Prospect Company Profile

What it runs

1. 1
   US Company Data

   Source: SEC EDGAR (US Securities and Exchange Commission)

2. 2
   Tech Stack Detection

   Source: HTTP response analysis (headers, JavaScript libraries, meta tags)

3. 3
   SEO Audit

   Source: HTTP response analysis (meta tags, heading structure, performance metrics)

4. 4
   Domain Reputation

   Source: Threat intelligence feeds (multi-source scoring)

The answer returns every step’s result, so your agent can show or check each one.

Inputs

How to call it

# Needs an API key. The whole check is charged once, at the listed price.
curl -X POST https://api.strale.io/v1/solutions/prospect-profile/execute \
  -H "Authorization: Bearer $STRALE_API_KEY" \
  -H 'Content-Type: application/json' \
  -d '{
    "inputs": {
      "url": "https://stripe.com",
      "company": "Stripe"
    },
    "max_price_cents": 54
  }'

# No account. The first request answers 402 with the price in USDC;
# an x402 client pays it from your wallet and repeats the request.
curl -i -X POST https://api.strale.io/x402/v2/solutions/prospect-profile \
  -H 'Content-Type: application/json' \
  -d '{
    "url": "https://stripe.com",
    "company": "Stripe"
  }'

The bundle’s published example input.

Limitations

• Coverage varies by state — Delaware, California, New York most complete. Some states have limited electronic registry access

  From step: US Company Data

  What to do instead: For states with limited coverage, supplement with the state's Secretary of State website directly

• Name and ticker searches find SEC filings mentioning the query, which can belong to another company, particularly for private companies without filings. Low-confidence matches return an error by default; accepted matches report exact or high `match_confidence`.

  From step: US Company Data

  What to do instead: Supply the CIK directly for an exact, unambiguous lookup. To receive the best-effort match for an unresolved name anyway, pass allow_low_confidence=true and gate on the returned is_exact_match / match_confidence fields yourself.

• Does not include privately held financial data — only publicly filed information

  From step: US Company Data

  What to do instead: Request privately held financial information directly from the company.

• Secretary of State filings may lag 1-5 business days behind actual filing date

  From step: US Company Data

  What to do instead: For time-critical checks, compare the filing_date in the response against SEC EDGAR for publicly traded companies

• Trustpilot, Glassdoor, LinkedIn, Google Search, Google Patents, Reddit and the major social platforms (Facebook, Instagram, X) are not supported and return a policy error before the page is read. Repeating the same request does not return content.

  From step: Tech Stack Detection

• Database covers 1,000+ technologies — niche or custom-built tools may not be identified

  From step: Tech Stack Detection

  What to do instead: Check the raw HTTP headers in the response for custom X-Powered-By or Server values that indicate unlisted technology

• Detection based on HTTP headers, JavaScript libraries, and HTML signatures — technologies loaded conditionally or server-side only may not be detected

  From step: Tech Stack Detection

  What to do instead: Complement with dns-lookup and ssl-check results to infer infrastructure choices not visible in the HTML

• Pages with more than 16 MiB of HTML are refused with a caller_input error naming the input field. The call is not charged, and the page is not retried through another fetch or rendering route.

  From step: Tech Stack Detection

• Analyses on-page SEO factors only — does not assess backlink profile, domain authority, or content quality

  From step: SEO Audit

  What to do instead: Combine with domain-reputation for authority signals and google-search to check actual SERP positioning

• Only the first 500 KiB of robots.txt is parsed. Directives beyond that limit do not appear in the result.

  From step: SEO Audit

• Reputation scores aggregate multiple blocklists — a single listing may not indicate actual malicious activity

  From step: Domain Reputation

  What to do instead: Check which specific blocklist flagged the domain in the response details and verify the listing reason before blocking

• Blocklist data refreshed daily — recently resolved issues may still show negative reputation for 24-48 hours

  From step: Domain Reputation

  What to do instead: If a domain was recently cleaned, re-check after 48 hours and use the trend direction to assess improvement