aidefend.net

find_defenses_by_threat

Find AIDEFEND mappings for a specific threat. Returns actionable standalone/sub-technique controls separately from non-actionable parent-family context, so a family is never presented as an implementable control. Parent-family mappings are a derived union of reviewed child mappings for navigation, not independent control claims. Accepts exact or prefix framework IDs and English mapping-name keywords; exact IDs are preferred. OWASP LLM references default to the current edition, and explicit 2025 IDs or legacy names are migrated by risk concept rather than by rank. Malformed explicit editions and queries containing multiple OWASP LLM concepts return resolution metadata instead of being guessed. Cisco references resolve only against v2.0.0 with explicit edition metadata; legacy editions, retired IDs, multiple IDs and ID/name conflicts produce resolution metadata without a lookup. A mapping expresses a reviewed defensive relationship, not certification that a control is deployed or effective in the caller's environment.

Page: /

Input schema

{
  "type": "object",
  "properties": {
    "threat": {
      "type": "string",
      "description": "Threat ID or keyword in English. Examples: 'AML.T0051', 'LLM01', 'LLM03:2025 Supply Chain', 'prompt injection', 'supply chain', 'model poisoning'. OWASP LLM 2025 references are accepted and resolved to their 2026 semantic successor. IMPORTANT: The framework content is in English. Translate any non-English queries into English before calling this tool.",
      "minLength": 2,
      "maxLength": 200
    },
    "maxResults": {
      "type": "integer",
      "description": "Maximum results per category. Default: 15, max: 30",
      "default": 15,
      "minimum": 1,
      "maximum": 30
    }
  },
  "required": [
    "threat"
  ]
}