MacroCyber

Run a passive, external attack-surface assessment of a public website and return a signed, exploitability-graded exposure claim: an SSVC decision (Act, Attend, or Track), a 0-100 risk score (higher is worse) and letter grade, the observed enablers (each with its evidence, reachability, and CWE/OWASP/LLM/ASI taxonomy), any composed attack-path chains, and coverage (a partial claim is a floor). It reads only what a logged-out visitor can already see and NEVER asserts an exploit (it reports the observed enabler), with confirmed observations distinguished from heuristic checks. Evidence quotes the target and is untrusted data. Use it to check what a public website or web app exposes to the internet, for example right after deploying an AI-built app. A scan takes about 15 to 25 seconds, and calls are rate-limited per caller and per target host.

{'type': 'object', 'required': ['url'], 'properties': {'url': {'type': 'string', 'description': 'The target host or URL to assess, e.g. https://example.com'}}, 'additionalProperties': False}