Active · Mainnet · ERC-8004
Continuous defence
for the agentic economy
ShieldClaw audits thousands of autonomous trading agents in real time, hashes every finding on-chain, and bills per verified vulnerability via x402 USDC micropayments.
Threat surface · live
Scans Executed
0
across the sandbox agent pool
Vulnerabilities Found
0
verified with on-chain evidence
Cryptocurrencies Tested
0
across L1s, L2s, sidechains
Agents Monitored
0
in the live sandbox cohort
Settled · all-time
$0.00
real x402 USDC on GOAT mainnet
On-chain Receipts
0
verifiable via GOAT explorer
Billing Model
Pay per finding. Nothing if we find nothing.
$0.00
scan fee · always
Zero-cost guarantee
If ShieldClaw finds no vulnerabilities, you pay nothing. No scan fee, no monitoring fee, no invoice. Ever.
Per-finding price · paid via x402 on confirmation
Info
free
USDC
Low
$0.001
USDC
Medium
$0.002
USDC
High
$0.003
USDC
Critical
$0.005
USDC
Payment method
x402 · instant USDC
Dispute window
7 days · on-chain
False positive
0 charge · rep slashed
Scan fee
$0.00 · always
Posture Indicators
Live performance dials
updating 1.5s
0%
Coverage
of attack surface
0%
Detection rate
true positives
0%
MTTR
vs industry baseline
0%
Auth posture
MFA + key rotation
0%
TLS hygiene
modern ciphers
0%
Secret scan
leaks remediated
Security Posture · 90 days
92.22%clean (no findings)
83d clean6d warnings1d critical
90d ago60d30dtoday →
Attack Surface · Live
Detection coverage by vector
0.0%
composite load
SQLi
78%
CRED
64%
PORT
42%
TLS
31%
CVE
88%
EVM
56%
Severity mix · all findings
critical
44%
high
1313%
medium
2827%
low
4139%
info
1817%
Detection Latency · 60s window
Time-to-finding distribution
89ms
now
66ms
avg
p99
93ms
Token Coverage · 87 ecosystems
Detection across cryptocurrencies
12 / 87
top by volume
ETH
96%
BTC
91%
USDC
99%
USDT
88%
SOL
79%
MATIC
72%
ARB
81%
OP
75%
AVAX
67%
GOAT
100%
SUI
54%
TIA
47%
Top Threats · Last 30 days
Most-detected vulnerability classes
1,161
findings · 30d
01Exposed secrets (.env, .git/config)24792%
02SQL injection — login endpoints19886%
03Outdated jQuery / Lodash / Axios17478%
04CORS reflects arbitrary origin13264%
05Weak TLS cipher / no HSTS11958%
06JWT — alg=none accepted8741%
07S3 / IPFS bucket publicly listed7336%
08SSRF via webhook callback5828%
09GraphQL introspection enabled4219%
10Default admin credentials3114%
Global Attack Feed
Incoming probes · live
12,847 blocked · 24h
Compliance Pass-rate
Frameworks · evidence-aligned
85.8
composite score
A
SOC 2 Type II
91% pass
A+
ISO 27001
96% pass
B
PCI DSS v4
78% pass
A
GDPR Art. 32
88% pass
B
OWASP ASVS L2
73% pass
A
NIST CSF
89% pass
Detection Heatmap · 6 months
Daily threat activity
LessMore
26w agonow
Topology · 87 ecosystems
synced 0.3s ago
shieldclaw://agent-35 · tail -f
STREAMINGLive findings feed4
View all →Signed scope grants1
Sign new →Active grant
passivedomainjuice-shop.demo.local
nucleicredscan:80:443:3000
Customer
0x742d35…f0bEb1
Grant ID
0xa48bdf…8e4ea7
Aug 03, 2026, 01:35 AM → Sep 02, 2026, 02:35 AM
Why on-chain consent?
Unauthorised scanning is a CFAA violation. Every probe ShieldClaw fires must point at a signed scope grant. No grant — no packet. Verifiable, revocable, machine-readable.