Renzo Madueno

Detect the technologies behind any website - CMS, frameworks, analytics, ad pixels, payments, chat, marketing and CDN/hosting - from a bulk list of domains, 90+ tools. A pay-per-result BuiltWith & Wappalyzer alternative for technographic B2B targeting. No API key, no per-lookup subscription.

Industry + city in, ready-to-send leads out: company name, address, phone, website, emails found on the company own site, LinkedIn/Facebook/Instagram profiles and tech stack. Scraped live at run time, never resold from a database. $8 per 1,000 leads - pay per lead, no seats, no subscription.

Give your AI agent the web: multi-source search, clean-markdown page reading, and one-call deep research dossiers. No OpenAI/Perplexity key required — your agent does the synthesis. MCP server, pay-per-event.

SaaS pricing tracker: monitor any competitor's pricing page and detect plan additions, feature changes and price adjustments over time. Get structured pricing data with automated change detection and historical comparison. Ideal for competitive intelligence, positioning and pricing strategy.

Supabase RLS security scanner. Probes a public Supabase project for Row-Level-Security misconfigurations and detects tables readable by the anon key - the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated. By Renzo Madueno.

Scrape Apple Podcasts: podcast metadata, full episode lists, top charts, and listener reviews by country, in one run. No API key. Built on Apple's iTunes API + RSS feeds.

Bulk email verifier with no API key: RFC syntax, live DNS MX record + provider (Google/Microsoft...), disposable-domain and role-based detection, free-provider flag, and a 0-100 deliverability score. Clean your lead list and cut bounces before cold outreach. Keyless ZeroBounce alternative.

Turn any city into a list of gym leads: gyms, CrossFit boxes, yoga and pilates studios with phone, website, emails and social profiles extracted live from each studio's site. Perfect for fitness software, equipment vendors and marketing agencies. $8 per 1,000 leads.

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Scrape SEC EDGAR for any US public company: filings (10-K, 10-Q, 8-K, Form 4), XBRL financial statements, and full-text filing search. Official government data straight from SEC, no API key, pay per result. Feed financial models, screeners, risk monitoring and investment research.

WordPress security scanner. Probes the WordPress REST API for endpoints leaking users, plugins, drafts and customer data - the misconfigurations attackers enumerate before a brute-force. 40% of the web runs WordPress. Counts only, no data exfiltrated. Fix guidance included. By Renzo Madueno.

Search Yelp by category and location to collect business leads: name, address, phone, rating, review count, price tier, categories and website. Runs without a Yelp API key and returns a flat row per business.

Give your AI agent live aviation data: decoded METAR weather by ICAO, airport info, aircraft specs, an aviation glossary, FAA-style practice questions, and a daily pilot quiz. No API key. Powered by the free Rotate Pilot API, built by a commercial pilot.

Paste company domains, get one flat CRM-ready row each: industry, NAICS/SIC, employee band, revenue band, tech stack and role emails with live MX check. Imports straight into HubSpot, Salesforce, Pipedrive or Sheets. $20/1k rows — a Clearbit/Breeze alternative with no subscription.

Bulk email deliverability checker and domain enricher: MX + provider, SPF, DMARC + policy, DKIM, domain age (RDAP), HTTPS, plus a 0-100 email-security score and deliverability risk. Score prospect domains before cold outreach - not just your own - to protect sender reputation. No API key.

Search Google News by keyword, topic or publisher and get structured articles back: headline, source, publish time, snippet and the resolved publisher URL (not the Google redirect). Useful for brand monitoring, competitor tracking and feeding news into an AI agent.

List every app a Google Play publisher has on their developer page, with rating, install band, category and price. Optional per-app enrichment with full store details.

City in, roofing company list out: every roofer with phone, website, emails, socials and review counts, extracted live from each company's website. Built for lead-gen agencies and vendors selling to roofing contractors — an industry that pays premium for pipeline. $8 per 1,000 leads.

Probes a public Strapi instance for misconfigured Public role permissions. Detects content-types readable without auth via /api/{collection}. Returns counts + curl reproducer. Counts only.

Collect the public replies X shows to logged-out visitors on any tweet, with author, timestamp and engagement per reply. No login, no cookies, and you are never charged for a tweet that has no visible replies.