Updated API, including Python package

You can now also query all DNS records through the API. Details are in the API docs.

To be honest, I added this only because I wanted to check DNS records in some automated test that use the API. But who knows, some of you might find it useful :-)

Mail reports not sent this morning (solved)

This morning the ipv6 address of one of our mailservers has briefly been listed on the SpamHaus CSS list. While regular ShadowTrackr mail was still functional, this did impact all email reports sent from the website. Our logs show that about a dozen reports have not been sent, apologies for that.

The problem likely occurred when someone receiving an email from that webserver marked it as spam. The problem is fixed now, and I’ll do an extra on all accounts and webforms/reports for problems.

Python API available on Github

There has been a ShadowTrackr API for about 2 years now. Well, sort of an API. It was functional. You could get a feed with all notifications and put them in your SIEM. There were other endpoints, but their value was questionable and to be honest I never noticed clients using anything other than the notification feed.

Today version 2 of the API is live, and it has many improvements. You can query all your websites, certificates, hosts and whois records. The information per asset available through the API now is the same as through the GUI, and you get proper text descriptions of current problems and warnings. Of course you can still get the feed. Have a look at the API documentation for the details.

The whole idea of having an API is to provide the opportunity to integrate ShadowTrackr with other security tools. And often that tends to happen in Python. So, to get you started there now is a python package for ShadowTrackr, with the source code available on Github.

If you have any special requests please let me know, and I’ll do my best to support them.