API Documentation

# 1. Trigger a scan
curl -X POST https://securityscanner.dev/v1/scan \
  -H "Authorization: Bearer sk-sec-YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"host": "https://myapp.com"}'

# Response:
# {"run_id": "abc12345", "status": "started", ...}

# 2. Poll for results (scan takes 2-5 minutes)
curl https://securityscanner.dev/v1/scan/abc12345 \
  -H "Authorization: Bearer sk-sec-YOUR_KEY"

# 3. Download the fix file
curl https://securityscanner.dev/v1/scan/abc12345/fix \
  -H "Authorization: Bearer sk-sec-YOUR_KEY" \
  -o SECURITY-FIX.md

import httpx, time

API = "https://securityscanner.dev"
KEY = "sk-sec-YOUR_KEY"
HEADERS = {"Authorization": f"Bearer {KEY}"}

# 1. Trigger
r = httpx.post(f"{API}/v1/scan", headers=HEADERS,
               json={"host": "https://myapp.com"})
run_id = r.json()["run_id"]

# 2. Poll
while True:
    status = httpx.get(f"{API}/v1/scan/{run_id}", headers=HEADERS).json()
    if status["status"] == "completed":
        break
    time.sleep(10)

print(f"Found {status['summary']['total']} findings")
for f in status["findings"]:
    print(f"  [{f['severity']}] {f['title']}")

# 3. Fix file
fix = httpx.get(f"{API}/v1/scan/{run_id}/fix", headers=HEADERS).text
open("SECURITY-FIX.md", "w").write(fix)

const API = "https://securityscanner.dev";
const KEY = "sk-sec-YOUR_KEY";
const H = { Authorization: `Bearer ${KEY}` };

// 1. Trigger
const started = await fetch(`${API}/v1/scan`, {
  method: "POST",
  headers: { ...H, "Content-Type": "application/json" },
  body: JSON.stringify({ host: "https://myapp.com" }),
}).then(r => r.json());

const runId = started.run_id;

// 2. Poll
let status;
while (true) {
  status = await fetch(`${API}/v1/scan/${runId}`, { headers: H }).then(r => r.json());
  if (status.status === "completed") break;
  await new Promise(r => setTimeout(r, 10000));
}

console.log(`Found ${status.summary.total} findings`);
for (const f of status.findings) {
  console.log(`  [${f.severity}] ${f.title}`);
}

// 3. Fix file
const fix = await fetch(`${API}/v1/scan/${runId}/fix`, { headers: H }).then(r => r.text());
require("fs").writeFileSync("SECURITY-FIX.md", fix);

# List all targets
curl https://securityscanner.dev/v1/targets \
  -H "Authorization: Bearer sk-sec-YOUR_KEY"

# Add a new target
curl -X POST https://securityscanner.dev/v1/targets \
  -H "Authorization: Bearer sk-sec-YOUR_KEY" \
  -H "Content-Type: application/json" \
  -d '{"host": "https://staging.myapp.com", "label": "staging"}' 

import httpx
h = {"Authorization": "Bearer sk-sec-YOUR_KEY"}

# List
targets = httpx.get("https://securityscanner.dev/v1/targets", headers=h).json()

# Add
httpx.post("https://securityscanner.dev/v1/targets", headers=h,
           json={"host": "https://staging.myapp.com", "label": "staging"})

const h = { "Authorization": "Bearer sk-sec-YOUR_KEY" };

// List
const targets = await fetch("https://securityscanner.dev/v1/targets", { headers: h }).then(r => r.json());

// Add
await fetch("https://securityscanner.dev/v1/targets", {
  method: "POST",
  headers: { ...h, "Content-Type": "application/json" },
  body: JSON.stringify({ host: "https://staging.myapp.com", label: "staging" }),
});