Skip to content
Energy & utilities

firmalyzer.com:iotvas

IoTVAS sandbox and mock API

IOTVAS API enables you to discover IoT/Connected devices in the network and provides detailed real-time risk analysis, including firmware vulnerability analysis without requiring the user to upload the firmware file. Please visit the [signup page](https://iotvas-api.firmalyzer.com/portal/signup) to create an API key. IoTVAS API can be easily integrated with vulnerability scanning and network port Writes persist, data moves on a schedule and every change can fire a signed webhook.

Operations
8
Collections
-
Event types
-
example request
curl https://your-firmalyzer-iotvas.slurry.io/api/v1/firmware/123/accounts \
  -H "Authorization: Bearer slurry_sim_..."

Your simulation gets its own hostname, key and IP allow-list. Built from API version 1.0.

What gets simulated

Collections, relationships and state machines are worked out from the spec when you start the simulation.

  • State. Creates, updates and deletes persist and show up in later reads.
  • Behaviour. Records move through their states on a schedule you control, and you can fast-forward up to 30 days.
  • Webhooks. Every change emits a signed, retried event.
  • Failure. Per-endpoint errors, latency and chaos rules, on demand.

Operations

All 8.

  • POST/device/detect
  • GET/firmware/{firmware_hash}/accounts
  • GET/firmware/{firmware_hash}/config-issues
  • GET/firmware/{firmware_hash}/expired-certs
  • GET/firmware/{firmware_hash}/private-keys
  • GET/firmware/{firmware_hash}/risk
  • GET/firmware/{firmware_hash}/weak-certs
  • GET/firmware/{firmware_hash}/weak-keys