# HERGERT SYNTHORA Threat Exposure Scanner

> HERGERT SYNTHORA Threat Exposure Scanner is a paid API for AI agents from api.hergertsynthora.com, paid per call via x402, $0.03/call, status unknown (last checked 2026-10-28).

Analyzes a domain's attack surface by correlating observed CVEs against the CISA KEV catalogue to produce an exploitability verdict

## Facts

- Endpoint: POST https://api.hergertsynthora.com/v1/threat-exposure?utm_source=zero.xyz
- Price: $0.03/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-28
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/hergert-synthora-threat-exposure-scanner-9d42fb2b
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_HuctSIRh4ejLvc8942rVs

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability hergert-synthora-threat-exposure-scanner-9d42fb2b -d '<json body>'
```

Example prompt: Can you run a threat exposure scan on example.com and tell me if any of its observed CVEs are in the CISA Known Exploited Vulnerabilities catalogue?

## When to prefer this

Choose this endpoint when you need to quickly determine whether a domain's observed vulnerabilities include CVEs that are actively exploited in the wild per the CISA Known Exploited Vulnerabilities catalogue — particularly useful for rapid triage, vendor risk checks, or pre-deployment hardening where prioritizing real-world exploitability matters over raw CVE counts.

## Known failure modes

- Invalid or unresolvable domain name returns an error verdict
- Domain with no observable CVEs returns an empty result set
- CISA KEV catalogue sync lag may cause slightly outdated correlations
- Rate limiting or payment failure may block the call
- Non-public or internal domains may yield incomplete attack surface data

## How this service works

SYNTHORA threat-exposure: external attack-surface score for any domain/host — exposure breakdown with deterministic evidence (historic IPs, open surfaces). $0.03 USDC x402 Base.

## Output

A JSON object containing an 'ok' status flag, a 'niche' field confirming 'threat_exposure', a 'result' object with the attack surface exposure verdict including CVE correlations against the CISA KEV catalogue, and a 'receipt' object for payment confirmation.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "input": {
   "type": "string",
   "description": "SYNTHORA threat-exposure: external attack-surface score for any domain/host — exposure breakdown with deterministic evidence (historic IPs, open surfaces). $0.03 USDC x402 Base."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ok": true,
  "niche": "threat_exposure",
  "result": {},
  "receipt": {
   "alg": "ed25519"
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/hergert-synthora-threat-exposure-scanner-9d42fb2b/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.hergertsynthora.com](https://www.zero.xyz/host/api.hergertsynthora.com/llms.txt)