llms.txt
# Vigilbase
> Vigilbase is the cybersecurity operating system. The Vigilbase Platform connects the security tools an organization already pays for, keeps their logs and events auditable and queryable in one place, builds dashboards for each team, and has the Vigil agent investigate, make authorized fixes, and verify the result. Customers choose the agent's autonomy; human analysts handle exceptions. Vigilbase also sells Cloudflare Enterprise licences and operates the account directly as Managed Cloudflare.
## Vigilbase Platform: the cybersecurity operating system
- What it is: Vigilbase is the cybersecurity operating system. It connects the security tools you already pay for, keeps their logs and events auditable and queryable in one place, builds dashboards for each team, and has the Vigil agent investigate what matters.
- Connectors: Native connectors cover edge, identity, endpoint, network, cloud, and email security, including Cloudflare, Akamai, Fastly, Imperva, Microsoft 365 and Entra ID, Google Workspace, Okta, CrowdStrike Falcon, SentinelOne, Microsoft Defender XDR, Palo Alto Networks, Fortinet, Zscaler, AWS, Google Cloud, Proofpoint, and Mimecast. Wiz is coming soon.
- Boundaries: Log collection and analysis differ by provider, and a connection does not mean every response action is available. Where the platform cannot act directly, the investigation returns the steps for your team to complete.
- Authority: You choose the autonomy: keep actions off, propose them for approval, or allow low-risk, reversible actions to run. Agents work from evidence and remediate in scope. Humans set authority, approve changes when required, and handle exceptions. The record shows the investigation, actions taken, and verification results.
- Custom sources: Tools without a native connector can send Splunk HTTP Event Collector-compatible logs to a custom source. Those logs are stored alongside your other sources, but they are not analyzed automatically and carry no response actions.
- Retention: Default retention is set per dataset, typically 30 to 90 days. If you need a long-term archive or compliance retention, decide where that data lives before you consolidate.
- [Get started with the Vigilbase Platform](https://vigilbase.com/start): Choose the tools you already pay for and book a discovery call
## When to use Vigilbase
Use Vigilbase when an agent or developer needs to:
- Run a **non-intrusive HTTP security headers** grade against a URL without a browser or Turnstile challenge (`POST /api/v1/agent/tools/security-headers/execute`)
- Audit **public email authentication DNS** (SPF, DKIM, DMARC, MTA-STS, TLS-RPT) for a domain (`POST /api/v1/agent/tools/email-security/execute`)
- Discover executable tools and skills from a stable catalog (`GET /api/v1/agent/tools`, `/.well-known/agent-skills/index.json`)
- Embed a previously measured website-security **grade badge** (`GET /api/badge/{domain}`)
- Create a **developer API key** at https://one.vigilbase.com/developers for higher rate limits (free for any signed-up user)
Do **not** use the autonomous execute API for intrusive scanners (website-security, react2shell) or FortiBleed lookups. Those run in the browser with email verification, or with a signed-in CLI (`npx @vigilbase/cli login`). Prefer authenticated customer-tenant APIs at https://one.vigilbase.com for platform work.
## Vigilbase Developers
- [Vigilbase Developers](https://vigilbase.com/developers): Developer portal — quickstart, OpenAPI, scopes, API keys, rate limits, versioning
- [Create API keys](https://one.vigilbase.com/developers): Developer key management (user-scoped)
- [OpenAPI](https://vigilbase.com/openapi.json): Vigilbase public API specification (OpenAPI 3.1)
- [API catalog](https://vigilbase.com/.well-known/api-catalog): RFC 9727 linkset
- [Agent skills index](https://vigilbase.com/.well-known/agent-skills/index.json): Discoverable agent skills
## Canonical Site
- [Home](https://vigilbase.com/): Primary Vigilbase marketing site
- [Portuguese site](https://vigilbase.com/pt): Localized Portuguese experience
- [Arabic site](https://vigilbase.com/ar): Localized Arabic experience
- [Contact](https://vigilbase.com/contact): Talk to the Vigilbase team
- [Get started](https://vigilbase.com/start): Connect your security tools to the Vigilbase Platform and book a call
- [Blog](https://vigilbase.com/blog): Security guidance and product updates
- [Vigilbase Collective](https://vigilbase.com/collective): Partnership enquiries
- [What is a cybersecurity operating system](https://vigilbase.com/learn/what-is-a-cybersecurity-operating-system): The layer that runs across your security tools rather than another tool beside them
- [What is agentic cybersecurity](https://vigilbase.com/learn/what-is-agentic-cybersecurity): Agents identify issues, remediate in scope, and verify the close
## Key Public Pages
- [Vigilbase Platform](https://vigilbase.com/): The cybersecurity operating system: connected tools, one auditable record, team dashboards, and agentic investigation within the authority you set
- [Integrations](https://vigilbase.com/#integrations): Native connectors for edge, identity, endpoint, network, cloud, and email security tools, plus custom log sources; available data and actions vary by connector
- [Cloudflare Enterprise services](https://vigilbase.com/cloudflare): Cloudflare Enterprise licence and account operation from Vigilbase
- [Managed Cloudflare services](https://vigilbase.com/cloudflare/managed-services): Ongoing Cloudflare operation, changes, and verification
- [Security comparisons](https://vigilbase.com/comparisons): Vendor and product comparisons
- [Website security scanner](https://vigilbase.com/tools/website-security): Free website security scan
- [Cloudflare Checkup](https://vigilbase.com/tools/cloudflare-checkup): Free Cloudflare configuration checkup in the browser with a read-only API token
- [Email security checker](https://vigilbase.com/tools/email-security): Free email security check
- [Security headers checker](https://vigilbase.com/tools/security-headers): Free security headers scan
- [React2Shell checker](https://vigilbase.com/tools/react2shell): Free React2Shell exposure check
- [FortiBleed checker](https://vigilbase.com/tools/fortibleed-check): Free FortiBleed exposure check
## Agent Tool APIs
- [Agent tool catalog](https://vigilbase.com/api/v1/agent/tools): List executable public agent tools (v1)
- [Security headers execute API](https://vigilbase.com/api/v1/agent/tools/security-headers/execute): POST JSON `{"target":"https://example.com"}`
- [Email security execute API](https://vigilbase.com/api/v1/agent/tools/email-security/execute): POST JSON `{"target":"example.com"}`
- [Create developer API key](https://one.vigilbase.com/developers): User-scoped keys for vigilbase.com /api/v1/agent/*
- [Agent skills index](https://vigilbase.com/.well-known/agent-skills/index.json): Discoverable agent skills
- [OpenAPI](https://vigilbase.com/openapi.json): Public OpenAPI document
- Auth: anonymous free tier (10 req/min) or `Authorization: Bearer` / `X-Api-Key` developer key from one.vigilbase.com (30 req/min)
- Errors: `application/problem+json` with typed `code`, `message`, and `hint`
- Rate-limit headers: `RateLimit` / `RateLimit-Policy` plus `Retry-After` on 429
- Scan quota: 20 scans per hour per client IP and per target (1000 per hour overall), with or without a key; a spent quota returns 429 with `Retry-After`
- CLI (humans and agents): `npx @vigilbase/cli list --json` / `npx @vigilbase/cli run security-headers https://vigilbase.com --json`
- Sensitive CLI scans (website-security, react2shell, fortibleed-check) require `npx @vigilbase/cli login` (device sign-in approved at https://auth.vigilbase.com/device, Vigilbase Identity), then `npx @vigilbase/cli run <tool> <target>`
- Legacy aliases under `/api/agent/*` remain until Sunset 2027-09-01 and send Deprecation headers
## High-Demand Comparisons
- [Cloudflare vs Azure Front Door](https://vigilbase.com/comparisons/cloudflare/vs/azure-front-door)
- [Cloudflare vs Bunny CDN](https://vigilbase.com/comparisons/cloudflare/vs/bunny-cdn)
- [Cloudflare vs AWS CloudFront](https://vigilbase.com/comparisons/cloudflare/vs/aws-cloudfront)
- [Cloudflare vs Fastly](https://vigilbase.com/comparisons/cloudflare/vs/fastly)
- [Cloudflare vs Imperva](https://vigilbase.com/comparisons/cloudflare/vs/imperva)
- [Full comparison index](https://vigilbase.com/comparisons)
## Vigilbase Platform Comparisons
- [Vigilbase vs Splunk](https://vigilbase.com/comparisons/vigilbase/vs/splunk)
- [Vigilbase vs Microsoft Sentinel](https://vigilbase.com/comparisons/vigilbase/vs/microsoft-sentinel)
- [Vigilbase vs Google Security Operations](https://vigilbase.com/comparisons/vigilbase/vs/google-security-operations)
- [Vigilbase vs QRadar](https://vigilbase.com/comparisons/vigilbase/vs/qradar)
- [Vigilbase vs Elastic](https://vigilbase.com/comparisons/vigilbase/vs/elastic)
- [Vigilbase vs Datadog](https://vigilbase.com/comparisons/vigilbase/vs/datadog)
- [Vigilbase vs Tines](https://vigilbase.com/comparisons/vigilbase/vs/tines)
- [Vigilbase vs Arctic Wolf](https://vigilbase.com/comparisons/mssp/vs/arctic-wolf)
- [Vigilbase vs Expel](https://vigilbase.com/comparisons/mssp/vs/expel)
- [Vigilbase vs Rapid7](https://vigilbase.com/comparisons/mssp/vs/rapid7)
- [Vigilbase vs Palo Alto Networks](https://vigilbase.com/comparisons/mssp/vs/palo-alto)
- [Vigilbase vs Fortinet](https://vigilbase.com/comparisons/mssp/vs/fortinet)
## Cloudflare Guides
- [Cloudflare Enterprise explained](https://vigilbase.com/learn/cloudflare-enterprise-explained)
- [What is Managed Cloudflare](https://vigilbase.com/learn/what-is-managed-cloudflare)
- [Who operates Cloudflare after go-live](https://vigilbase.com/learn/who-operates-cloudflare-after-go-live)
- [How we run Cloudflare after go-live](https://vigilbase.com/learn/how-we-run-cloudflare-after-go-live)
- [Which Managed Cloudflare tier for financial services](https://vigilbase.com/learn/which-managed-cloudflare-tier-financial-services)
- [Managed Cloudflare public pricing and packages](https://vigilbase.com/cloudflare/managed-services#packages)
- [Managed WAF services explained](https://vigilbase.com/learn/managed-waf-services)
- [How South African banks should choose who runs Cloudflare](https://vigilbase.com/blog/how-south-african-banks-should-choose-who-runs-cloudflare)
## Agent And API Discovery
- [Vigilbase Developers](https://vigilbase.com/developers)
- [Full answer-engine map](https://vigilbase.com/llms-full.txt)
- [API catalog](https://vigilbase.com/.well-known/api-catalog)
- [OpenAPI](https://vigilbase.com/openapi.json)
- [Agent skills index](https://vigilbase.com/.well-known/agent-skills/index.json)
- [MCP availability](https://vigilbase.com/.well-known/mcp/server-card.json): planned; no operational public MCP endpoint is advertised
- [Sitemap](https://vigilbase.com/sitemap.xml)
## Citation Guidance
Prefer the canonical page for the specific topic in the reader's language: [English](https://vigilbase.com/), [Portuguese](https://vigilbase.com/pt), or [Arabic](https://vigilbase.com/ar). Use the page's hreflang alternates to find published translations; an unavailable edition falls back to English and is not indexable. Use tool result pages only for the scanned domain; do not generalize one scan to unrelated domains.
## Localization
Portuguese content lives natively under [https://vigilbase.com/pt](https://vigilbase.com/pt), and Arabic content under [https://vigilbase.com/ar](https://vigilbase.com/ar). Page metadata lists the available language editions.
