Purlock
API Link monitoring

A safe looking link today can turn bad tomorrow.

Domains expire and sites get hacked, long after a link was approved. Add your links once, and we compare every one with fresh threat lists each day.

Get your API key Read the docs

One API call per link added. The daily comparisons are free. Watch 100 links free, 5,000 with the Security bundle and 25,000 with Everything.

What you get

What it does for you

  • Checked every day

    Every link is compared with the threat lists after each daily refresh, however many you have.

  • Email alerts on every plan

    An email the moment one turns dangerous, plus a weekly report you can turn off.

  • Webhooks with Security

    Signed link.turned_dangerous and link.cleared events, so your app can act by itself.

  • Saved rules

    Choose what to block, and domains to always allow or block. Every link check uses them.

  • Check many at once

    The bulk check takes 100 links per request, at one call per link. It reads addresses and lists without following redirects.

  • From the dashboard too

    Paste your links on your Shield page, with no code.

How it works

What it looks like in your code

Start watching

POST /v1/shield/links/watch

{
  "urls": ["https://partner.example/offer"],
  "label": "Partner links"
}

When one turns bad

POST https://yourapp.com/hooks/purlock

{
  "event": "link.turned_dangerous",
  "links": [{
    "url": "https://was-fine.example/",
    "label": null,
    "verdict": "dangerous",
    "reason": "Listed as harmful: was-fine.example"
  }],
  "at": "2026-11-06T07:04:00.000Z"
}

Good to know

What it can't do

  • We don't open your links again each day, so this catches a link that gets listed, not a page that quietly changes.
  • Lists can be out of date, so think about a review step before taking a link down automatically.
  • It catches phishing far better than malware.

FAQ

Questions, answered

Do free accounts get alerts?
Yes. Every plan gets the email alert and the weekly report. Webhooks come with the Security bundle, or Everything.
Do the daily checks use my API calls?
No. Only adding a link uses a call.
What if you flag a link by mistake?
Add the domain to your always allow list. If you think the list is wrong, email hello@purlock.com and we'll check by hand.

Related