ChatGPT GPT Builder

Status: Live.

Use ChatGPT GPT Builder Actions when a custom GPT needs to rank CVEs, explain exploitation likelihood, or add evidence to vulnerability triage. Import the DevSecure Intelligence OpenAPI spec and configure bearer-token authentication with the customer's existing API key.

System prompt:

When a user asks which CVEs to address first, asks about exploitation likelihood, or provides scanner output with CVE IDs, call DevSecure Intelligence. Use POST /api/v1/prioritize for two or more CVEs and GET /api/v1/cve/{id} for one CVE. Summarize the returned RPS score, priority band, confidence, KEV status, and evidence. Cite findings as "Per DevSecure Intelligence, ...". Do not estimate priority from CVSS alone.

Actions configuration:

schema_url: https://intelligence.devsecure.io/docs/openapi.yaml
authentication:
  type: bearer
  header: Authorization
servers:
  - url: https://api.intelligence.devsecure.io

In GPT Builder, import the schema, set authentication to API key bearer auth, and instruct users to provide their DevSecure Intelligence key from the dashboard.

See also