Integrations

Show your Sentinel security score anywhere — a README badge, a website widget, or raw API access. Pick a category, copy the snippet, done.

BadgesEmbed WidgetREST API

READMEs · Dashboards · Docs

Badges

A live SVG badge that shows your latest Sentinel grade — updated automatically after each scan. Customize style, color, label and logo.

Shields.io stylesAuto color by gradeCDN-cached
Build your badge

Websites · Blogs · Status pages

Embed Widget

A rich, self-contained score card you can drop into any page via iframe or a single <script> tag. Auto-resizes, follows your theme, and supports the gated PRO tier.

iframe or <script>postMessage auto-resizeDark / Light / Compact
Configure the widget

Automation · Custom integrations

REST API

Every public endpoint in one reference: SVG badges, JSON status, embed HTML, live stats and synchronous quick scans — all CORS-open and rate-limited.

CORS-openRate-limitedNo auth required
Browse endpoints

REST API Reference

All public endpoints are CORS-open, rate-limited per IP, and need no authentication. Copy a curl command and run it.

GET/api/badge/:domain
image/svg+xml

Security Badge (SVG)

Shields-compatible SVG badge with the domain's latest grade, score and color. Perfect for READMEs, docs and dashboards.

curl -L "https://sbscanner.pro-sub.org/api/badge/example.com"
GET/api/badge/status/:domain
application/json

Badge Status (JSON)

Structured JSON with grade, score, color, label and staleness — the same data the SVG is built from.

curl -s "https://sbscanner.pro-sub.org/api/badge/status/example.com"
GET/api/embed/:domain
text/html

Score Widget (HTML)

Self-contained HTML widget card (score, grade, severity counts). Supports theme, compact and tier=pro (verified domains only).

curl -s "https://sbscanner.pro-sub.org/api/embed/example.com?theme=dark&tier=pro"
GET/api/embed/widget.js
application/javascript

Widget Loader (JS)

Drop-in <script> embed that injects the widget iframe and auto-resizes it via postMessage — zero extra code needed.

curl -s "https://sbscanner.pro-sub.org/api/embed/widget.js?domain=example.com"
GET/api/public/stats
application/json

Security Stats (JSON)

Aggregate dataset — % of scanned domains missing CSP, HSTS, DMARC and more. Powers the /data truth page.

curl -s "https://sbscanner.pro-sub.org/api/public/stats"
POST/api/public/quick-scan
application/json

Quick Scan (Sync)

Runs Tier 1 checks (DNS, SSL, HTTP headers) synchronously in Node.js and returns findings immediately.

curl -s -X POST "https://sbscanner.pro-sub.org/api/public/quick-scan" -H "Content-Type: application/json" -d '{"domain":"example.com"}'
GET/api/public/posts
application/json

Blog Posts (JSON)

All newsroom posts as JSON — title, slug, category, date and excerpt. Great for custom feeds and headless consumption.

curl -s "https://sbscanner.pro-sub.org/api/public/posts"
GET/api/public/feed
application/rss+xml

RSS / Atom Feed

The blog's dynamic RSS 2.0 feed. Point any feed reader or podcast app at it.

curl -s "https://sbscanner.pro-sub.org/api/public/feed" | head -20

Need an API key or deeper access?

Personal API tokens, agent tokens and webhooks live in your dashboard. The endpoints above are public — the rest is one login away.

Open DashboardScan Your Domain

All examples use example.com — replace it with your own scanned domain.