Domain, DNS, and certificate intelligence, with asset rule changes held for approval
Ask about a domain and get its current DNS records, SSL certificate history, and the IP ranges tied to a company, without leaving the terminal. SecurityTrails connects with an API key. Reads come back right away. When you want to change the static asset rules on an attack surface project, the agent shows the rule set first and waits for your approval.
12 tools: 11 read, 1 write. Reads answer instantly. Writes require approval by default. Everything is logged.
What a governed Securitytrails run looks like inside Luumen.
Authorize once with API token. Luumen lists the scopes each action needs before you approve the connection, and credentials never appear in the chat.
Read actions answer immediately. Anything that writes — bulk static asset rules — is shown as a plan and requires approval by default. Administrators configure that per tool, so you decide exactly which actions can ever run unattended.
You decide. Actions are granted per agent, skill, and team, and per environment — production is not staging. Read access can be broad while writes stay narrow.
Every call to Securitytrails — read or write, approved or declined — is recorded with the actor, the input, and the result, and can be linked to the ticket or change record.
Connect in minutes. Every action scoped, approved, and audited from day one.