Tinfoil Security

Tinfoil Security was a web application and API security scanning company that provided automated dynamic (DAST) vulnerability testing for web apps and REST APIs. It was acquired by Synopsys in 2016 and folded into the Synopsys Software Integrity Group, which later became Black Duck. As of this enrichment pass its domain tinfoilsecurity.com no longer serves an independent site — every path returns an HTTP 302 redirect to blackduck.com — and there is no standalone Tinfoil Security developer portal, API documentation, OpenAPI definition, package registry presence, or /.well-known discovery surface remaining. This profile was surfaced as a 500 Global portfolio company and is retained as an acquired/defunct lead with no live API surface to harvest.

Tinfoil Security is profiled on the APIs.io network. Tagged areas include Company, Security, Application Security, Vulnerability Scanning, and DAST.

🌐 Visit website 📡 Source on GitHub

6.0/100 minimal ▬ flat Agent 0/100 human only Full breakdown ↓
scored 2026-07-27 · rubric v0.5

0 APIs

CompanySecurityApplication SecurityVulnerability ScanningDASTAPI SecurityAcquired

Kin Score

Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5

Composite quality — 6.0/100 · minimal

Contract Quality 0.0 / 25

Developer Ergonomics 0.0 / 20

Commercial Clarity 0.0 / 20

Operational Transparency 0.0 / 13

Governance 0.0 / 12

Discoverability 6.0 / 10

Agent readiness — 0/100 · human only

Machine-Readable Contract 0 / 18

Agentic Access Contract 0 / 15

MCP Server 0 / 12

Machine-Readable Auth 0 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 0 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/tinfoil-security: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

Resources

Company 1

The organization behind the API

Website

Website

Source (apis.yml)

aid: tinfoil-security
accessModel:
  pricing: unknown
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Unknown
  confidence: low
  source: []
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/tinfoil-security.png
name: Tinfoil Security
description: Tinfoil Security was a web application and API security scanning company that provided automated dynamic (DAST)
  vulnerability testing for web apps and REST APIs. It was acquired by Synopsys in 2016 and folded into the Synopsys Software
  Integrity Group, which later became Black Duck. As of this enrichment pass its domain tinfoilsecurity.com no longer serves
  an independent site — every path returns an HTTP 302 redirect to blackduck.com — and there is no standalone Tinfoil Security
  developer portal, API documentation, OpenAPI definition, package registry presence, or /.well-known discovery surface remaining.
  This profile was surfaced as a 500 Global portfolio company and is retained as an acquired/defunct lead with no live API
  surface to harvest.
url: https://raw.githubusercontent.com/api-evangelist/tinfoil-security/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- 500-global
x-tier: stub
x-tier-reason: portfolio-lead
x-status: acquired
x-redirects-to: https://www.blackduck.com/
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-21'
tags:
- Company
- Security
- Application Security
- Vulnerability Scanning
- DAST
- API Security
- Acquired
common:
- type: Website
  url: https://tinfoilsecurity.com
x-enrichment:
  date: '2026-07-21'
  status: nochange
  artifacts_added: 0
  pass: local-v1