# Tinfoil Security

**Canonical:** https://apis.io/providers/tinfoil-security/  
**Website:** https://tinfoilsecurity.com  
**APIs profiled:** 0

Tinfoil Security was a web application and API security scanning company that provided automated dynamic (DAST) vulnerability testing for web apps and REST APIs. It was acquired by Synopsys in 2016 and folded into the Synopsys Software Integrity Group, which later became Black Duck. As of this enrichment pass its domain tinfoilsecurity.com no longer serves an independent site — every path returns an HTTP 302 redirect to blackduck.com — and there is no standalone Tinfoil Security developer portal, API documentation, OpenAPI definition, package registry presence, or /.well-known discovery surface remaining. This profile was surfaced as a 500 Global portfolio company and is retained as an acquired/defunct lead with no live API surface to harvest.

## Kin Score — 4.4 / 100 (minimal)

Scored 2026-08-20 under rubric 0.12.0. Trend: flat (+0.0 from 4.4).

| Facet | Score |
|---|---|
| Discoverability | 44.4 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 0.0 |
| Developer Ergonomics | 0.0 |
| Commercial Clarity | 0.0 |
| Access Clarity | 0.0 |

## Agent readiness — 0.0 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## Tags

Company, Security, Application Security, Vulnerability Scanning, DAST, API Security, Acquired

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/tinfoil-security/). Scores are computed from the provider's own public artifacts under a published rubric.