SECURITY INTELLIGENCE API

Security data for
AI models & developers

CVE intelligence, domain reconnaissance, threat intel, and code security verification. Structured JSON with LLM-optimized summaries. Free tier included.

Domain Intelligence
GET /v1/domain/{domain} Full domain report
GET /v1/dns/{domain} DNS records
GET /v1/whois/{domain} WHOIS lookup
GET /v1/subdomains/{domain} Subdomain enumeration
GET /v1/certs/{domain} CT log certificates
GET /v1/threat/{domain} URLhaus threat intel
GET /v1/ip/{ip} IP intel (Shodan + PTR)
CVE Intelligence
GET /v1/cve/{cve_id} CVE details + EPSS + KEV
GET /v1/cves?product=&severity= Search CVEs
GET /v1/cves/recent?hours=24 Latest CVEs
GET /v1/cves/kev CISA exploited vulns
GET /v1/epss/{cve_id} Exploit probability
Code Security
POST /v1/check/headers Validate HTTP headers
POST /v1/check/secrets Detect hardcoded secrets
POST /v1/check/injection SQL/cmd injection patterns
POST /v1/check/dependencies Check packages for CVEs
GET /v1/scan/headers/{domain} Live header security scan
Operations
GET /v1/status API health + data freshness
GET /v1/usage Your usage stats (Pro)
GET /metrics Prometheus metrics
Example Request
$ curl https://api.contrastcyber.com/v1/domain/example.com
{
  "domain": "example.com",
  "summary": "example.com resolves to 93.184.216.34. SSL grade A (DigiCert). SPF+DMARC present. No WAF. Risk: B (72/100).",
  "risk_score": {"score": 72, "grade": "B"},
  "dns": {
    "a": ["93.184.216.34"],
    "mx": [{"priority": 0, "host": "."}],
    "ns": ["a.iana-servers.net", "b.iana-servers.net"]
  },
  "ssl": {"grade": "A", "issuer": "DigiCert", "days_remaining": 182},
  "email_security": {"spf": true, "dmarc": true, "dkim": false},
  "threat": {"url_count": 0, "urls_online": 0},
  "whois": {"registrar": "RESERVED-IANA"},
  "subdomains": {"count": 3},
  "waf": {"waf_present": false}
}
Authentication

Free

No key needed
  • 100 requests/hour
  • All endpoints
  • Rate limited by IP

Pro

$9/month
  • 1,000 requests/hour
  • All endpoints
  • Usage dashboard (/v1/usage)
  • Rate limit headers
  • Authorization: Bearer cc_xxx