Who it is for
Use bounded passive checks to enrich triage and investigation, not to replace authorized testing or human review.
What you get
Find exposed software, risky configurations, and known affected versions across a public website. Every result explains what was checked, why it matched, and how strong the evidence is.
SynchronousRESTMCPSDKInteractive tool
Choose this product when
Choose this product when
Choose this for passive exposed-version and configuration evidence. It does not exploit the target or prove the site is vulnerability-free.
What you get
Find exposed software, risky configurations, and known affected versions across a public website. Every result explains what was checked, why it matched, and how strong the evidence is.
Endpoints
Review the supported operations, inputs, outputs, execution modes, and response limits before integrating.
Credits and authentication
8-12 Authentication required. Check the operation reference for the exact cost and any per-item pricing.
Example operation
Use documented operations to collect, assess, enrich, verify, compare, protect, or monitor public evidence.
GET
/v1/vulnerabilities
Query Parameters
| Parameter | Type | required |
|---|---|---|
| url | string | optional |
| domain | string | optional |
| mode |
string
Allowed values
standarddeep
Default
standard
|
optional |
Response Fields
| Field | Type |
|---|---|
target |
object |
target.requested_url |
string |
target.final_url |
string |
target.hostname |
string |
scan |
object |
scan.mode |
string |
scan.status |
string |
scan.checked_at |
string |
scan.duration_ms |
integer |
scan.disclaimer |
string |
summary |
object |
summary.posture |
string |
summary.risk_level |
string |
summary.finding_count |
integer |
summary.version_affected_count |
integer |
summary.misconfiguration_count |
integer |
summary.urgent_count |
integer |
summary.severity_counts |
object |
findings[] |
object[] |
findings[] |
object |
findings[].fingerprint |
string |
findings[].classification |
string |
findings[].severity |
string |
findings[].priority |
string |
findings[].title |
string |
findings[].summary |
string |
findings[].component |
object |
findings[].component.technology_id |
string |
findings[].component.name |
string |
findings[].component.detected_version |
string |
findings[].component.version_kind |
string |
findings[].component.confidence |
string |
findings[].component.confidence_score |
integer |
findings[].component.ecosystem |
string |
findings[].component.package |
string |
findings[].component.purl |
string |
findings[].advisory |
object |
findings[].advisory.id |
string |
findings[].advisory.aliases[] |
string[] |
findings[].advisory.cves[] |
string[] |
findings[].advisory.published_at |
string | null |
findings[].advisory.modified_at |
string | null |
findings[].advisory.cvss[] |
object[] |
findings[].advisory.cvss[] |
object |
findings[].advisory.cvss[].type |
string |
findings[].advisory.cvss[].vector |
string |
findings[].advisory.fixed_versions[] |
string[] |
findings[].advisory.affected_ranges[] |
object[] |
findings[].advisory.affected_ranges[] |
object |
findings[].advisory.references[] |
string[] |
findings[].exploitation |
object |
findings[].exploitation.cisa_kev |
boolean | null |
findings[].exploitation.kev_added_at |
string | null |
findings[].exploitation.kev_required_action |
string | null |
findings[].exploitation.known_ransomware_use |
string | null |
findings[].exploitation.epss_probability |
number | null |
findings[].exploitation.epss_percentile |
number | null |
findings[].exploitation.epss_date |
string | null |
findings[].evidence |
object |
findings[].evidence.confidence |
string |
findings[].evidence.observed[] |
string[] |
findings[].evidence.limitations[] |
string[] |
findings[].remediation |
object |
findings[].remediation.summary |
string |
findings[].remediation.fixed_versions[] |
string[] |
findings[].sources[] |
string[] |
components[] |
object[] |
components[] |
object |
components[].technology_id |
string |
components[].name |
string |
components[].detected_version |
string | null |
components[].version_kind |
string | null |
components[].confidence |
string |
components[].advisory_status |
string |
components[].matched_advisories |
integer |
coverage |
object |
coverage.target_response |
string |
coverage.technology_detection |
string |
coverage.package_advisories |
string |
coverage.known_exploitation |
string |
coverage.exploitation_probability |
string |
coverage.detected_components |
integer |
coverage.versioned_components |
integer |
coverage.advisory_eligible_components |
integer |
coverage.advisory_checked_components |
integer |
coverage.advisory_deferred_components |
integer |
coverage.advisory_query_limit |
integer |
coverage.relay_used |
boolean |
coverage.limitations[] |
string[] |
sources[] |
object[] |
sources[] |
object |
sources[].id |
string |
sources[].name |
string |
sources[].owner |
string |
sources[].url |
string |
sources[].status |
string |
sources[].retrieved_at |
string | null |
sources[].cache_hit |
boolean |
sources[].expected_freshness |
string |
sources[].fallback_behavior |
string |
sources[].cost |
string |
_meta |
object |
Example Request
curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/vulnerabilities?url=https%3A%2F%2Fexample.com&domain=example.com&mode=standard"Example Response
{
"target": {
"requested_url": "https://example.com",
"final_url": "https://example.com",
"hostname": "example.com"
},
"scan": {
"mode": "standard",
"status": "complete",
"checked_at": "2026-08-27T12:00:00Z",
"duration_ms": 1,
"disclaimer": "example"
},
"summary": {
"posture": "action_required",
"risk_level": "critical",
"finding_count": 1,
"version_affected_count": 1,
"misconfiguration_count": 1,
"urgent_count": 1,
"severity_counts": {}
},
"findings": [
{
"fingerprint": "example",
"classification": "version_affected",
"severity": "critical",
"priority": "urgent",
"title": "example",
"summary": "example",
"evidence": {
"confidence": "high",
"observed": [
"example"
],
"limitations": [
"example"
]
},
"remediation": {
"summary": "example",
"fixed_versions": [
"example"
]
},
"sources": [
"osv"
],
"component": {
"technology_id": "example",
"name": "example",
"detected_version": "example",
"version_kind": "product",
"confidence": "high",
"confidence_score": 85,
"ecosystem": "example",
"package": "example",
"purl": "https://example.com"
},
"advisory": {
"id": "example-id",
"aliases": [
"example"
],
"cves": [
"example"
],
"published_at": "2026-08-27T12:00:00Z",
"modified_at": "2026-08-27T12:00:00Z",
"cvss": [
{
"type": "domain",
"vector": "example"
}
],
"fixed_versions": [
"example"
],
"affected_ranges": [
{}
],
"references": [
"https://example.com"
]
},
"exploitation": {
"cisa_kev": false,
"kev_added_at": "2026-08-27",
"kev_required_action": "example",
"known_ransomware_use": "example",
"epss_probability": 0.85,
"epss_percentile": 0.5,
"epss_date": "2026-08-27"
}
}
],
"components": [
{
"technology_id": "example",
"name": "example",
"detected_version": "example",
"version_kind": "example",
"confidence": "high",
"advisory_status": "checked",
"matched_advisories": 1
}
],
"coverage": {
"target_response": "example",
"technology_detection": "example",
"package_advisories": "example",
"known_exploitation": "example",
"exploitation_probability": "example",
"detected_components": 1,
"versioned_components": 1,
"advisory_eligible_components": 1,
"advisory_checked_components": 1,
"advisory_deferred_components": 1,
"advisory_query_limit": 1,
"relay_used": false,
"limitations": [
"example"
]
},
"sources": [
{
"id": "example-id",
"name": "example",
"owner": "example",
"url": "https://example.com",
"status": "available",
"retrieved_at": "2026-08-27T12:00:00Z",
"cache_hit": false,
"expected_freshness": "example",
"fallback_behavior": "example",
"cost": "none"
}
],
"_meta": {}
}Limits and evidence boundaries
Passive analysis observes public evidence and does not send exploit payloads.
Results describe observed public evidence and its provenance.
Confidence describes evidence strength for the reported observation, not certainty about the real-world entity.
Coverage is bounded by the documented inputs, budgets, sources, and response limits.
Partial means some requested items or components completed while others did not.
Reviewed 2026-08-22
Frequently asked questions
Where can I find the Website Vulnerability Scanner request and response reference?
Use the API reference for Website Vulnerability Scanner to review parameters, response fields, examples, status codes, and supported operation modes.
How should I interpret unknown or incomplete results from Website Vulnerability Scanner?
Unknown or partial results mean that the requested evidence could not be fully determined. Keep the result state, confidence, freshness, and limitations in downstream decisions.
How is Website Vulnerability Scanner priced?
Pricing depends on the operation and execution mode. Check the endpoint reference for the current credit cost, authentication requirement, and per-item rules.