Skip to main content
A lead is a target of interest: a host, an endpoint, or a technology the recon found and the classifier scored. Leads are the unit Hackbot and the vulnerability pipeline work on.
  • GET /api/leads — paginated list. ?q= searches the asset value. JavaScript-asset rows stay out of this list.
  • GET /api/leads/top — the leads ranked by priority score. Start here when you triage.
  • GET /api/leads/{id} — one lead with its classification.

​
Create and update

  • POST /api/leads — create a lead. The server sets the owner.
  • PUT /api/leads/{id} — partial update.
  • DELETE /api/leads/{id} — delete a lead and its dependent rows.

​
Hand off to Hackbot

POST /api/leads/{id}/hackbot opens a Hackbot chat session scoped to the lead. See Hackbot.

​
Share

POST /api/leads/{id}/share mints a public share link. See Shares.