API Reference

Complete REST API for BrainPredict Cyber. Threat scoring, SOC queries, incident management, and compliance reporting.

Endpoints

POST/api/v1/threats/score

Score a security event against all 8 AI models. Returns threat_score 0–100, severity, MITRE ATT&CK technique, and recommended action.

POST/api/v1/threats/batch

Batch score up to 500 events. Returns ranked list by threat_score descending.

GET/api/v1/incidents

List all active incidents with severity, status, assigned analyst, and AI confidence.

POST/api/v1/incidents

Create a new incident from a scored threat event.

PATCH/api/v1/incidents/{id}

Update incident status: OPEN | INVESTIGATING | CONTAINED | CLOSED.

GET/api/v1/soc/queue

Current SOC AutoPilot triage queue — alerts pending analyst review.

POST/api/v1/soc/resolve

Mark a triage item as resolved with disposition: true_positive | false_positive | benign.

GET/api/v1/vulnerabilities

Active CVE exposure with exploitability prediction from ZeroDay Predictor.

GET/api/v1/compliance/{framework}

Compliance posture for NIS2, ISO27001, SOC2, GDPR, or DORA. Returns score and gap list.

GET/api/v1/models/health

Health and accuracy of all 8 AI models. Drift detection and last-retrained timestamp.