CyberPulse | Apiosk Gateway

Resource	Description
`https://cyberpulse.theaslangroupllc.com/api/cyber/cve-brief?ref=apiosk`	CVE lookup and severity brief for any CVE ID — CVSS score, exploit / CISA KEV / active-exploitation / PoC status, affected products, patch urgency, and remediation steps. Authoritative NVD + CISA data plus threat-intel context, for security and vuln-management agents.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/cve-check?ref=apiosk`	CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively-exploited flag, remediation due date, ransomware use), and OSV (affected packages + fixed versions per ecosystem). No LLM. Distinguishes "not a known CVE" from "registry unreachable" — never a false not-found.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/vuln-scan?ref=apiosk`	Vulnerability scan / known-CVE lookup for any software, product, or package version. Returns NVD CVEs, CISA KEV matches, OSV open-source/dependency vuln results, version risk assessment, and prioritized patch guidance, for vuln-management and dependency-security agents.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/cisa-kev?ref=apiosk`	CISA Known Exploited Vulnerabilities (KEV) lookup and patch prioritization. Filter the KEV catalog by vendor, product, or time range; returns ransomware-linked flags, CISA federal due dates, CVSS, and patch priority. Updated daily, for vuln-management and security agents.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/osint?ref=apiosk`	OSINT lookup for any domain or IP — open ports and known CVEs (Shodan InternetDB), DNS and email posture (SPF/DMARC/DKIM), SSL grade, threat-feed status, and geolocation, for security and defensive agents. Authorized defensive use only.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/threat-intel?ref=apiosk`	Threat-intelligence brief for any industry and region — active threat-actor campaigns, TTPs, nation-state APTs, eCrime/ransomware operators, and MITRE ATT&CK mapping, with recent CISA KEV and GDELT-scored news coverage. Worldwide sector-specific context, for threat-intel and SOC agents.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/ransomware-intel?ref=apiosk`	Ransomware-group threat brief and tracking — victim patterns, TTPs, ransom economics, and defensive playbooks across LockBit, ALPHV, Cl0p, RansomHub, BlackBasta, Akira, and 50+ active groups, plus CISA KEV ransomware-linked CVEs. Global, for threat-intel and incident-response agents.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/breach-check?ref=apiosk`	Data-breach lookup and credential-exposure check for any domain. Surfaces known data breaches, credential dumps, dark-web signals, and regulatory notification duties (GDPR, CCPA, PDPA, LGPD, POPIA), for security and compliance agents. Authorized security use only.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/compliance-gap?ref=apiosk`	Compliance gap analysis for SOC2, ISO27001, GDPR, HIPAA, PCI-DSS, NIST CSF, NIS2, PDPA, POPIA, LGPD, CCPA, FISMA, and CMMC — control gaps, common audit failures, enforcement trends, cost to comply, and fastest path to certification, for compliance and CISO agents.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/dark-web-monitor?ref=apiosk`	Dark-web monitoring for any brand or domain — paste-site mentions, credential-dump signals, forum chatter, ransomware leak-site activity, brand impersonation, and initial-access-broker listings, for threat-intel and brand-protection agents. Ethical OSINT only.	Open
`https://cyberpulse.theaslangroupllc.com/api/cyber/attack-surface?ref=apiosk`	External attack-surface assessment (EASM) for any company and domain — internet-exposed assets, tech-stack fingerprinting, email-security posture, supply-chain and identity exposure, and a prioritized remediation roadmap, for security and red-team-context agents. Authorized defensive use only.	Open

Method	Path	Description	Cost
GET	/api/cyber/attack-surface	External attack-surface assessment (EASM) for any company and domain — internet-exposed assets, tech-stack fingerprinting, email-security posture, supply-chain and identity exposure, and a prioritized remediation roadmap, for security and red-team-context agents. Authorized defensive use only.	$0.25 default	View details
GET	/api/cyber/breach-check	Data-breach lookup and credential-exposure check for any domain. Surfaces known data breaches, credential dumps, dark-web signals, and regulatory notification duties (GDPR, CCPA, PDPA, LGPD, POPIA), for security and compliance agents. Authorized security use only.	$0.15 default	View details
GET	/api/cyber/cisa-kev	CISA Known Exploited Vulnerabilities (KEV) lookup and patch prioritization. Filter the KEV catalog by vendor, product, or time range; returns ransomware-linked flags, CISA federal due dates, CVSS, and patch priority. Updated daily, for vuln-management and security agents.	$0.08 default	View details
GET	/api/cyber/compliance-gap	Compliance gap analysis for SOC2, ISO27001, GDPR, HIPAA, PCI-DSS, NIST CSF, NIS2, PDPA, POPIA, LGPD, CCPA, FISMA, and CMMC — control gaps, common audit failures, enforcement trends, cost to comply, and fastest path to certification, for compliance and CISO agents.	$0.25 default	View details
GET	/api/cyber/cve-brief	CVE lookup and severity brief for any CVE ID — CVSS score, exploit / CISA KEV / active-exploitation / PoC status, affected products, patch urgency, and remediation steps. Authoritative NVD + CISA data plus threat-intel context, for security and vuln-management agents.	$0.10 default	View details
GET	/api/cyber/cve-check	CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively-exploited flag, remediation due date, ransomware use), and OSV (affected packages + fixed versions per ecosystem). No LLM. Distinguishes "not a known CVE" from "registry unreachable" — never a false not-found.	$0.02 default	View details
GET	/api/cyber/dark-web-monitor	Dark-web monitoring for any brand or domain — paste-site mentions, credential-dump signals, forum chatter, ransomware leak-site activity, brand impersonation, and initial-access-broker listings, for threat-intel and brand-protection agents. Ethical OSINT only.	$0.20 default	View details
GET	/api/cyber/osint	OSINT lookup for any domain or IP — open ports and known CVEs (Shodan InternetDB), DNS and email posture (SPF/DMARC/DKIM), SSL grade, threat-feed status, and geolocation, for security and defensive agents. Authorized defensive use only.	$0.15 default	View details
GET	/api/cyber/ransomware-intel	Ransomware-group threat brief and tracking — victim patterns, TTPs, ransom economics, and defensive playbooks across LockBit, ALPHV, Cl0p, RansomHub, BlackBasta, Akira, and 50+ active groups, plus CISA KEV ransomware-linked CVEs. Global, for threat-intel and incident-response agents.	$0.20 default	View details
GET	/api/cyber/threat-intel	Threat-intelligence brief for any industry and region — active threat-actor campaigns, TTPs, nation-state APTs, eCrime/ransomware operators, and MITRE ATT&CK mapping, with recent CISA KEV and GDELT-scored news coverage. Worldwide sector-specific context, for threat-intel and SOC agents.	$0.20 default	View details
GET	/api/cyber/vuln-scan	Vulnerability scan / known-CVE lookup for any software, product, or package version. Returns NVD CVEs, CISA KEV matches, OSV open-source/dependency vuln results, version risk assessment, and prioritized patch guidance, for vuln-management and dependency-security agents.	$0.12 default	View details

Endpoint documentation

GET/api/cyber/attack-surface

$0.25 default

Description

External attack-surface assessment (EASM) for any company and domain — internet-exposed assets, tech-stack fingerprinting, email-security posture, supply-chain and identity exposure, and a prioritized remediation roadmap, for security and red-team-context agents. Authorized defensive use only.

Documentation

Attack surface assessment — external risk analysis for authorized defensive use

Internet-facing asset exposure, email security posture (SPF/DMARC/DKIM), supply chain risk, identity exposure, and prioritized remediation roadmap for any company.

**Price:** $0.25 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.25 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "company": {
      "description": "Company name — e.g. Acme Corporation",
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    },
    "domain": {
      "description": "Primary domain — e.g. acme.com",
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    },
    "lang": {
      "description": "Response language (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [
    "company",
    "domain"
  ],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/breach-check

$0.15 default

Description

Data-breach lookup and credential-exposure check for any domain. Surfaces known data breaches, credential dumps, dark-web signals, and regulatory notification duties (GDPR, CCPA, PDPA, LGPD, POPIA), for security and compliance agents. Authorized security use only.

Documentation

Breach check — domain breach history and credential exposure intelligence

Known data breaches, credential dump exposure, dark web signals, and regulatory notification obligations (GDPR, CCPA, PDPA, LGPD, POPIA) for any domain.

**Price:** $0.15 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.15 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "domain": {
      "description": "Domain to check — e.g. example.com",
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    },
    "lang": {
      "description": "Response language (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [
    "domain"
  ],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/cisa-kev

$0.08 default

Description

CISA Known Exploited Vulnerabilities (KEV) lookup and patch prioritization. Filter the KEV catalog by vendor, product, or time range; returns ransomware-linked flags, CISA federal due dates, CVSS, and patch priority. Updated daily, for vuln-management and security agents.

Documentation

CISA KEV — Known Exploited Vulnerabilities catalog search

Filter the CISA Known Exploited Vulnerabilities catalog by vendor, product, or time range. Includes ransomware-linked flags, CISA due dates, and patch prioritization.

**Price:** $0.08 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.08 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "days": {
      "description": "Entries added in last N days (default: 90)",
      "required": false,
      "type": "integer",
      "x-parameter-location": "query"
    },
    "filter": {
      "description": "ransomware | recent (alternative to vendor search)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    },
    "lang": {
      "description": "Response language (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    },
    "vendor": {
      "description": "Vendor/product name — e.g. Cisco | Ivanti | Microsoft | Palo Alto | Fortinet",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/compliance-gap

$0.25 default

Description

Compliance gap analysis for SOC2, ISO27001, GDPR, HIPAA, PCI-DSS, NIST CSF, NIS2, PDPA, POPIA, LGPD, CCPA, FISMA, and CMMC — control gaps, common audit failures, enforcement trends, cost to comply, and fastest path to certification, for compliance and CISO agents.

Documentation

Compliance gap analysis — global security frameworks (SOC2, ISO27001, GDPR, NIS2, PDPA, POPIA, LGPD...)

Control domains, common audit failures, penalties and enforcement, tooling recommendations, cost to comply, and fastest path to certification for 13 global security frameworks.

**Price:** $0.25 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.25 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "framework": {
      "description": "Compliance framework",
      "enum": [
        "SOC2",
        "ISO27001",
        "GDPR",
        "HIPAA",
        "PCI-DSS",
        "NIST-CSF",
        "NIS2",
        "PDPA",
        "POPIA",
        "LGPD",
        "CCPA",
        "FISMA",
        "CMMC"
      ],
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    },
    "lang": {
      "description": "Response language (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    },
    "sector": {
      "description": "Industry sector — e.g. healthcare | finance | SaaS | e-commerce",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [
    "framework"
  ],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/cve-brief

$0.10 default

Description

CVE lookup and severity brief for any CVE ID — CVSS score, exploit / CISA KEV / active-exploitation / PoC status, affected products, patch urgency, and remediation steps. Authoritative NVD + CISA data plus threat-intel context, for security and vuln-management agents.

Documentation

CVE deep-dive — CVSS, exploitation status, patch urgency, remediation

Returns CVSS score, affected products, CISA KEV status, active exploitation signals, PoC availability, patch urgency, and remediation steps for any CVE ID.

**Price:** $0.1 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.10 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "cve": {
      "description": "CVE ID — e.g. CVE-2024-3400 | CVE-2023-44487 | CVE-2021-44228",
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    },
    "lang": {
      "description": "Response language: en|es|fr|de|ja|zh|ko|pt|ar|hi (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [
    "cve"
  ],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/cve-check

$0.02 default

Description

CVE fact check, deterministic. Answers "is CVE-XXXX-NNNN real", "is it exploited in the wild", "what version fixes it", "how severe is it". Joins the NVD record (CVSS score, vector, dates), the CISA KEV catalog (actively-exploited flag, remediation due date, ransomware use), and OSV (affected packages + fixed versions per ecosystem). No LLM. Distinguishes "not a known CVE" from "registry unreachable" — never a false not-found.

Documentation

CVE fact check — NVD + CISA KEV + OSV joined, deterministic

Is this CVE real, is it exploited in the wild, what version fixes it, how severe is it. Joins the NVD record (CVSS score/vector, dates), the CISA KEV catalog (actively-exploited flag, remediation due date, ransomware use) and OSV (affected packages + fixed versions per ecosystem). No LLM. Distinguishes 'not a known CVE' from 'registry unreachable' - never a false not-found.

**Price:** $0.02 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.02 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "id": {
      "description": "CVE identifier, e.g. CVE-2021-44228",
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [
    "id"
  ],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/dark-web-monitor

$0.20 default

Description

Dark-web monitoring for any brand or domain — paste-site mentions, credential-dump signals, forum chatter, ransomware leak-site activity, brand impersonation, and initial-access-broker listings, for threat-intel and brand-protection agents. Ethical OSINT only.

Documentation

Dark web monitor — brand and domain underground intelligence (ethical OSINT)

Paste site mentions, credential dump signals, forum chatter, ransomware leak site activity, brand impersonation domains. Ethical OSINT only.

**Price:** $0.2 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.20 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "brand": {
      "description": "Brand name or domain — e.g. acme.com | MyCompany",
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    },
    "lang": {
      "description": "Response language (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [
    "brand"
  ],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/osint

$0.15 default

Description

OSINT lookup for any domain or IP — open ports and known CVEs (Shodan InternetDB), DNS and email posture (SPF/DMARC/DKIM), SSL grade, threat-feed status, and geolocation, for security and defensive agents. Authorized defensive use only.

Documentation

OSINT — domain and IP intelligence for authorized defensive use

Open-source intelligence on any domain or IP: Shodan port/CVE data, email security posture (SPF/DMARC/DKIM), SSL grade, threat feed status, geolocation.

**Price:** $0.15 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.15 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "lang": {
      "description": "Response language (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    },
    "target": {
      "description": "Domain or public IP — e.g. example.com | 8.8.8.8",
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [
    "target"
  ],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/ransomware-intel

$0.20 default

Description

Ransomware-group threat brief and tracking — victim patterns, TTPs, ransom economics, and defensive playbooks across LockBit, ALPHV, Cl0p, RansomHub, BlackBasta, Akira, and 50+ active groups, plus CISA KEV ransomware-linked CVEs. Global, for threat-intel and incident-response agents.

Documentation

Ransomware intelligence — group profiles, victim patterns, TTPs, defensive playbook

Ransomware group intelligence including status, targets, TTPs, ransom economics, CISA KEV linked vulns, and defensive playbook. Covers LockBit, ALPHV, Cl0p, RansomHub, BlackBasta, Akira, Play, and 50+ groups.

**Price:** $0.2 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.20 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "group": {
      "description": "Ransomware group name — e.g. LockBit | ALPHV | Cl0p | RansomHub (omit for landscape overview)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    },
    "lang": {
      "description": "Response language (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/threat-intel

$0.20 default

Description

Threat-intelligence brief for any industry and region — active threat-actor campaigns, TTPs, nation-state APTs, eCrime/ransomware operators, and MITRE ATT&CK mapping, with recent CISA KEV and GDELT-scored news coverage. Worldwide sector-specific context, for threat-intel and SOC agents.

Documentation

Threat intelligence — global threat actors and campaigns by sector and region

Active threat campaigns, nation-state APTs, eCrime groups, TTPs, MITRE ATT&CK mapping, and regional geopolitical threat context for any industry and region globally.

**Price:** $0.2 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.20 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "industry": {
      "description": "Sector — e.g. healthcare | finance | energy | manufacturing | government | education",
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    },
    "lang": {
      "description": "Response language (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    },
    "region": {
      "description": "Region — e.g. North America | Europe | Southeast Asia | MENA | Sub-Saharan Africa | Global (default: Global)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [
    "industry"
  ],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗

GET/api/cyber/vuln-scan

$0.12 default

Description

Vulnerability scan / known-CVE lookup for any software, product, or package version. Returns NVD CVEs, CISA KEV matches, OSV open-source/dependency vuln results, version risk assessment, and prioritized patch guidance, for vuln-management and dependency-security agents.

Documentation

Vulnerability scan — all known CVEs for any software + version

Returns known CVEs, CISA KEV matches, OSV open-source vulns, version risk assessment, and prioritized patch guidance for any software product.

**Price:** $0.12 USDC per call

Calls go directly to PulseNetwork. Paid routes use the live x402 challenge; Apiosk never rewrites payTo or settles the payment.

Pricing

$0.12 default

Authentication

No account or API key. Pay PulseNetwork directly using the live x402 challenge. The challenge is authoritative for price, network, asset and payTo.

Parameters

{
  "properties": {
    "ecosystem": {
      "description": "Package ecosystem — npm | PyPI | Maven | Go | crates.io | NuGet",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    },
    "lang": {
      "description": "Response language (default: en)",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    },
    "software": {
      "description": "Software name — e.g. Apache Log4j | OpenSSL | Spring Boot | Ivanti Connect Secure",
      "required": true,
      "type": "string",
      "x-parameter-location": "query"
    },
    "version": {
      "description": "Version string — e.g. 2.14.0 | 3.0.8",
      "required": false,
      "type": "string",
      "x-parameter-location": "query"
    }
  },
  "required": [
    "software"
  ],
  "type": "object"
}

Links

External documentation ↗OpenAPI / Swagger ↗