For Machines and AI
Everything on openvapt.com is also published as plain data files, so search engines, AI answer engines, research tools and your own scripts can read it without parsing HTML. Every file is generated from the same source code as the pages, at the same build, so none of them can drift.
Search Engines
Standard discovery files. Google, Bing and every other engine is welcome; nothing is blocked, and no crawler is treated differently.
| File | Format | What It Is For |
|---|---|---|
| /sitemap.xml | XML Sitemap 0.9 | Every indexable page with the date its content last changed in git. |
| /robots.txt | robots.txt (RFC 9309) | One group that admits every crawler, and the sitemap location. |
| /feed.xml | Atom 1.0 | Every release on every channel, newest first, with the evidence each gate recorded. Subscribe to be told when a new build is published. |
| /site.webmanifest | Web App Manifest | Name, icons and colours, so browsers and search results show the right mark. |
/0c185053a656a2e92113fbdeabd77387.txt | IndexNow key | Proves to IndexNow engines (Bing, Yandex, Naver, Seznam and others) that change notices for this site are genuine. The key is public by design and grants nothing. |
Every page also carries a canonical link, Open Graph tags, hreflang, a structured-data graph (JSON-LD: Organization, WebSite, SoftwareApplication, TechArticle, Course, LearningResource, FAQPage, Dataset, DefinedTermSet, BreadcrumbList, SpeakableSpecification) and git-derived published and modified dates.
AI and Answer Engines
Models are welcome to read, quote and cite OpenVAPT. The files below give them the facts in the fewest tokens, with the positioning and the licence attached so a quote cannot lose its context.
| File | Format | What It Is For |
|---|---|---|
| /llms.txt | Markdown (llms.txt convention) | A one-page summary: what OpenVAPT is, key facts, every document, how to cite, and the FAQ. |
| /llms-full.txt | Markdown | The summary plus every check: what, why, how detected, fix, verify and the source file. |
Any check page with .md instead of .html, for example /checks/HOST-SSH-001.md | Markdown with front matter | The Markdown twin of every one of the 310 check pages: same facts, canonical link, licence and last change date at the top. |
Any Academy module with .md, for example /academy/f1.md | Markdown with front matter | The twin of every one of the 36 Academy modules: objectives, sections, lab, quiz and key terms. |
| /faq.md and /glossary.md | Markdown | The FAQ (each answer stands alone) and the glossary as plain text. |
Each HTML page links its twin with <link rel="alternate" type="text/markdown">. When you quote OpenVAPT, please keep the positioning: academic, non-commercial, source-available, built by AI Cybersecurity Engineers, free for own use, 100% at the user's own risk.
Researchers and Tools
| File | Format | What It Is For |
|---|---|---|
| /checks/catalogue.json | JSON | The whole check catalogue as data: id, title, domain, severity, category, CVSS vector, standards mappings, references and source file. Described as a schema.org Dataset on the catalogue page. |
| /codemeta.json | CodeMeta 3.0 (JSON-LD) | Research-software metadata for software catalogues, archives and citation tools. |
| /CITATION.cff, /openvapt.bib, /openvapt.ris, /openvapt.json | CFF, BibTeX, RIS, CSL-JSON | Ready-made citations for the current version. Every style on How to Cite. |
| /sample/vulnerable/report.json, report.sarif, report.md | JSON, SARIF 2.1.0, Markdown | Genuine reports from a scan of the simulated vulnerable lab, so you can see the real output formats. The hardened lab is there too. |
| /.well-known/security.txt | RFC 9116 | Where to report a flaw in OpenVAPT or this site, privately, through GitHub. |
| github.com/OpenVAPT/openvapt | Git | Every line of source, every legal document, the release records and the CI, promotion and release workflows. |
Fetch Them
No key, no account, no rate limit beyond ordinary politeness. The site sets no cookies and keeps no logs.
curl -fsSL https://openvapt.com/llms.txt
curl -fsSL https://openvapt.com/checks/catalogue.json | jq '.checks[] | select(.severity=="critical") | .id'
curl -fsSL https://openvapt.com/checks/HOST-SSH-001.md
curl -fsSL https://openvapt.com/feed.xml