Skip to main content
POST
Vulnerability Review

Authorizations

X-AX-KEY
string
header
required

Query Parameters

org
string
required

Organization ID

Body

application/json
code
string

A code snippet representing the vulnerable logic or affected lines.

Example:

"try {\n const user = db.getUserById(req.query.id);\n res.send(user);\n} catch (err) {\n res.status(500).send(\"Error\");\n}\n"

cwe_id
string

CWE identifier, if applicable.

Example:

"CWE-79"

cwe_name
string

Optional name or title of the CWE.

Example:

"Cross-Site Scripting"

line
string

Line number(s) where the issue appears.

Example:

"105"

file
string

Name or path of the file containing the snippet.

Example:

"userController.js"

Response

Successful classification result from the AI model.

class
enum<string>

The AI-determined classification of the vulnerability.

Available options:
TRUE_POSITIVE,
FALSE_POSITIVE,
UNVERIFIED
confidence
number<float>

Confidence percentage (0–100) of the classification.