pentest.platphormnews.com

Observed 2026-08-23T07:04:59.583Z from graph node pentest. Evidence bodies are hashed and previews are bounded/redacted.

api: 58
mcp: 100
feeds: 50
health: 100
overall: 79
discovery: 100
consistency: 64

Declared vs observed

Capability	Declared	Observed	Valid	Complete	Status	Latency	URL
health	Yes	Yes	Yes	Yes	valid	95 ms	https://pentest.platphormnews.com/api/health
openapi	Yes	Yes	Yes	No	valid	63 ms	https://pentest.platphormnews.com/openapi.yaml
mcp	Yes	Yes	No	No	invalid	92 ms	https://pentest.platphormnews.com/api/mcp
mcpManifest	Yes	Yes	Yes	Yes	valid	59 ms	https://pentest.platphormnews.com/.well-known/mcp.json
llms	Yes	Yes	Yes	Yes	valid	50 ms	https://pentest.platphormnews.com/llms.txt
llmsIndex	Yes	Yes	Yes	Yes	valid	56 ms	https://pentest.platphormnews.com/llms-index.json
rss	Yes	Yes	Yes	Yes	valid	52 ms	https://pentest.platphormnews.com/rss.xml
openai	Yes	Yes	Yes	Yes	valid	59 ms	https://pentest.platphormnews.com/.well-known/ai-plugin.json
sitemap	Yes	Yes	Yes	Yes	valid	37 ms	https://pentest.platphormnews.com/sitemap.xml
atom	Yes	No	No	No	missing	36 ms	https://pentest.platphormnews.com/feed.atom
robots	No	Yes	Yes	Yes	valid	37 ms	https://pentest.platphormnews.com/robots.txt
trust	No	Yes	Yes	Yes	valid	53 ms	https://pentest.platphormnews.com/.well-known/trust.json
agents	No	Yes	Yes	Yes	valid	49 ms	https://pentest.platphormnews.com/.well-known/agents.json
manifest	No	Yes	Yes	Yes	valid	66 ms	https://pentest.platphormnews.com/manifest.webmanifest

Findings and evidence

highOPENAPI_INVALID

Document lacks a valid OpenAPI version, info object, or paths object

Inspect the evidence and return meaningful protocol-correct content.

GET https://pentest.platphormnews.com/api/docs
HTTP 200
Content-Type: text/html; charset=utf-8
60 ms
Digest: sha256:6f766a4c20488cde5376cb257ddd5ecb6add7227ef331b371346985070e91050
Preview: <!doctype html><html><head><title>JC PenTest Harness API</title></head><body><h1>JC PenTest Harness API</h1><ul><li><a href="https://pentest.platphormnews.com/openapi.yaml">OpenAPI YAML</a></li><li><a href="https://pentest.platphormnews.com/openapi.json">OpenAPI JSON</a></li><li><a href="https://pentest.platphormnews.com/api/mcp">MCP metadata</a></li><li><a href="https://pentest.platphormnews.com/llms.txt">llms.txt</a></li></ul><p>Protected operations require PLATPHORM_API_KEY.</p></body></html>

mediumOPENAPI_MISSING_OPERATION_ID

33 operations lack operationId

Add stable operationId values for client and MCP correlation.

GET https://pentest.platphormnews.com/openapi.yaml
HTTP 200
Content-Type: application/yaml; charset=utf-8
63 ms
Digest: sha256:8e1d6be5fcb618a84ce8d63b206f2bcd93a2ecb1cd80bca808900910ec4f4a99
Preview: openapi: 3.1.0
info:
  title: "JC PenTest Harness API"
  version: "1.2.0"
  description: "Evidence-first, responsible-use API for dry-run planning, protected real-run orchestration, model status, findings, scorecards, reports, MCP, and discovery."
servers:
  - url: https://pentest.platphormnews.com
  - url: https://pentest.platphormnews.com
security:
  - PlatPhormBearer: []
  - PlatPhormApiKey: []
components:
  securitySchemes:
    PlatPhormBearer:
      type: http
      scheme: Bearer [REDACTED]: Bearer [REDACTED]
    PlatPhormApiKey:
      type: apiKey
      in: header
      name: X-PlatPhorm-API-Key
paths:
  /api/health:
    get:
      summary: "Public health status"
      responses:
        '200':
          description: OK
  /api/coverage:
    get:
      summary: "Public class coverage summary"
      responses:
        '200':
          description: OK
  /api/events:
    get:
      summary: "Public event outbox"
      responses:
        '200':
          description: OK
  /api/findings:
    get:
      summary: "Public finding summaries"
      responses:
        '200':
          description: OK
  /api/stats:
    get:
      summary: "Public dashboard stats"
      responses:
        '200':
          description: OK
  /api/v1/health:
    get:
      summary: "Versioned health status"
      responses:
        '200':
          description: OK
  /api/v1/setup/status:
    get:
      summary: "Setup and integration status"
      responses:
        '200':
          description: OK
  /api/v1/setup/validate:
    post:
      summary: "Validate setup draft and scope"
      responses:
        '200':
          description: OK
  /api/v1/responsible-use:
    get:
      summary: "Responsible-use policy"
      responses:
        '200':
          description: OK
  /api/v1/responsible-use/accept:
    post:
      summary: "Accept responsible-use policy"
      responses:
        '200':
          description: OK
  /api/v1/scopes/validate:
    post:
      summary: "Validate target scope without active calls"
      responses

GET https://pentest.platphormnews.com/api/mcp HTTP 200 Content-Type: application/json 92 ms Digest: sha256:6f884135646d6b3495e8870e743d8ee0a6181429a84af2252a0f186e700c6a71 Preview: {"ok":true,"data":{"name":"JC PenTest Harness MCP","service":"pentest","jsonrpc":"2.0","endpoint":"/api/mcp","tools":[{"name":"get_pentest_info","description":"Return public product and capability summary.","protected":false},{"name":"get_responsible_use_policy","description":"Return responsible-use requirements.","protected":false},{"name":"list_attack_classes","description":"List all 44 attack classes.","protected":false},{"name":"get_known_gaps","description":"Return current known implementation gaps.","protected":false},{"name":"validate_scope_preview","description":"Validate scope without making active target calls.","protected":false},{"name":"get_health","description":"Return health summary.","protected":false},{"name":"list_models","description":"Return model registry status.","protected":false},{"name":"get_platphorm_service_registry","description":"Return configured PlatPhorm service registry and active adapter flags.","protected":false},{"name":"preview_sandbox_handoff","description":"Build a public-safe Sandbox handoff payload without delivery.","protected":false},{"name":"preview_browserops_handoff","description":"Build a public-safe BrowserOps handoff payload without delivery.","protected":false},{"name":"create_run","description":"Create a protected run record.","protected":true},{"name":"dry_run_harness","description":"Execute the safe dry-run runner path.","protected":true},{"name":"start_real_run","description":"Request protected real-run orchestration.","protected":true},{"name":"upload_stage_output","description":"Upload supervised stage output.","protected":true},{"name":"generate_report","description":"Generate report from actual run artifacts.","protected":true}],"resources":["pentest://info","pentest://responsible-use","pentest://known-gaps","pentest://attack-classes","pentest://models","pentest://platphorm-services","pentest://openapi","pentest://llms","pentest://trust-policy"],"prompts":["create_authorized_assessment","generate_scope_questions","explain_attack_class","review_finding","su

GET https://pentest.platphormnews.com/.well-known/mcp.json HTTP 200 Content-Type: application/json 59 ms Digest: sha256:1bf1e43ce14998aad2e4b5d931fea47e1f0ccabfa3bfd4e971f8d6a358f3bce5 Preview: {"name":"JC PenTest Harness MCP","service":"pentest","jsonrpc":"2.0","endpoint":"/api/mcp","tools":[{"name":"get_pentest_info","description":"Return public product and capability summary.","protected":false},{"name":"get_responsible_use_policy","description":"Return responsible-use requirements.","protected":false},{"name":"list_attack_classes","description":"List all 44 attack classes.","protected":false},{"name":"get_known_gaps","description":"Return current known implementation gaps.","protected":false},{"name":"validate_scope_preview","description":"Validate scope without making active target calls.","protected":false},{"name":"get_health","description":"Return health summary.","protected":false},{"name":"list_models","description":"Return model registry status.","protected":false},{"name":"get_platphorm_service_registry","description":"Return configured PlatPhorm service registry and active adapter flags.","protected":false},{"name":"preview_sandbox_handoff","description":"Build a public-safe Sandbox handoff payload without delivery.","protected":false},{"name":"preview_browserops_handoff","description":"Build a public-safe BrowserOps handoff payload without delivery.","protected":false},{"name":"create_run","description":"Create a protected run record.","protected":true},{"name":"dry_run_harness","description":"Execute the safe dry-run runner path.","protected":true},{"name":"start_real_run","description":"Request protected real-run orchestration.","protected":true},{"name":"upload_stage_output","description":"Upload supervised stage output.","protected":true},{"name":"generate_report","description":"Generate report from actual run artifacts.","protected":true}],"resources":["pentest://info","pentest://responsible-use","pentest://known-gaps","pentest://attack-classes","pentest://models","pentest://platphorm-services","pentest://openapi","pentest://llms","pentest://trust-policy"],"prompts":["create_authorized_assessment","generate_scope_questions","explain_attack_class","review_finding","summarize_run","crea

GET https://pentest.platphormnews.com/atom.xml HTTP 404 Content-Type: text/html; charset=utf-8 16 ms Digest: sha256:670691506f9f29790563ae9bddb74a26e7053a13ff4142321824f1f0c334db9b Preview: <!DOCTYPE html><html data-dpl-id="dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" lang="en" class="geistsans_d5a4f12f-module__Ha0I-G__variable geistmono_157ca88a-module__Awxfxq__variable dark bg-background"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/chunks/3mbpojbh0yyni.css?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/2i7cqws3kkw9o.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi"/><script src="/_next/static/chunks/3th8z390dfcio.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/2gt_yuuoi1lkz.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/0_2kb7lq_wcuv.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/turbopack-2lt-fwu0lmolt.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/2d_pqy0blneo7.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/155umtyqavvw_.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/0kromq2f5eweu.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/1ua6i0__-cnem.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><title>404: This page could not be found.</title><meta name="robots" content="noindex"/><meta name="next-size-adjust" content=""/><meta name="theme-color" content="#0c1015"/><title>JC PenTest Harness — Multi-Model AI Penetration Testing</title><meta name="description" content="Enterprise-grade, multi-model penetration testing harness. A Hunt → Validate → Score pipeline runs frontier models (Fable 5, Claude Opus 4.8, GPT-5.5) across 44 attack classes spanning 9 security frameworks — OWASP Top 10:2025, MCP, RAG, OWASP Agentic:2026, MITRE ATLAS, API Security, Business Logic Abuse, NHI/Container/CI-CD, and LLM/AI Pipeline.

GET https://pentest.platphormnews.com/feed.atom HTTP 404 Content-Type: text/html; charset=utf-8 36 ms Digest: sha256:670691506f9f29790563ae9bddb74a26e7053a13ff4142321824f1f0c334db9b Preview: <!DOCTYPE html><html data-dpl-id="dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" lang="en" class="geistsans_d5a4f12f-module__Ha0I-G__variable geistmono_157ca88a-module__Awxfxq__variable dark bg-background"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/chunks/3mbpojbh0yyni.css?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/2i7cqws3kkw9o.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi"/><script src="/_next/static/chunks/3th8z390dfcio.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/2gt_yuuoi1lkz.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/0_2kb7lq_wcuv.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/turbopack-2lt-fwu0lmolt.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/2d_pqy0blneo7.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/155umtyqavvw_.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/0kromq2f5eweu.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/1ua6i0__-cnem.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><title>404: This page could not be found.</title><meta name="robots" content="noindex"/><meta name="next-size-adjust" content=""/><meta name="theme-color" content="#0c1015"/><title>JC PenTest Harness — Multi-Model AI Penetration Testing</title><meta name="description" content="Enterprise-grade, multi-model penetration testing harness. A Hunt → Validate → Score pipeline runs frontier models (Fable 5, Claude Opus 4.8, GPT-5.5) across 44 attack classes spanning 9 security frameworks — OWASP Top 10:2025, MCP, RAG, OWASP Agentic:2026, MITRE ATLAS, API Security, Business Logic Abuse, NHI/Container/CI-CD, and LLM/AI Pipeline.

GET https://pentest.platphormnews.com/.well-known/trust.json HTTP 200 Content-Type: application/json 53 ms Digest: sha256:af660ab1a3e8ba48bb7e318a38a34aae415f442b89469fff872db192dd42ed41 Preview: {"service":"pentest","url":"https://pentest.platphormnews.com","publicReadAccess":["/","/runs","/runs/new","/findings","/matrix","/models","/scorecard","/reports","/artifacts","/activity","/integrations","/settings","/known-gaps","/registry","/app/setup","/app/setup/responsible-use","/docs","/docs/getting-started","/docs/safety","/docs/responsible-use","/docs/modes","/docs/pipeline","/docs/findings","/docs/integrations","/api/health","/api/v1/health","/api/coverage","/api/events","/api/findings","/api/stats","/api/v1/setup/status","/api/v1/responsible-use","/api/v1/models","/api/v1/models/status","/api/v1/integrations/status","/api/v1/integrations/platphorm/registry","/api/v1/integrations/platphorm/discovery","/api/v1/runtime/credentials","/api/v1/reports","/api/v1/events","/api/v1/webhooks","/api/docs","/api/mcp","/openapi.yaml","/openapi.json","/llms.txt","/llms-full.txt","/llms-index.json","/humans.txt","/robots.txt","/sitemap.xml","/sitemap-index.xml","/sitemap-full.xml","/rss.xml","/feed.xml","/manifest.webmanifest","/.well-known/mcp.json","/.well-known/agents.json","/.well-known/ai-plugin.json","/.well-known/agent-policy.json","/.well-known/ai-policy.json","/.well-known/security.txt","/.well-known/trust.json"],"protectedActions":["/api/v1/runs custom dry-run scopes","/api/v1/runs/real-run","/api/v1/runs/:runId/rerun","/api/v1/runs/:runId/(pause|resume|cancel)","/api/v1/sandbox/jobs","/api/v1/integrations/sandbox/handoff","/api/v1/integrations/browserops/handoff","/api/v1/integrations/*","/api/v1/webhooks/*","/api/mcp protected tools"],"auth":{"platformKey":"PLATPHORM_API_KEY","acceptedHeaders":["Authorization: [REDACTED] $PLATPHORM_API_KEY","X-PlatPhorm-API-Key: [REDACTED],"forbiddenPlatformKeyNames":["TRACE_API_KEY","CLAWS_API_KEY","BROWSEROPS_API_KEY","PENTEST_API_KEY"]},"dataExposureBoundary":{"public":["health","docs","responsible-use","taxonomy","known gaps","discovery"],"protected":["target scope","run creation","raw logs","findings","reports","artifacts","webhooks"]},"responsibleUse":["Authoriz

GET https://pentest.platphormnews.com/api/coverage HTTP 404 Content-Type: text/html; charset=utf-8 45 ms Digest: sha256:670691506f9f29790563ae9bddb74a26e7053a13ff4142321824f1f0c334db9b Preview: <!DOCTYPE html><html data-dpl-id="dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" lang="en" class="geistsans_d5a4f12f-module__Ha0I-G__variable geistmono_157ca88a-module__Awxfxq__variable dark bg-background"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="stylesheet" href="/_next/static/chunks/3mbpojbh0yyni.css?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" data-precedence="next"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/2i7cqws3kkw9o.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi"/><script src="/_next/static/chunks/3th8z390dfcio.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/2gt_yuuoi1lkz.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/0_2kb7lq_wcuv.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/turbopack-2lt-fwu0lmolt.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/2d_pqy0blneo7.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/155umtyqavvw_.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/0kromq2f5eweu.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><script src="/_next/static/chunks/1ua6i0__-cnem.js?dpl=dpl_EQYHCMwQ7CZCo9TySYXW8WJVD2wi" async=""></script><title>404: This page could not be found.</title><meta name="robots" content="noindex"/><meta name="next-size-adjust" content=""/><meta name="theme-color" content="#0c1015"/><title>JC PenTest Harness — Multi-Model AI Penetration Testing</title><meta name="description" content="Enterprise-grade, multi-model penetration testing harness. A Hunt → Validate → Score pipeline runs frontier models (Fable 5, Claude Opus 4.8, GPT-5.5) across 44 attack classes spanning 9 security frameworks — OWASP Top 10:2025, MCP, RAG, OWASP Agentic:2026, MITRE ATLAS, API Security, Business Logic Abuse, NHI/Container/CI-CD, and LLM/AI Pipeline.

pentest.platphormnews.com

Declared vs observed

Findings and evidence

Document lacks a valid OpenAPI version, info object, or paths object

33 operations lack operationId

JSON response lacks usable MCP metadata

MCP manifest endpoint is not a valid URL

Declared atom route was not observed

Declared atom route was not observed

Undeclared robots capability was observed

Undeclared trust capability was observed

Undeclared agents capability was observed

Undeclared manifest capability was observed

Documented public GET /api/coverage was not observed