Three steps: pick a public sandbox run, copy the snippet, paste it into your README. The badge renders the run's grade as a Shields-style SVG and links back to the full public run page.
Everything on this page applies to sandbox runs only — the badge intentionally does not exist for private customer endpoints.
Pick a sandbox run
- Open /demo and pick either the OWASP Juice Shop or VulnBot sample run.
- Copy the run_id from the URL — it's the segment after /demo/runs/.
- The same page exposes a copy-paste snippet block with the badge already filled in.
Either sample works: the Juice Shop run exercises a real web application, the VulnBot run exercises an LLM stack. Copy the run id from the URL — the segment after /demo/runs/ — or use the ready-made snippet block on the run page.
Markdown / HTML snippets
- Markdown: [](https://doesitdefend.ai/demo/runs/run_xxx)
- HTML: <a href="https://doesitdefend.ai/demo/runs/run_xxx"><img src="https://api.doesitdefend.ai/v1/badges/runs/run_xxx.svg" alt="LLM security"></a>
- JSON variant for custom widgets: GET /v1/badges/runs/run_xxx.json — returns {letter, color, score, tested_at}.
The Markdown snippet keeps image and link together so the badge always deep-links to evidence. For custom widgets, the JSON variant returns the letter, color, score, and tested_at fields — render your own UI from the same source of truth.