# bluScan

> bluScan (bluscan.in) by PLUG AI WORLD is a unified cybersecurity utility tool, threat intelligence workspace, and third-party risk assessment platform. It delivers real-time validation of domains, IP addresses, digital infrastructure, and vendors using multivariate threat engines and generative AI analysis.

bluScan combines threat intelligence feeds.

## Core Features & Scanners

- [Domain & IP Scanner](https://bluscan.in/): Primary intelligence scanner aggregating VirusTotal detection ratios, AlienVault OTX pulses, Whois/RDAP registration data, and Gemini-powered plain-English risk assessments.
- [Threat Analysis](https://bluscan.in/threat-analysis): Deep inspection of domain attack surfaces, threat indicators, malicious patterns, and tactical indicators of compromise (IOCs).
- [Threat Intelligence Hub](https://bluscan.in/threatintelligence): Live threat telemetry aggregating global pulses, active campaigns, adversary tags, and malware fingerprints.
- [Threat Management](https://bluscan.in/threat-management): Threat lifecycle management, risk prioritization, mitigation tracking, and incident remediation status.
- [Reputation Scanner](https://bluscan.in/reputation): Multi-engine domain and IP reputation scoring across major DNSBL/RBL registries, spam feeds, and historical trust indexes.
- [Subdomain Enumeration](https://bluscan.in/subdomains): Fast discovery and classification of public subdomains, DNS records, and shadow IT infrastructure.
- [SSL/TLS Certificate Analysis](https://bluscan.in/ssl-analysis): End-to-end TLS handshake inspection, certificate chain verification, cipher suite evaluation, expiry warnings, and AI-driven cryptographic audits.
- [Web Security Audit](https://bluscan.in/web-audit): Automated HTTP security headers auditing (CSP, HSTS, X-Frame-Options, Permissions-Policy, Referrer-Policy) and cookie configuration checks.
- [Web App Security](https://bluscan.in/web-app-security): Application layer exposure analysis, technology fingerprinting, and injection defense evaluation.
- [Vulnerability & CVE Explorer](https://bluscan.in/vulnerabilities): Real-time National Vulnerability Database (NVD) CVE lookups, CVSS severity metrics, and exploit intelligence.
- [IoT & Exposed Device Intelligence](https://bluscan.in/iot-devices): Shodan-powered reconnaissance for exposed infrastructure, open ports, industrial control systems, and default credential surfaces.
- [Zero Trust Security](https://bluscan.in/zero-trust-security): Zero-trust posture assessment, continuous verification checks, and network microsegmentation evaluation.
- [Global Compliance](https://bluscan.in/global-compliance): Regulatory alignment mapping for GDPR, HIPAA, ISO/IEC 27001, SOC 2, and NIST Cybersecurity Framework.
- [Blocklist Verifier](https://bluscan.in/blocklist): Real-time verification of domains and IPs against global malware, phishing, and botnet denylists.
- [Continuous Monitoring](https://bluscan.in/monitoring): Proactive alerts for infrastructure drift, certificate expirations, DNS changes, and newly emerged threats.
- [Security Workspace & Notebooks](https://bluscan.in/workspace): Collaborative investigation environment with scratchpads, markdown notes, IOC tagging, and structured scan archives.
- [Privacy Policy Auditor](https://bluscan.in/privacy-policy): AI-powered natural language audit of third-party privacy policies for data collection, third-party sharing, and regulatory compliance.

## AI Capabilities & Genkit Flows

bluScan uses Google Genkit with Gemini models for contextual cybersecurity synthesis:

- [Domain Risk Synthesis](https://bluscan.in/): `analyzeDomainRisk` synthesizes multivariate engine outputs into actionable risk levels (Low, Medium, High, Critical) with key risk factors.
- [Threat Intelligence Summaries](https://bluscan.in/threatintelligence): `summarizeThreatIntelligence` aggregates OTX threat pulses into concise, executive-ready threat briefs.
- [Cryptographic Evaluation](https://bluscan.in/ssl-analysis): `analyzeSslCertificate` examines cipher suites, weak keys, and protocol downgrade vulnerabilities.
- [Web Hygiene Scoring](https://bluscan.in/web-audit): `analyzeWebAudit` produces prioritized remediation checklists for missing HTTP security headers.
- [Subdomain Classification](https://bluscan.in/subdomains): `classifySubdomains` categorizes discovered hostnames by function (e.g., authentication, API, staging, internal, CDN).
- [Privacy Policy Extraction](https://bluscan.in/privacy-policy): `analyzePrivacyPolicy` extracts retention limits, user rights, data broker sharing, and legal red flags.

## API Reference

bluScan provides REST endpoints for automated integrations and security pipelines:

- `GET /api/subdomains?domain={target}`: Returns discovered active subdomains and resolution data.
- `GET /api/ssl-check?domain={target}`: Returns TLS certificate validity, issuer, subject, expiration dates, and cipher suites.
- `GET /api/reputation?domain={target}`: Queries multiple DNSBL/RBL registries for blacklisting status.
- `GET /api/nvd-cve?cveId={id}&keyword={term}`: Queries NVD database for vulnerability details, CVSS scores, and references.
- `GET /api/cve-details?cve={id}`: Provides enriched vulnerability impact and exploit metrics.
- `GET /api/web-audit?url={target}`: Analyzes HTTP response headers, security headers, and cookie attributes.
- `POST /api/privacy-policy`: Accepts a URL or raw text to parse and extract privacy policy terms for analysis.
- `GET /api/blocklist?domain={target}`: Checks domain presence across curated security blocklists.
- `GET /api/workspace`: Synchronizes investigations, incident notes, and scan history.

## Optional Resources

- [Full LLM Context (llms-full.txt)](https://bluscan.in/llms-full.txt): Complete, concatenated, in-depth text documentation and schemas for LLM reasoning.
- [Robots Policy](https://bluscan.in/robots.txt): Crawler rules and robots directives.
- [Security Policy](https://bluscan.in/.well-known/security.txt): Responsible disclosure and security contact information.
- [Developer & Publisher](https://plugai.world): PLUG AI WORLD official platform and development ecosystem.