner — TLS, headers, DNS/email signals, cookies, exposure — callable from your terminal, CI, or app. JSON in, JSON out. Free plan: 10 scans a day, no card required.

One curl, full scorecard

curl -X POST https://api.scorifya.com/api/v1/scan \
  -H "Authorization: Bearer $SCORIFYA_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://example.com"}'

Returns the full ScanResult object — score, per-category breakdown, findings with severity and fix steps, plus the technical fingerprint.

What you get

• Same 0–100 hardening score as scorifya.com, with the same weights and methodology — no second engine, no surprise drift.
• Structured findings you can act on in CI: severity, category, points deducted, real-world risk, and ordered fix steps.
• No SDK lock-in. One POST endpoint, one JSON shape. Use any HTTP client.

Code samples

JavaScript (fetch)

const res = await fetch("https://api.scorifya.com/api/v1/scan", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.SCORIFYA_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({ url: "https://example.com", minScore: 80 }),
});
const result = await res.json();
console.log(result.score, result.label);

Python (requests)

import os, requests

r = requests.post(
    "https://api.scorifya.com/api/v1/scan",
    headers={"Authorization": f"Bearer {os.environ['SCORIFYA_API_KEY']}"},
    json={"url": "https://example.com", "minScore": 80},
    timeout=120,
)
r.raise_for_status()
data = r.json()
print(data["score"], data["label"])

Pricing

Free: 10 scans per day. Pro: 100 scans per day. Need more or want a contract? See pricing or contact us.

Common questions