slug: domscan provider: DomScan generated_by: planning/capability-mapping/scripts/classify_capabilities.py model: claude-opus-5 frame: - Software & Technology min_confidence: 0.7 capability_model: source: https://github.com/vincentmakes/turbo-ea-capabilities license: CC-BY-4.0 attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 notice: NOTICE edge_count: 3 edges: - tag: Security spec_file: domscan-security-api-openapi.yml capability_id: BC-620.40 capability_id_l1: BC-620 capability_name: Vulnerability Management confidence: 0.78 evidence: GET /v1/vulnerabilities getVulnerabilities Scan exposed software for known vulnerabilities reason: Explicit vulnerability scanning of exposed software alongside bulk certificate, subdomain and email-authentication audits — clearly security scanning of the external estate, which maps to Vulnerability Management. - tag: Brand Scoring spec_file: domscan-brand-scoring-api-openapi.yml capability_id: BC-400.20 capability_id_l1: BC-400 capability_name: Brand Management confidence: 0.7 evidence: '''Score a brand name'', ''Compare and rank multiple brand names'', ''Get brand scoring methodology details''' reason: Operations evaluate and rank candidate brand names against scoring dimensions — brand identity/naming decision support, which falls under Brand Management. Thin surface (three endpoints) keeps confidence moderate. - tag: User spec_file: domscan-user-api-openapi.yml capability_id: BC-4270.40 capability_id_l1: BC-4270 capability_name: Developer Identity & Credential Management confidence: 0.7 evidence: GET /v1/user/keys listApiKeys 'List API keys'; POST /v1/user/keys createApiKey; DELETE /v1/user/keys/{id} revokeApiKey reason: Self-service management of API keys/credentials plus credit balance and usage statistics for API consumers — developer credential management (with some API consumption governance overlap).