The mlab documentation

Documentation for the entire mlab stack

Guides, references and deep dives for the mlab.sh platform - scan domains, files and emails, automate with the API, and wire mlab into your stack. Pick a section and start shipping.

Explore the docsBrowse by app

Browse by app

Every app in the mlab stack gets its own documentation space. More are on the way - for now, start with the platform.

mlab.sh

Threat intelligence & scanning platform

Getting StartedRun your first scans and verify your infrastructure.Developer APIThe REST API reference for building on mlab.IntegrationsMCP for AI agents and the n8n automation nodes.ToolsMITRE ATT&CK mapping, YARA builder and RedKit.SupportTroubleshooting, partners and how to reach us.

ir.mlab.sh

Self-hosted incident response platform

Getting StartedDeploy with Docker Compose and send your first alert.CoreWorkflow stages, licensing, the REST API and integrations.OperateUpdates, troubleshooting, FAQ and glossary.

tprm.mlab.sh

Self-hosted DORA third-party risk management

Getting StartedDeploy with Docker Compose and build your first register.CoreDORA mapping, the EBA export, licensing and the REST API.OperateUpdates, troubleshooting, FAQ and glossary.

vuln.mlab.sh

Public CVE search & threat-intelligence API

GuidesSearch, filter and fetch CVEs, and wire up the OSV gate.API ReferenceEvery endpoint, parameter and schema with live examples.

Binaries

Command-line tools for the mlab stack

mlab CLIThe official client - scan, look up and query mlab from your terminal.postmortemOffline supply-chain dependency scanner for npm, pip, Cargo, Bundler, Composer, Go and Maven/Gradle.assayOffline scanner for ML model artifacts - safetensors, GGUF and pickle.

© 2026 mlab. All systems documented.

Documentationmlab.sh