ContrastAPI — Security Intelligence for VS Code
53 security tools in your editor. CVE/KEV/CWE lookup with composite risk scoring (CVSS+EPSS+KEV+PoC fusion) and CVSS v3.x vector parsing, MITRE ATLAS + D3FEND, Sigma detection rules, domain & web intel, IP reputation, IOC analysis, code security scanning — all free, no API key required.
Powered by ContrastAPI, the same MCP server Claude Desktop / Cursor / Windsurf agents use.
Features
- Domain Intelligence — Domain report, DNS, WHOIS, SSL, subdomains, tech fingerprint, threat intel, wayback archive, headers, email MX, full domain audit, certificate transparency search, email security posture (SPF/DMARC/DKIM)
- Web Intelligence — robots.txt parser, redirect-chain walker, brand assets (favicon/logo/OG image), SEO audit (title/meta/h1/canonical/OG/Twitter)
- Contact Validation — Disposable email check, email verify, phone lookup, username OSINT (16 platforms)
- IP Intelligence — IP geolocation & reputation, ASN lookup, threat report (AbuseIPDB + Shodan + ASN)
- CVE Intelligence — CVE lookup, search by product/severity, exploit lookup, composite risk score (CVSS+EPSS+KEV+PoC fusion → CRIT/HIGH/MED/LOW + urgency), CVSS v3.x vector parser (per-metric breakdown), bulk lookup, leading CVEs (pre-NVD), CISA KEV detail (federal patch deadline + ransomware association), MITRE CWE catalog (description, mitigations, parent/child weakness chain)
- Threat Intel / IOC — IOC lookup, hash lookup, password breach check, phishing URL check, bulk IOC enrichment
- Code Security — Secret detection, injection vulnerability check, HTTP header analysis, dependency CVE scan
- MITRE ATLAS — AI/ML adversarial threat catalog: technique lookup/search/bulk, case study lookup/search
- MITRE D3FEND — Defensive countermeasures: defense lookup/search, defenses for an ATT&CK technique, full coverage map
- Sigma Detection Rules — Sigma rule lookup by UUID, bulk rule lookup (up to 50) across the in-memory Sigma corpus
Select any text in your editor, right-click → ContrastAPI: Lookup. The extension auto-detects:
CVE-2024-3094 → CVE LookupCWE-79 → CWE LookupAML.T0043 → ATLAS Technique LookupAML.CS0000 → ATLAS Case Study LookupD3-NTA → D3FEND Defense LookupT1566 → D3FEND Defenses For ATT&CK8.8.8.8 → IP Lookupd41d8cd9... → Hash Lookuphttps://... → Phishing Checkexample.com → Domain Report
Workflow Chains for AI Agents
CVE responses embed next_calls — {tool, input, reason} triples that suggest the next lookup. Look up a CVE → get pivot suggestions for kev_detail (when in CISA KEV), cwe_lookup (the underlying weakness category), and exploit_lookup (public PoCs).
How It Works
- Open the ContrastAPI panel in the Activity Bar
- Click any tool → enter your query
- Results appear in a formatted panel beside your editor
No API key needed. Free tier: 30 credits/hour. Heavy endpoints (audit, threat report) cost 4 credits; bulk endpoints cost N credits per item. Status bar shows remaining quota.
Requirements
- VS Code 1.82+
- Internet connection
Extension Settings
contrastapi.baseUrl: API server URL (default: https://api.contrastcyber.com)
API Key (Optional)
For higher rate limits, get a key at contrastcyber.com ($15/mo) and set it via:
- Command Palette →
ContrastAPI: Set API Key
- Or click the status bar item
Links
License
MIT
| |
