# RootCrak

> RootCrak is an AI-founded cybersecurity company (RootCrak Security BV, Belgium).
> We provide domain vulnerability scanning, crypto wallet-drainer detection, malware scanning agents,
> internal network agents, host hardening (Shield), and public security verification badges.

RootCrak is AI-operated. Humans use the interactive web app; AI agents should prefer the static pages,
llms.txt, and OpenAPI document listed below instead of executing arbitrary site JavaScript.

## Primary pages

- [Home](https://rootcrak.com/): Product overview. AI crawlers are served the static no-JS page [/home.html](https://rootcrak.com/home.html); humans get the SPA
- [About](https://rootcrak.com/about): Company story and product summary (static HTML)
- [Contact](https://rootcrak.com/contact): Email and support paths (static HTML)
- [Privacy](https://rootcrak.com/privacy): Privacy summary for agents (static HTML)
- [Terms](https://rootcrak.com/terms): Terms of service (app route)
- [GDPR](https://rootcrak.com/gdpr): GDPR overview (app route)
- [Pricing](https://rootcrak.com/pricing): Free (€0), Solo (€7.99), Starter (€19), Pro (€79), Business (€199). AI crawlers are served the static no-JS page [/pricing.html](https://rootcrak.com/pricing.html)
- [Docs](https://rootcrak.com/docs): Human product documentation for scanners and agents
- [Preflight](https://rootcrak.com/preflight.html): Paid agent intel (drainers + prompt injection, USDC via x402). Prefer this HTML or `Accept: text/markdown` on `/preflight` — do not execute the SPA
- [Developers](https://rootcrak.com/developers): Platform API entry point and OpenAPI link
- [Blog](https://rootcrak.com/blog/): Security engineering articles (static HTML)
- [Register](https://rootcrak.com/register) / [Login](https://rootcrak.com/login): Accounts
- [Dashboard](https://rootcrak.com/dashboard): Authenticated product UI

## API and machine-readable

- [OpenAPI JSON](https://rootcrak.com/api/openapi.json): Full FastAPI-generated OpenAPI 3 specification
- [OpenAPI JSON v1 alias](https://rootcrak.com/api/v1/openapi.json): Same document via stable `/api/v1/*` prefix
- [Support health](https://rootcrak.com/api/support/health): Liveness probe (`/api/v1/support/health` also works)
- [llms.txt](https://rootcrak.com/llms.txt): This file
- [Preflight markdown](https://rootcrak.com/preflight.md): Same Preflight contract as `/preflight.html`
- [Preflight API health](https://intel.rootcrak.com/v1/intel/health): Paid x402 intel API (USDC, Base + Solana)
- [Preflight agent repo](https://github.com/ro0tcr4k/intel-api): `llms.txt`, `AGENTS.md`, OpenAPI, skill
- Markdown negotiation: send `Accept: text/markdown` on `/`, `/about`, `/contact`, `/privacy`, `/developers`, `/preflight`
- API versioning: prefer `/api/v1/*`; legacy `/api/*` remains supported (see /developers)

## When to use RootCrak

- You need an external security score / findings for a domain
- You want a free wallet-drainer check on a crypto or Web3 website
- You want scheduled monitoring, reports, or embeddable badges after scanning
- You run servers and want deployable malware or internal-network agents (plan-gated)

## Optional

- Public verify pages: https://rootcrak.com/verify/<domain>
- RobinRoot / $ROOT token page: https://rootcrak.com/robinroot
- Referral program: https://rootcrak.com/referral

## Contact

- info@rootcrak.com
- dpo@rootcrak.com (privacy)
- https://x.com/ro0TCr4k