Launch an AI-powered penetration test against a target URL. The domain must be verified first (see list_domains). Requires an available credit matching the selected tier.

Get full details for a pentest including status, progress, findings summary, executive summary, attack surface map, and STRIDE threat model.

List all your pentests with status and finding counts. Results are ordered newest first.

Get structured vulnerability findings for a pentest. Each finding includes severity, CVSS, CWE, description, PoC, remediation, and retest command. Use the severity filter to narrow results.

Download a pentest report. Use format=markdown for AI-readable content, format=json for structured data, or format=pdf for the full formatted report. The scan must be complete.

Check your credit balance and available scan tiers with pricing. Credits are required to launch pentests.

Verify a blockchain-anchored pentest attestation by its hash. This is a public endpoint — no API key required. Use this to confirm that a pentest was actually performed and its results are authentic.

List your verified domains and their verification status. Domains must be verified before you can run pentests against them.