# Solution Engine IT - Small Business Security API

> Pay-per-call security checks for small businesses (x402, USDC on eip155:8453). Built by Jermaine Rodriguez, Solution Engine IT, small-business IT consultant since 2005.

## Paid endpoints (x402 v2)
- GET https://security-check.solution-engine.com/v1/domain-health?domain=example.com  ($0.02) - Small-business domain security health check. Looks up MX/email provider, SPF (qualifier and lookup count), DMARC policy, DKIM (common selectors), CAA, DNSSEC, HTTPS reachability, http-to-https redirect, security headers and certificate expiry (from CT logs). Returns a 0-100 score, letter grade, findings and plain-English fixes for non-technical owners. Results cached 24h per domain.
- POST https://security-check.solution-engine.com/v1/smb-security-score  ($0.08) - Small-business cybersecurity self-assessment. Send 10-21 yes/no/unsure answers (backups, MFA, passwords, updates, Wi-Fi, training, offboarding and more) plus an optional domain. Returns a 0-100 score, grade, top 5 risks and fixes ranked by cost and effort, each mapped to CISA Cyber Essentials elements and NIST CSF 2.0 functions/categories. JSON body: {"answers": {"backups_exist": "yes", ...}, "domain": "optional.com"}. Question ids: backups_exist, backups_tested, backups_offsite, mfa_email, mfa_banking, password_manager, shared_passwords, old_windows, auto_updates, antivirus_edr, guest_wifi_separate, router_password_changed, router_firmware_updated, phishing_training, offboarding_process, admin_rights_limited, email_filtering, incident_plan, device_inventory, disk_encryption, security_owner.

## How payment works
Call the endpoint without payment to receive HTTP 402 with a PAYMENT-REQUIRED header (base64 JSON, x402Version 2, scheme "exact"). Sign the USDC authorization with any x402 client (e.g. @x402/fetch) and retry with the PAYMENT-SIGNATURE header. Requests that fail (4xx/5xx) are not settled.

## Free endpoints
- https://security-check.solution-engine.com/v1/sample - sample domain-health output for example.com
- https://security-check.solution-engine.com/v1/scoring - exact scoring rules and weights
- https://security-check.solution-engine.com/openapi.json - OpenAPI 3.1 with x-payment-info
- https://security-check.solution-engine.com/.well-known/x402 - x402 discovery
- https://security-check.solution-engine.com/health

## Human help
$149 Small Business IT Health Check: https://ko-fi.com/solutionengine

## Disclaimer
General guidance only, based on publicly visible information and/or your own answers at the time of the check. Not a full security audit, penetration test, or legal/compliance advice. Provided as-is with no warranty of any kind.