Data API

For builders

ZTLens's content is structured YAML under the hood, so it's also published as plain, static JSON — no backend, no auth, no rate limits. Fetch it directly into a script, spreadsheet, dashboard, or agent.

GEThttps://sepand.github.io/ZTLens/api/capabilities.json

All capability-matrix entries: pillar, capability name, Traditional/Advanced/Optimal descriptions, and framework tie-ins.

GEThttps://sepand.github.io/ZTLens/api/nist-crosswalk.json

The Zero Trust x NIST CSF 2.0 crosswalk: each pillar (with its nearest DoD ZT RA 2.0 pillar name) and its Govern/Identify/Protect/Detect/Respond/Recover capability lists.

Example

fetch("https://sepand.github.io/ZTLens/api/capabilities.json")
  .then((r) => r.json())
  .then((data) => console.log(data.capabilities));

These endpoints are generated at build time fromdata/capabilities.yamlanddata/nist-csf-mapping.yaml. They refresh whenever the site redeploys — not in real time. Licensed CC BY-SA 4.0 like the rest of the content; attribution appreciated.