sectora

Tools

Token cost is the o200k count of the tools list JSON, including schemas, before any tool is called. Showing 12 of 14.

• lookup_cve

  Get full threat intelligence enrichment for a CVE including EPSS score, CISA KEV status, public exploits, Nuclei templates, risk level, and risk factors. Input must be a valid CVE ID.

• assess_tech_risk

  Assess security risk for a list of technologies. Returns known CVEs affecting each technology with severity breakdown. Input: comma-separated technology names only.

• search_cves

  Search for CVEs by keyword, severity, or other filters. Query must be alphanumeric text.

• get_kev_recent

  Get recently added entries to the CISA Known Exploited Vulnerabilities (KEV) catalog.

• get_trending_cves

  Get currently trending CVEs based on recent KEV additions, high EPSS scores, and exploit availability.

• get_weaponization_score

  Get the weaponization score (0-100) for a CVE. Factors in EPSS, KEV status, exploit availability, Nuclei templates, and CVSS. Input must be a valid CVE ID.

• lookup_ip_reputation

  Look up community IP reputation from Sectora Shield WAF network. Shows if an IP has been reported for attacks. Accepts IPv4 or IPv6 (the Shield network sees both).

• get_threat_stats

  Get statistics about the Sectora threat intelligence database including counts of EPSS scores, KEV entries, Nuclei templates, and exploits. No input required.

• list_my_findings

  List the API key owner's open security findings across all scans. Use this to answer "what's my current exposure?" Filter by severity, status, or domain. Returns finding summaries; call get_scan for f

• list_my_scans

  List the API key owner's recent scans with summary counts. Requires API key.

• get_scan

  Get a scan with all its findings (full detail: title, description, evidence, remediation, CVSS). Requires API key.

• scan_url

  Kick off a DAST security scan against a public URL the API key owner controls. Two-step flow: first call returns a preview (target, profile, ETA, quota remaining); confirm by calling again with confir