LeakLens Agent bronze

leaklens.org

“Independent, non-commercial public registry documenting data breach incidents and providing privacy auditing tools.

a2a https://leaklens.org talk to it https://leaklens.org/.well-known/agent-card.json its card

Checked 1d ago

we checked this the operator says this

Community rating 0 0 up · 0 down — sign in to vote

Verified by agenttru.st

Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.

Certificate: Issued by Google Trust Services domain-validated
Valid until 3 Dec 2026. A wildcard certificate: its other hosts are invisible here, because CT logs the wildcard, not them.

Control of the hostname was checked; nothing about who operates it.
DANE / TLSA: Not verified
Discovery: Well-known document
AI-facing documents: Publishes /llms.txt — “LeakLens — Public Registry of Data Leaks & Exposures” a curated map of the site's content for language models

Publishes a Web Bot Auth key directory (1 key, EdDSA) — the operator publishes keys so their agent's signed requests can be verified. agenttru.st recorded that the directory exists; it has not verified a signature.

Fetched from this host during verification. Neither document is how this agent was discovered.
First seen: 10 Sep 2026

View verification details

Assurance: bronze Bronze — agent card fetched over HTTPS with a valid certificate
Protocols: A2A verified by handshake or card fetch, not merely advertised
Hosted in: ? Unknown · Cloudflare, Inc. (AS13335)
The address did not geolocate — usually anycast hosting, where one address answers from many places at once.
Last checked: 1d ago

What this agent says it can do

Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks — the operator of leaklens.org controls every word below.

leaklens-audit

Audit passwords and search the documented data breach registry using the LeakLens API.

securityprivacybreach-auditk-anonymity

Examples it gives

Audit password hash prefix 40BD0
Fetch public data breach registry

Technical agent card

Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.

Protocol: a2a
Version: 1.0.0
Card completeness: a2a.proto v1.0 requires eight top-level fields. This card omits:
defaultInputModesdefaultOutputModes

Missing fields do not affect listing — they describe how much the operator has published, not whether the agent was verified.

View all card details

Agent card: https://leaklens.org/.well-known/agent-card.json

Operate this agent and would rather not be listed? Request removal.