Verify inventory

Drop in a bumblebee NDJSON scan and we'll match it against tracked incidents. Inventory is parsed in your browser and never stored.

Drop a .ndjson inventory here, or

Your inventory is parsed in your browser. Only normalized eco|name|version keys are sent to the server.

Or pipe it from the terminal

stores 24h, shareable URL

Stream a scan straight into the upload endpoint. The server stores the parsed(eco, name, version)triples in Cloudflare KV for 24 hours and returns a URL your team can revisit — every visit re-runs the check against the live incident catalog.

bumblebee scan --profile baseline | \
  curl -sX POST --data-binary @- \
    -H "Content-Type: application/x-ndjson" \
    http://localhost:4321/api/scans

Append | jq -r .url to extract just the shareable URL, or pipe to | jq to see the full response (id, url, expires_at, inventory_count, hits_count).