Create tables if they don't exist.

All confirmed findings across all runs, newest first.

List all available email templates.

List all available landing page templates.

List all available modules and their capabilities. Returns: ModulesResponse with module information

List all schedules.

List active sessions.

List all supported LLM providers and models.

Generate (finding, prereq, plan) triples for all qualifying findings.

Roll back a previously applied remediation. The rollback script was generated by the AI and stored at apply() time.

Analyze HTTP headers for security issues.

Discover subdomains for target domain.

Detect technologies used by target.

Query VirusTotal for target.

Perform WHOIS lookup on target.

Harvest emails from target.

Query Shodan for target.

Scan target for open ports.

Crawl target website.

Analyze SSL/TLS configuration.

Scan target for XSS vulnerabilities.

Run Nuclei scan on target.

Bruteforce directories on target.

Scan target for SQL injection vulnerabilities.

Security-suite compatible run() interface.

Run an auxiliary module.

Run an exploit module with payload.

Run a scheduled scan immediately. Args: schedule_id: Schedule ID to run Returns: ScanJob if started, None if

Save HTML report to file. Args: scan_results: List of scan results output_path: Output file path config:

Save job history to disk. Args: jobs: Dictionary of jobs max_jobs: Maximum number of jobs to retain Returns:

Save JSON report to file.

Save schedules to disk. Args: schedules: Dictionary of schedules Returns: True if successful

Run nmap against a single host and return discovered services. Returns empty list if host is down or nmap fails.

Scan multiple IPs sequentially (VT rate limits require this). Uses self.delay between calls.

Search for exploits for a specific service and version.

Stream chat from GPT.

Test webhook endpoint. Returns: True if reachable

Test a single endpoint for security issues. Args: base_url: API base URL endpoint: Endpoint to test Returns:

Convert to CEF (Common Event Format).

Convert campaign to dictionary.

Convert to LEEF (Log Event Extended Format).

Insert or update a finding. Returns the finding row id.

Insert or update a run record.

Lazily import scanner classes when accessed.

Get cache entry hash.

Initialize webhook exporter. Args: url: Webhook URL method: HTTP method headers: Custom headers

Initialize Syslog exporter. Args: host: Syslog server hostname/IP port: Syslog server port protocol: Tran

Initialize Elasticsearch exporter. Args: hosts: List of Elasticsearch hosts (e.g., ["https://es:9200"]) index_pattern

Initialize Splunk exporter. Args: hec_url: Splunk HEC URL (e.g., https://splunk:8088) hec_token: HEC authentication t

Initialize storage. Args: storage_dir: Directory for storage files

Initialize scheduler. Args: storage_path: Path to store schedule data

Initialize Security Copilot. Args: provider: LLM provider - "anthropic", "openai", "ollama", "ollama/<model>",