contrastapi

[](LICENSE) [](https://python.org) [](https://github.com/UPinar/contrastapi/actions) [](https://rapidapi.com/UPinar/api/contrastapi)

Security intelligence API for AI agents and developers. 30+ endpoints: CVE lookup with EPSS/KEV enrichment, domain reconnaissance, SSL analysis, IP reputation (AbuseIPDB, Shodan), IOC/malware lookup, exploit search, technology fingerprinting, and code security verification. Free, no signup required.

Live: api.contrastcyber.com | Scanner: contrastcyber.com

• One call, full picture — domain report returns DNS + WHOIS + SSL + subdomains + WAF + IP reputation in a single response
• CVE intelligence — 340K+ CVEs enriched with EPSS exploit probability and CISA KEV status
• IP reputation — AbuseIPDB, Shodan enrichment with 24-hour cache
• Tech fingerprinting — detect CMS, frameworks, CDN, analytics from headers + HTML
• AI-native — LLM-optimized summaries, structured JSON, OpenAPI spec
• Free forever — 100 req/hr, no API key, no signup

# Domain intelligence
curl "https://api.contrastcyber.com/v1/domain/example.com"

# CVE lookup with EPSS + KEV
curl "https://api.contrastcyber.com/v1/cve/CVE-2024-3094"

# Search CVEs
curl "https://api.contrastcyber.com/v1/cves?product=apache&severity=critical"

# SSL analysis
curl "https://api.contrastcyber.com/v1/ssl/example.com"

# IOC lookup (IP, domain, URL, or hash)
curl "https://api.contrastcyber.com/v1/ioc/8.8.8.8"

# Public exploit search
curl "https://api.contrastcyber.com/v1/exploit/CVE-2024-3400"

# Check code for secrets
curl -X POST "https://api.contrastcyber.com/v1/chec