Renzo Madueno

Collect the public replies X shows to logged-out visitors on any tweet, with author, timestamp and engagement per reply. No login, no cookies, and you are never charged for a tweet that has no visible replies.

Scrape eBay search results without an API key: title, price, shipping, condition, seller, sold count, bids and listing URL. Filter to sold listings to research what actually sells and at what price. Pay only per listing returned.

Supabase RLS security scanner. Probes a public Supabase project for Row-Level-Security misconfigurations and detects tables readable by the anon key - the #1 cause of Supabase data leaks. Returns row counts + a curl reproducer per finding. Counts only, no row data exfiltrated. By Renzo Madueno.

Industry + city in, ready-to-send leads out: company name, address, phone, website, emails found on the company own site, LinkedIn/Facebook/Instagram profiles and tech stack. Scraped live at run time, never resold from a database. $8 per 1,000 leads - pay per lead, no seats, no subscription.

Every dealership in a metro — new, used, trucks, motorcycles — with phone, website, emails and social profiles extracted live from each dealer's site. For automotive SaaS, F&I products, vendors and agencies selling into dealerships. $8 per 1,000 leads.

Give your AI agent the web: multi-source search, clean-markdown page reading, and one-call deep research dossiers. No OpenAI/Perplexity key required — your agent does the synthesis. MCP server, pay-per-event.

SaaS pricing tracker: monitor any competitor's pricing page and detect plan additions, feature changes and price adjustments over time. Get structured pricing data with automated change detection and historical comparison. Ideal for competitive intelligence, positioning and pricing strategy.

WordPress security scanner. Probes the WordPress REST API for endpoints leaking users, plugins, drafts and customer data - the misconfigurations attackers enumerate before a brute-force. 40% of the web runs WordPress. Counts only, no data exfiltrated. Fix guidance included. By Renzo Madueno.

Every accounting firm, CPA, bookkeeper and tax preparer in a metro with phone, website, emails and social profiles extracted live from each firm's own site. Built for accounting SaaS, fintech, staffing and agencies. $8 per 1,000 leads.

Scrape App Store customer reviews for any iOS app in any country. No API key, no proxy, no login. Star rating, title, body, app version, author and date.

Bulk email verifier with no API key: RFC syntax, live DNS MX record + provider (Google/Microsoft...), disposable-domain and role-based detection, free-provider flag, and a 0-100 deliverability score. Clean your lead list and cut bounces before cold outreach. Keyless ZeroBounce alternative.

Turn any city into a list of gym leads: gyms, CrossFit boxes, yoga and pilates studios with phone, website, emails and social profiles extracted live from each studio's site. Perfect for fitness software, equipment vendors and marketing agencies. $8 per 1,000 leads.

Get plumber leads and HVAC leads for any city in minutes: company, phone, website, address, emails and social profiles pulled live from each contractor's website. Built for lead-gen agencies and vendors selling to home-service contractors. $8 per 1,000 leads.

Probes a public PocketBase instance for misconfigured collection rules. Detects collections readable without auth via /api/collections/*/records. Returns counts + curl reproducer. Counts only, no data exfiltrated.

Full App Store metadata for any iOS app: ratings, rating counts, in-app purchase names and prices, current version, release notes, size, languages and screenshots.

Give your AI agent live aviation data: decoded METAR weather by ICAO, airport info, aircraft specs, an aviation glossary, FAA-style practice questions, and a daily pilot quiz. No API key. Powered by the free Rotate Pilot API, built by a commercial pilot.

Bulk email deliverability checker and domain enricher: MX + provider, SPF, DMARC + policy, DKIM, domain age (RDAP), HTTPS, plus a 0-100 email-security score and deliverability risk. Score prospect domains before cold outreach - not just your own - to protect sender reputation. No API key.

Search Google News by keyword, topic or publisher and get structured articles back: headline, source, publish time, snippet and the resolved publisher URL (not the Google redirect). Useful for brand monitoring, competitor tracking and feeding news into an AI agent.

City in, roofing company list out: every roofer with phone, website, emails, socials and review counts, extracted live from each company's website. Built for lead-gen agencies and vendors selling to roofing contractors — an industry that pays premium for pipeline. $8 per 1,000 leads.

Probes a public Strapi instance for misconfigured Public role permissions. Detects content-types readable without auth via /api/{collection}. Returns counts + curl reproducer. Counts only.