{"uid":"cap_7Uo9gpn1z8PXs9QHLO1mE","slug":"strale-defi-protocol-risk-assessment-993b9748","name":"Strale DeFi Protocol Risk Assessment","description":"Evaluates a DeFi protocol's infrastructure security before interaction. Checks SSL certificate health, HTTP security headers, DNS configuration, domain reputation, and technology surface area. Answers \"is this protocol's infrastructure secure?\"","url":"https://api.strale.io/x402/solutions/defi-protocol-risk","method":"POST","headers":{},"bodySchema":{"type":"object","properties":{"domain":{"type":"string","description":"DeFi protocol domain (e.g. app.aave.com)"}}},"responseSchema":null,"example":{"request":{"domain":"app.aave.com"},"response":{"_meta":{"payment":{"method":"x402","price_usd":0.2592,"settlement_id":"0x4ab8dcec1c702574eda0f148600e6b9a5612573138d4a730c27a848f21a1063c"},"solution":"defi-protocol-risk","latency_ms":62,"step_count":5},"steps":{"ssl-check":{"valid":true,"domain":"app.aave.com","issuer":"Google Trust Services","subject":"app.aave.com","protocol":"TLSv1.3","valid_to":"2026-08-05T01:42:45.000Z","is_expired":false,"valid_from":"2026-05-07T00:42:49.000Z","cipher_name":"TLS_AES_256_GCM_SHA384","serial_number":"8B1016C24D33FF141318081D147B7071","cipher_version":"TLSv1.3","is_expiring_soon":false,"days_until_expiry":53,"subject_alt_names":["app.aave.com"],"fingerprint_sha256":"2A:CC:C7:99:AF:22:9E:8E:90:EF:DE:6E:39:A5:59:23:F6:4F:7C:8F:D9:AB:A5:7B:B0:DE:0A:0A:02:FC:3D:ED"},"dns-lookup":{"domain":"app.aave.com","has_spf":false,"a_records":["104.18.20.145","104.18.21.145"],"has_dmarc":false,"mx_records":[],"ns_records":[],"txt_records":["c9af208a-f4f6-431a-8f72-1c2221dde16d=0d4a5cc43abe4242ae45cd411966fe9711f16947c1813c2caf8d0b072ae6d523"],"aaaa_records":["2606:4700::6812:1491","2606:4700::6812:1591"],"cname_records":[]},"domain-reputation":{"grade":"B","checks":{"has_mx":false,"has_csp":false,"has_spf":false,"has_xfo":false,"has_hsts":true,"has_xcto":true,"mx_count":0,"resolves":true,"has_dmarc":false,"https_works":true,"https_status":200,"ip_addresses":["104.18.21.145","104.18.20.145"]},"domain":"app.aave.com","issues":["No SPF record","No DMARC record"],"issue_count":2,"reputation_score":80},"tech-stack-detect":{"url":"https://app.aave.com/","signals":{"has_analytics":false,"has_chat_widget":false,"has_error_monitoring":false,"has_payment_processing":false,"has_marketing_automation":false},"by_category":{"cdn":["Cloudflare"],"hosting":["Vercel"],"security":["HSTS"],"framework":["Next.js"]},"technologies":[{"name":"Cloudflare","category":"cdn","evidence":"HTTP header server","confidence":"high"},{"name":"Vercel","category":"hosting","evidence":"HTTP header x-vercel-id","confidence":"high"},{"name":"HSTS","category":"security","evidence":"HTTP header strict-transport-security","confidence":"high"},{"name":"Next.js","category":"framework","evidence":"HTML content pattern","confidence":"high"}],"technologies_detected":4},"header-security-check":{"url":"https://app.aave.com","cors":{"access-control-allow-origin":"*"},"grade":"D","score":45,"server":"cloudflare","missing":[{"header":"content-security-policy","severity":"high","recommendation":"Add Content-Security-Policy to prevent XSS and injection attacks"},{"header":"x-frame-options","severity":"medium","recommendation":"Add: X-Frame-Options: DENY (or SAMEORIGIN) to prevent clickjacking"},{"header":"referrer-policy","severity":"medium","recommendation":"Add: Referrer-Policy: strict-origin-when-cross-origin"},{"header":"permissions-policy","severity":"medium","recommendation":"Add Permissions-Policy to restrict browser features (camera, microphone, etc.)"}],"present":[{"value":"max-age=31536000; includeSubDomains; preload","header":"strict-transport-security","status":"present"},{"value":"nosniff","header":"x-content-type-options","status":"present"}],"response_status":200}},"solution":"defi-protocol-risk"}},"exampleRequest":{"domain":"app.aave.com"},"tags":["x402"],"displayCostAmount":"0.2592","displayCostAsset":"USDC","priceDynamic":false,"priceHint":null,"priceStatus":"priced","priceSource":"settled","requiresHandshake":false,"reviewCount":0,"rating":{"score":"0.00","successRate":"0.00","reviews":0,"stars":null,"state":"unrated"},"availabilityStatus":"unknown","priceObserved":null,"sessionDeposit":null,"pricing":{"kind":"static","summary":"$0.2592/call","primary":{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.2592","per":"call","confidence":"exact"},"accepted":[{"kind":"static","protocol":"x402","network":"base","amountUsd":"0.2592","per":"call","confidence":"exact"}]},"paymentMethods":[{"uid":"pm_jgeD6uPEkO9wtuCxEg9oI","protocol":"x402","methodType":"crypto","chain":"base","mode":"charge","costAmount":"0.2592","costPer":"request","priority":0,"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","unit":"request","depositMicros":null,"planRef":null}],"brandName":null,"brandSlug":null,"brandBaseUrl":null,"brandDocsUrl":null,"whatItDoes":"Assesses trust and risk levels for a DeFi protocol given its domain, returning structured compliance and quality signals with audit trails.","exampleAgentPrompt":"Can you run a DeFi protocol risk check on app.aave.com and tell me if it's safe to interact with — I want the compliance and trust signals before I connect my wallet.","exampleUseCases":[{"title":"Validate DeFi protocol before investing","prompt":"Before I move any funds into this yield farming protocol on yieldfarmer.finance, can you assess its trust and risk level? I want to see compliance flags and any red flags before I commit anything."},{"title":"Compare trustworthiness of two protocols","prompt":"I'm deciding between app.compound.finance and some newer protocol I found — can you run a risk and quality check on both domains and tell me which one has better compliance standing and fewer red flags?"},{"title":"Screen DeFi app before wallet connection","prompt":"My team wants to integrate with a new DeFi lending platform at lendingprotocol.io — can you pull a full structured risk report on it, including audit trail and quality scores, so we can decide if it's safe to proceed?"}],"resultDescription":"A structured JSON object containing risk scores, compliance flags, quality assessments, and an audit trail for the specified DeFi protocol domain, indicating trustworthiness and potential red flags.","failureModes":["Unknown or unrecognized DeFi domain returns empty or low-confidence results","Malformed domain string causes validation error","Protocol too new or obscure to have sufficient data for scoring","Network timeout or upstream data source unavailability","Payment not fulfilled returns 402 error"],"whenToPreferThis":"Use this endpoint when an agent needs to programmatically assess whether a DeFi protocol is trustworthy before executing transactions, recommending it to users, or integrating with it — particularly when structured JSON output with audit trails and independent quality scoring is required.","instructions":null,"reviewSummary":null,"reviewSummaryHighlights":null,"reviewSummaryConcerns":null,"reviewSummaryGeneratedAt":null,"activationCount":0,"lastUsedAt":null,"lastSuccessfullyRanAt":null,"lastHealthCheckAt":"2026-09-16T06:54:58.283Z","isFirstParty":false}