RelayShield

RelayShield is a real-time identity threat intelligence platform that monitors for the attacks most likely to result in financial loss including data breaches, SIM swap attacks, infostealer malware compromise, crypto wallet exposure, domain lookalike fraud, and phishing URLs. Alerts are delivered where users already are: WhatsApp, Telegram, or any application via REST API. Who It's For: Individual subscribers (Crypto Shield): Crypto holders, DeFi traders, and high-value individuals whose phone number and email address are the keys to their financial life. SIM swap attacks and infostealer malware are the leading causes of wallet loss in 2026: RelayShield monitors for both in near real-time and alerts via WhatsApp or Telegram before damage occurs. SMB teams (Business Shield): Small business owners and their employees who handle customer data, payment credentials and supplier relationships. Business Basic includes multi-seat breach and infostealer monitoring, company domain lookalike scanning, SIM swap monitoring per employee, monthly team security reports, and admin delegation. Designed for teams of 2–25 without a dedicated IT department. Developers and AI agents (B2A API): A five-endpoint REST API for integrating threat intelligence directly into applications, agents, and automated workflows. Available on RapidAPI with a free tier (100 calls/month) and paid plans from $29/month. Also available pay-as-you-go via x402 protocol (USDC on Base or Solana) for AI agent-native payments with no subscription required. Core Capabilities: Breach detection: Monitors email addresses against known data breach databases. Returns breach count, breach names, dates, and exposed data types. Continuous background monitoring with instant WhatsApp/Telegram alerts when new breaches are detected. SIM swap monitoring: Detects whether a phone number has been recently ported or SIM-swapped. SIM swap is the primary account takeover vector for crypto holders and anyone using SMS-based 2FA on financial accounts. Infostealer malware detection: Detects whether an email address appears in infostealer malware logs (RedLine, Raccoon, Vidar, and others). Unlike breach monitoring which covers historical database leaks, infostealer logs are ingested within days of appearing on dark web markets — making this near real-time device compromise detection. Returns infection date, operating system, malware path, and credential counts. Crypto wallet risk scoring: Scores a wallet address for sanctions exposure, darknet market activity, mixer usage, and other on-chain red flags. Designed for pre-transaction risk checks before sending or receiving funds. Domain lookalike scanning: Detects typosquat and homoglyph domains targeting your brand or company domain. Identifies phishing infrastructure before it's used in attacks against your customers or employees. URL phishing and malware scanning: Checks URLs against malware and phishing databases. Returns a malicious/clean verdict. Designed for scanning links before navigating to DeFi protocols, airdrop claim pages, NFT mint sites, or any URL shared in a trading context. OAuth watchlist: Checks OAuth application client IDs against known malicious and suspicious watchlists. API Endpoints POST /v1/breach — email breach check POST /v1/sim-swap — SIM swap detection POST /v1/infostealer — infostealer malware check POST /v1/wallet — crypto wallet risk scoring POST /v1/domain — domain lookalike scan POST /v1/scan/url — URL phishing and malware check POST /v1/scan/file — file malware scan GET /v1/result/{id} — async result polling AI Agent Integrations RelayShield is purpose-built for the agentic web. Current integrations: ElizaOS plugin (npm: @relayshield/plugin-relayshield), Bankr claude-plugins (PR submitted), Virtuals Protocol GAME SDK (PR submitted), Venice AI skills (PR submitted), Coinbase AgentKit tool directory, Circle Agent Marketplace, x402 PAYG on Base and Solana. MCP server available for Claude Desktop integration. Pricing Consumer: $19.99/month (Crypto Shield): breach, SIM swap, infostealer, wallet monitoring, Telegram delivery. Sole Proprietor: $24.99/month (Business Starter + Domain Monitoring): business and personal personas, email breach, SIM swap, infostealer, domain monitoring, WhatApp + Telegram delivery. Business Basic: $89.99/month: Up to 5 seats, company domain monitoring, monthly team reports, admin delegation. B2A API: Free (100 calls/month), Growth $29/month (5k calls), Pro $99/month (25k calls), Ultra $299/month (unlimited). Available on RapidAPI and via x402 PAYG.