SkanQRCode

SkanQRCode: Commercial URL safety API detecting quishing and zero-day phishing in under 500ms.

SkanQRCode is a commercial URL safety API that detects quishing and zero-day phishing in under 500ms. It serves mobile scanners and AI agents by providing a REST API and MCP server for quick checks before opening a link or fetching a payload. Users decode QR codes on device using ML Kit, ZXing, or AVFoundation, then send the text payload via a single POST request without uploading images. The service evaluates domain age, brand lookalikes, and threat feeds to return allow, warn, or block verdicts. It is built as a commercial alternative to traditional threat intelligence feeds and browser-focused APIs, offering continuous background re-scoring and verdict-change webhooks.

SkanQRCode at a glance

Best for: Software engineer
Runs on: Web, API
Pricing: Free plan; Pro $19.90/month; Business $169.90/month
Released: October 2026
Category: AI coding tool
Website: skanqrcode.com

Key features

Detects zero-day phishing and quishing in under 500ms
Provides a drop-in REST API and MCP server
Requires only text payloads without image uploads
Performs domain age, brand-lookalike, and shortener checks
Runs continuous background re-scoring on checked URLs
Sends verdict-change webhooks when threat status updates
Supports device-side decoding with ML Kit, ZXing, or AVFoundation

Use it for

Checking scanned QR code URLs before opening them on mobile devices
Protecting AI browsing agents and inbox assistants from malicious links
Integrating URL safety checks into LangChain or LlamaIndex tools
Verifying links in custom application agent loops

Alternatives to SkanQRCode

Robusta — Reduces costs and noise by investigating unique incidents instead of raw alerts.
Seo Audit — Merges Google Search Console data with site crawls to prioritize fixes by traffic.
Stroq — Scans recorded sessions and guards future actions with local hooks.
Sgrep — Runs locally without accounts or hosted indexes using small CPU models.
Presidio — Provides modules for detecting and anonymizing PII in text and images.
RouterHub — Compare prices and access multiple models through one prepaid API key.
Garak — It checks large language models for hallucinations, data leakage, and prompt injections.
BugTape — Replays browser errors and failed requests for coding agents to fix automatically.
Weir — It detects exact key values in agent logs and blocks them in coding sessions.
PullRequest — Combines AI risk analysis with vetted human experts to catch critical vulnerabilities.
Cloudflare MCP Server — Connects AI models directly to Cloudflare services for automated management.
squirrelscan — Audits websites and generates concrete code fixes for coding agents.

All SkanQRCode alternatives