// API Intelligence Fabric
Online security APIs connected with safe caching and allow-listed hosts.
NeoShieldSecurity calls only defensive, read-only sources by default, over HTTPS to allow-listed hosts, with results cached for 30 minutes.
NVD CVE 2.0 on-demand
Used by CVE lookup for vulnerability details and CVSS.
services.nvd.nist.gov
2 CVE responses cached · newest 3d ago
CISA KEV live
Used for actively-exploited vulnerability decisions and required action.
www.cisa.gov
Updated 0s ago · 1,665 known-exploited CVEs
MITRE ATT&CK planned
Prepared for ATT&CK mapping and future STIX enrichment.
raw.githubusercontent.com
Integration prepared; not yet active.
API-enabled tools
AI Config Hardening Auditor
CIS-aligned hardening review of sshd, nginx/Apache, Dockerfile, compose, .env, Kubernetes, IAM, or CSP. Powered by Claude with an offline fallback. Config never stored.
API: claude + local
Local Port Scanner (safe)
Non-invasive TCP connect check of this server's own common ports.
API: local-only
IP Reputation Checker
Classify an IP and query public DNSBL blocklists.
API: dnsbl
HTTP Security Header Checker
Grade a public site's HTTP security headers (SSRF-guarded).
API: http-head
NVD CVE Lookup + Mitigation
Lookup CVE details from the public NVD CVE 2.0 API and produce defensive remediation guidance.
API: NVD 2.0
CISA KEV Exploitation Checker
Check whether a CVE appears in CISA Known Exploited Vulnerabilities and show required action.
API: CISA KEV JSON
Domain DNS Security Auditor
Review SPF, DMARC, MX, NS, and TXT records for basic domain security posture.
API: DNS
MITRE ATT&CK Technique Mapper
Map defensive observations to common MITRE ATT&CK tactics and mitigation ideas.
API: local + optional MITRE feed
Live CISA KEV check
✓ CISA KEV feed reachable — 1,665 known-exploited CVEs, refreshed just now.
CISA KEV status: live · 1,665 known-exploited CVEs · updated 0s ago
🔄 Run safe CISA KEV check Read-only · HTTPS · allow-listed host · 30-min cache