For AI agents: visit https://securityscorecard.readme.io/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI.
Jump to Content
SecurityScorecardGuidesMarketplaceAPI ReferenceAtlas API Reference
HomeGuidesAPI Reference
GuidesMarketplaceAPI ReferenceAtlas API ReferenceSwitch to SecurityScorecardLog InSecurityScorecard
API Reference
Switch to SecurityScorecardLog In

API Basics

  • Introduction
  • Quickstart (5 mins)
  • Core Resources
  • API Specifications
    • Errors
    • Pagination
    • Rate Limits
    • HTTP API Requirements
    • Backwards Compatibility

SecurityScorecard API

  • Portfolios
    • Manage Portfolios
      • Get all portfolios you have access toget
      • Create a new portfoliopost
      • Edit a portfolioput
      • Delete a portfoliodel
    • Get Portfolio Details
      • Get all companies in a portfolioget
      • Get all expanded risk events in a portfolioget
    • Add to Portfolio
      • Add company to portfolioput
      • Add companies in bulk to a portfoliosput
    • Remove from Portfolio
      • Remove all companies from a portfoliodel
      • Remove company from portfoliodel
  • Scorecard Tags
    • Manage Scorecard Tags
      • Get all scorecard tagsget
      • Create a scorecard tagpost
      • Update a scorecard tagput
      • Delete a scorecard tagdel
      • Deletes a list of tags by the given ids in a singlpost
    • Using Tags
      • Get all companies associated with a scorecard tagget
      • Add a scorecard tag to a companypost
      • Remove a scorecard tag from a companydel
    • Using Tags - Bulk
      • Associates the given tag ids to the given companiespost
      • Removes the given tags from the given companiespost
    • Manage Scorecard Tag Groups
      • Get all scorecard tag groupsget
      • Get a scorecard tag groupget
      • Create a new scorecard tag grouppost
      • Edit a scorecard tag groupput
      • Delete a scorecard tag groupdel
    • Using Tag Groups
      • Add scorecard tag to a scorecard tag grouppost
      • Remove scorecard tag from a scorecard tag groupdel
  • All Companies
    • Companies & Vendor Details
      • Find followed companiesget
      • Get followed company by domainget
      • Update followed company by domainpatch
      • Execute bulk update operation on followed companiespost
      • Delete followed company by domaindel
      • Execute bulk delete operation on followed companiespost
    • Notes
      • Find scorecard notesget
  • Scores
    • Search companies in bulkpost
    • Get Company Score Info
      • Get a company information and scorecard summaryget
      • Get a company information, scorecard summary, factor scores and issue countsget
      • Get a company's factor scores and issue countsget
      • Get a company's historical scoresget
      • Get a company's historical factor scoresget
      • Get a company's expanded riskget
      • Get the score plan by score targetget
      • Retrieve BSI (Breach Susceptibility Indicator) for a single companyget
    • Get Industry Scores
      • get score for the industryget
      • Get an industry's historical scoresget
      • get factor scores for the industryget
      • get historical factor scores for the industryget
    • Multiscore
      • /multiscores/portfolio/batchpost
      • /multiscores/portfolio/{portfolio_id}get
      • /multiscores/{scorecard_id}/historyget
      • /multiscores/{scorecard_id}get
  • IP Domain Tags
  • Event Logs
    • /companies/{scorecard_identifier}/history/events/get
    • Get a company's historical breaches eventsget
  • Active Findings
    • General Findings
      • Get the score context for an issue typeget
      • Get "general_scan_detected" issues in a scorecardget
      • Get "malicious_scan_detected" issues in a scorecarget
      • Get "uce" issues in a scorecardget
      • Get "typosquat" issues in a scorecardget
      • Get "uses_go_daddy_infrastructure" issues in a scoget
      • Get "uses_go_daddy_managed_wordpress" issues in a get
      • Get "payment_provider" issues in a scorecardget
      • Get "references_object_storage_v2" issues in a scoget
      • Get "service_cloud_provider" issues in a scorecardget
      • Get "server_error" issues in a scorecardget
      • Get "telephony" issues in a scorecardget
    • Vulnerability & Exploitation Findings
      • Get "active_cve_exploitation_attempted" issues in get
      • Get "cve_in_use_by_threat_actor" issues in a scoreget
      • Get "exploit_attempt_detected" issues in a scorecaget
      • Get "exploited_product" issues in a scorecardget
      • Get "insecure_server_certificate_key_size" issues get
      • Get "microsoft_exchange_0_day_vulnerability" issueget
      • Get "microsoft_exchange_http_api_vulnerability" isget
      • Get "openssl_critical_vulnerability" issues in a sget
      • Get "potentially_vulnerable" issues in a scorecardget
      • Get "potentially_vulnerable_cisco_rv_320_325" issuget
      • Get "potentially_vulnerable_cve_2023_33246" issuesget
      • Get "potentially_vulnerable_cve_2023_3519" issues get
      • Get "potentially_vulnerable_cve_2023_34362" issuesget
      • Get "potentially_vulnerable_cve_2023_37582" issuesget
      • Get "potentially_vulnerable_cve_2023_37979" issuesget
      • Get "potentially_vulnerable_cve_2023_38035" issuesget
      • Get "potentially_vulnerable_cve_2023_46747" issuesget
      • Get "potentially_vulnerable_cve_2024_21887" issuesget
      • Get "potentially_vulnerable_cve_2024_46805" issuesget
      • Get "product_exploited_by_ransomware_actors" issueget
      • Get "product_uses_vulnerable_log4j" issues in a scget
      • Get "webapp_vulnerable_to_spring4shell" issues in get
    • Malware & Botnets Findings
      • Get "adware_installation" issues in a scorecardget
      • Get "adware_installation_trail" issues in a scorecget
      • Get "compromised_by_information_stealer" issues inget
      • Get "infected_by_targeted_attack" issues in a scorget
      • Get "malicious_botnet_c_and_c_server_detected" issget
      • Get "malware_detected" issues in a scorecardget
      • Get "malware_infection" issues in a scorecardget
      • Get "malware_infection_trail" issues in a scorecarget
      • Get "mirai_botnet_traffic_detected" issues in a scget
      • Get "pva_installation" issues in a scorecardget
      • Get "pva_installation_trail" issues in a scorecardget
    • Network Security & Infrastructure Findings
      • Get "attack_detected" issues in a scorecardget
      • Get "cdn_hosting" issues in a scorecardget
      • Get "cobalt_strike_c2_detected" issues in a scorecget
      • Get "cobalt_strike_c2_service" issues in a scorecaget
      • Get "communication_server_with_expired_cert" issueget
      • Get "communication_with_server_certificate_issued_get
      • Get "dos_attack_attempt_detected" issues in a scorget
      • Get "exposed_cisco_web_ui" issues in a scorecardget
      • Get "exposed_embedded_iot_web_server" issues in a get
      • Get "exposed_mac_airport_device" issues in a scoreget
      • Get "exposed_network_attached_storage_device" issuget
      • Get "exposed_printer" issues in a scorecardget
      • Get "fail_to_load_page_components" issues in a scoget
      • Get "industrial_control_device" issues in a scorecget
      • Get "insecure_ftp" issues in a scorecardget
      • Get "insecure_telnet" issues in a scorecardget
      • Get "iot_camera" issues in a scorecardget
      • Get "ip_black_list_due_malicious_activity" issues get
      • Get "known_compromised_or_hostile_host" issues in get
      • Get "malicious_tor_relay_router_node_detected" issget
      • Get "malicious_tor_exit_node_detected" issues in aget
      • Get "minecraft_server" issues in a scorecardget
      • Get "mysql_server_empty_password" issues in a scorget
      • Get "open_port" issues in a scorecardget
      • Get "remote_access" issues in a scorecardget
      • Get "ssh_weak_cipher" issues in a scorecardget
      • Get "ssh_weak_mac" issues in a scorecardget
      • Get "ssh_weak_protocol" issues in a scorecardget
      • Get "tor_server" issues in a scorecardget
      • Get "tor_traffic_detected" issues in a scorecardget
      • Get "upnp_accessible" issues in a scorecardget
      • Get "waf_detected_v2" issues in a scorecardget
    • Network Service Findings
      • Get "service_cassandra" issues in a scorecardget
      • Get "service_couchdb" issues in a scorecardget
      • Get "service_dns" issues in a scorecardget
      • Get "service_elasticsearch" issues in a scorecardget
      • Get "service_end_of_life" issues in a scorecardget
      • Get "service_end_of_service" issues in a scorecardget
      • Get "service_ftp" issues in a scorecardget
      • Get "service_http_proxy" issues in a scorecardget
      • Get "service_imap" issues in a scorecardget
      • Get "service_ldap" issues in a scorecardget
      • Get "service_ldap_anonymous" issues in a scorecardget
      • Get "service_microsoft_sql" issues in a scorecardget
      • Get "service_mongodb" issues in a scorecardget
      • Get "service_mysql" issues in a scorecardget
      • Get "service_networking" issues in a scorecardget
      • Get "service_open_vpn" issues in a scorecardget
      • Get "service_oracle_db" issues in a scorecardget
      • Get "service_pop3" issues in a scorecardget
      • Get "service_postgresql" issues in a scorecardget
      • Get "service_pptp" issues in a scorecardget
      • Get "service_pulse_vpn" issues in a scorecardget
      • Get "service_rdp" issues in a scorecardget
      • Get "service_redis" issues in a scorecardget
      • Get "service_rsync" issues in a scorecardget
      • Get "service_smb" issues in a scorecardget
      • Get "service_soap" issues in a scorecardget
      • Get "service_socks_proxy" issues in a scorecardget
      • Get "service_telnet" issues in a scorecardget
      • Get "service_vnc" issues in a scorecardget
      • Get "service_vuln_host_high" issues in a scorecardget
      • Get "service_vuln_host_low" issues in a scorecardget
      • Get "service_vuln_host_medium" issues in a scorecaget
      • Get "service_vuln_host_v3_critical" issues in a scget
      • Get "service_vuln_host_v3_high" issues in a scorecget
      • Get "service_vuln_host_v3_low" issues in a scorecaget
      • Get "service_vuln_host_v3_medium" issues in a scorget
    • Web Security Findings
      • Get "browser_logs_contain_debug_message" issues inget
      • Get "cookie_missing_http_only" issues in a scorecaget
      • Get "cookie_missing_secure_attribute" issues in a get
      • Get "csp_no_policy_v2" issues in a scorecardget
      • Get "csp_too_broad_v2" issues in a scorecardget
      • Get "csp_unsafe_policy_v2" issues in a scorecardget
      • Get "domain_missing_https_v2" issues in a scorecarget
      • Get "hosted_on_object_storage_v2" issues in a scorget
      • Get "hsts_incorrect_v2" issues in a scorecardget
      • Get "insecure_https_redirect_pattern_v2" issues inget
      • Get "links_to_insecure_website" issues in a scorecget
      • Get "local_file_path_exposed_via_url_scheme" issueget
      • Get "malicious_user_agent_detected" issues in a scget
      • Get "redirect_chain_contains_http_v2" issues in a get
      • Get "redirect_to_insecure_website" issues in a scoget
      • Get "site_emits_browser_log" issues in a scorecardget
      • Get "site_requests_data_over_insecure_channel" issget
      • Get "spa_browser" issues in a scorecardget
      • Get "unsafe_sri_v2" issues in a scorecardget
      • Get "web_vuln_host_high" issues in a scorecardget
      • Get "web_vuln_host_medium" issues in a scorecardget
      • Get "web_vuln_host_low" issues in a scorecardget
      • Get "web_vuln_host_v3_critical" issues in a scorecget
      • Get "web_vuln_host_v3_high" issues in a scorecardget
      • Get "web_vuln_host_v3_low" issues in a scorecardget
      • Get "web_vuln_host_v3_medium" issues in a scorecarget
      • Get "website_copyright_expired" issues in a scorecget
      • Get "website_copyright_up_to_date" issues in a scoget
      • Get "websocket_receives_data" issues in a scorecarget
      • Get "websocket_requests_contain_sensitive_fields" get
      • Get "websocket_sends_data" issues in a scorecardget
      • Get "x_content_type_options_incorrect_v2" issues iget
      • Get "x_frame_options_incorrect_v2" issues in a scoget
      • Get "x_xss_protection_incorrect_v2" issues in a scget
    • Data Security & Privacy Findings
      • Get "alleged_breach_incident" issues in a scorecarget
      • Get "attempted_information_leak" issues in a scoreget
      • Get "compromised_credentials_found" issues in a scget
      • Get "contact_information_detected" issues in a scoget
      • Get "data_leak_detected" issues in a scorecardget
      • Get "exposed_personal_information_info" issues in get
      • Get "historical_compromised_credentials_found" issget
      • Get "leaked_credentials_info" issues in a scorecarget
      • Get "sensitive_data_exposure_through_insecure_changet
      • Get "sql_payload_using_tor_proxy_detected" issues get
      • Get "xss_payload_using_tor_proxy_detected" issues get
    • Email Security Findings
      • Get "dmarc_contains_none" issues in a scorecardget
      • Get "dmarc_record_missing" issues in a scorecardget
      • Get "mail_server_unusual_port" issues in a scorecaget
      • Get "spf_record_malformed" issues in a scorecardget
      • Get "spf_record_missing" issues in a scorecardget
      • Get "spf_record_softfail" issues in a scorecardget
      • Get "spf_record_wildcard" issues in a scorecardget
      • Get "subdomain_dmarc_contains_none" issues in a scget
    • System Configuration & Patching Findings
      • Get "outdated_browser" issues in a scorecardget
      • Get "outdated_os" issues in a scorecardget
      • Get "patching_analysis_high" issues in a scorecardget
      • Get "patching_analysis_low" issues in a scorecardget
      • Get "patching_analysis_medium" issues in a scorecaget
      • Get "patching_cadence_high" issues in a scorecardget
      • Get "patching_cadence_low" issues in a scorecardget
      • Get "patching_cadence_medium" issues in a scorecarget
      • Get "patching_cadence_v3_critical" issues in a scoget
      • Get "patching_cadence_v3_high" issues in a scorecaget
      • Get "patching_cadence_v3_low" issues in a scorecarget
      • Get "patching_cadence_v3_medium" issues in a scoreget
      • Get "tls_ocsp_stapling" issues in a scorecardget
      • Get "tls_weak_cipher" issues in a scorecardget
      • Get "tls_weak_protocol" issues in a scorecardget
      • Get "tlscert_excessive_expiration" issues in a scoget
      • Get "tlscert_expired" issues in a scorecardget
      • Get "tlscert_no_revocation" issues in a scorecardget
      • Get "tlscert_revoked" issues in a scorecardget
      • Get "tlscert_self_signed" issues in a scorecardget
      • Get "tlscert_weak_signature" issues in a scorecardget
    • Threat Intelligence & Actors Findings
      • Get "ransomware_association" issues in a scorecardget
      • Get "ransomware_infection" issues in a scorecardget
      • Get "ransomware_infection_trail" issues in a scoreget
      • Get "ransomware_victim" issues in a scorecardget
      • Get "targeted_by_threat_actor_group" issues in a sget
      • Get "threat_actor_hosting_infrastructure" issues iget
  • Historical Findings
    • General Findings
      • Get "general_scan_detected" historical issues in aget
      • Get "malicious_scan_detected" historical issues inget
      • Get "uce" historical issues in a scorecardget
      • Get "typosquat" historical issues in a scorecardget
      • Get "uses_go_daddy_infrastructure" historical issuget
      • Get "uses_go_daddy_managed_wordpress" historical iget
      • Get "payment_provider" historical issues in a scorget
      • Get "references_object_storage_v2" historical issuget
      • Get "service_cloud_provider" historical issues in get
      • Get "server_error" historical issues in a scorecarget
      • Get "telephony" historical issues in a scorecardget
    • Vulnerability & Exploitation Findings
      • Get "active_cve_exploitation_attempted" historicalget
      • Get "cve_in_use_by_threat_actor" historical issuesget
      • Get "exploit_attempt_detected" historical issues iget
      • Get "exploited_product" historical issues in a scoget
      • Get "insecure_server_certificate_key_size" historiget
      • Get "microsoft_exchange_0_day_vulnerability" histoget
      • Get "microsoft_exchange_http_api_vulnerability" higet
      • Get "openssl_critical_vulnerability" historical isget
      • Get "potentially_vulnerable" historical issues in get
      • Get "potentially_vulnerable_cisco_rv_320_325" histget
      • Get "potentially_vulnerable_cve_2023_33246" historget
      • Get "potentially_vulnerable_cve_2023_34362" historget
      • Get "potentially_vulnerable_cve_2023_3519" historiget
      • Get "potentially_vulnerable_cve_2023_37582" historget
      • Get "potentially_vulnerable_cve_2023_37979" historget
      • Get "potentially_vulnerable_cve_2023_38035" historget
      • Get "potentially_vulnerable_cve_2023_46747" historget
      • Get "potentially_vulnerable_cve_2024_21887" historget
      • Get "potentially_vulnerable_cve_2024_46805" historget
      • Get "product_exploited_by_ransomware_actors" histoget
      • Get "product_uses_vulnerable_log4j" historical issget
      • Get "webapp_vulnerable_to_spring4shell" historicalget
    • Malware & Botnet Findings
      • Get "adware_installation" historical issues in a sget
      • Get "adware_installation_trail" historical issues get
      • Get "compromised_by_information_stealer" historicaget
      • Get "infected_by_targeted_attack" historical issueget
      • Get "malicious_botnet_c_and_c_server_detected" hisget
      • Get "malware_detected" historical issues in a scorget
      • Get "malware_infection" historical issues in a scoget
      • Get "malware_infection_trail" historical issues inget
      • Get "mirai_botnet_traffic_detected" historical issget
      • Get "pva_installation" historical issues in a scorget
      • Get "pva_installation_trail" historical issues in get
    • Network Security & Infrastructure Findings
      • Get "attack_detected" historical issues in a scoreget
      • Get "cdn_hosting" historical issues in a scorecardget
      • Get "cobalt_strike_c2_detected" historical issues get
      • Get "cobalt_strike_c2_service" historical issues iget
      • Get "communication_server_with_expired_cert" histoget
      • Get "communication_with_server_certificate_issued_get
      • Get "dos_attack_attempt_detected" historical issueget
      • Get "exposed_cisco_web_ui" historical issues in a get
      • Get "exposed_embedded_iot_web_server" historical iget
      • Get "exposed_mac_airport_device" historical issuesget
      • Get "exposed_network_attached_storage_device" histget
      • Get "exposed_printer" historical issues in a scoreget
      • Get "fail_to_load_page_components" historical issuget
      • Get "industrial_control_device" historical issues get
      • Get "insecure_ftp" historical issues in a scorecarget
      • Get "insecure_telnet" historical issues in a scoreget
      • Get "iot_camera" historical issues in a scorecardget
      • Get "ip_black_list_due_malicious_activity" historiget
      • Get "known_compromised_or_hostile_host" historicalget
      • Get "malicious_tor_relay_router_node_detected" hisget
      • Get "malicious_tor_exit_node_detected" historical get
      • Get "minecraft_server" historical issues in a scorget
      • Get "mysql_server_empty_password" historical issueget
      • Get "open_port" historical issues in a scorecardget
      • Get "remote_access" historical issues in a scorecaget
      • Get "ssh_weak_cipher" historical issues in a scoreget
      • Get "ssh_weak_mac" historical issues in a scorecarget
      • Get "ssh_weak_protocol" historical issues in a scoget
      • Get "tor_server" historical issues in a scorecardget
      • Get "tor_traffic_detected" historical issues in a get
      • Get "upnp_accessible" historical issues in a scoreget
      • Get "waf_detected_v2" historical issues in a scoreget
    • Network Service Findings
      • Get "service_cassandra" historical issues in a scoget
      • Get "service_couchdb" historical issues in a scoreget
      • Get "service_dns" historical issues in a scorecardget
      • Get "service_elasticsearch" historical issues in aget
      • Get "service_end_of_life" historical issues in a sget
      • Get "service_end_of_service" historical issues in get
      • Get "service_ftp" historical issues in a scorecardget
      • Get "service_http_proxy" historical issues in a scget
      • Get "service_imap" historical issues in a scorecarget
      • Get "service_ldap" historical issues in a scorecarget
      • Get "service_ldap_anonymous" historical issues in get
      • Get "service_microsoft_sql" historical issues in aget
      • Get "service_mongodb" historical issues in a scoreget
      • Get "service_mysql" historical issues in a scorecaget
      • Get "service_networking" historical issues in a scget
      • Get "service_open_vpn" historical issues in a scorget
      • Get "service_oracle_db" historical issues in a scoget
      • Get "service_pop3" historical issues in a scorecarget
      • Get "service_postgresql" historical issues in a scget
      • Get "service_pptp" historical issues in a scorecarget
      • Get "service_pulse_vpn" historical issues in a scoget
      • Get "service_rdp" historical issues in a scorecardget
      • Get "service_redis" historical issues in a scorecaget
      • Get "service_rsync" historical issues in a scorecaget
      • Get "service_smb" historical issues in a scorecardget
      • Get "service_soap" historical issues in a scorecarget
      • Get "service_socks_proxy" historical issues in a sget
      • Get "service_telnet" historical issues in a scorecget
      • Get "service_vnc" historical issues in a scorecardget
      • Get "service_vuln_host_high" historical issues in get
      • Get "service_vuln_host_low" historical issues in aget
      • Get "service_vuln_host_medium" historical issues iget
      • Get "service_vuln_host_v3_critical" historical issget
      • Get "service_vuln_host_v3_high" historical issues get
      • Get "service_vuln_host_v3_low" historical issues iget
      • Get "service_vuln_host_v3_medium" historical issueget
    • Web Security Findings
      • Get "browser_logs_contain_debug_message" historicaget
      • Get "cookie_missing_http_only" historical issues iget
      • Get "cookie_missing_secure_attribute" historical iget
      • Get "csp_no_policy_v2" historical issues in a scorget
      • Get "csp_too_broad_v2" historical issues in a scorget
      • Get "csp_unsafe_policy_v2" historical issues in a get
      • Get "domain_missing_https_v2" historical issues inget
      • Get "hosted_on_object_storage_v2" historical issueget
      • Get "hsts_incorrect_v2" historical issues in a scoget
      • Get "insecure_https_redirect_pattern_v2" historicaget
      • Get "links_to_insecure_website" historical issues get
      • Get "local_file_path_exposed_via_url_scheme" histoget
      • Get "malicious_user_agent_detected" historical issget
      • Get "redirect_chain_contains_http_v2" historical iget
      • Get "redirect_to_insecure_website" historical issuget
      • Get "site_emits_browser_log" historical issues in get
      • Get "site_requests_data_over_insecure_channel" hisget
      • Get "spa_browser" historical issues in a scorecardget
      • Get "unsafe_sri_v2" historical issues in a scorecaget
      • Get "web_vuln_host_high" historical issues in a scget
      • Get "web_vuln_host_medium" historical issues in a get
      • Get "web_vuln_host_low" historical issues in a scoget
      • Get "web_vuln_host_v3_critical" historical issues get
      • Get "web_vuln_host_v3_high" historical issues in aget
      • Get "web_vuln_host_v3_medium" historical issues inget
      • Get "web_vuln_host_v3_low" historical issues in a get
      • Get "website_copyright_expired" historical issues get
      • Get "website_copyright_up_to_date" historical issuget
      • Get "websocket_receives_data" historical issues inget
      • Get "websocket_requests_contain_sensitive_fields" get
      • Get "websocket_sends_data" historical issues in a get
      • Get "x_content_type_options_incorrect_v2" historicget
      • Get "x_frame_options_incorrect_v2" historical issuget
      • Get "x_xss_protection_incorrect_v2" historical issget
    • Data Security & Privacy Findings
      • Get "alleged_breach_incident" historical issues inget
      • Get "attempted_information_leak" historical issuesget
      • Get "compromised_credentials_found" historical issget
      • Get "contact_information_detected" historical issuget
      • Get "data_leak_detected" historical issues in a scget
      • Get "exposed_personal_information_info" historicalget
      • Get "historical_compromised_credentials_found" hisget
      • Get "leaked_credentials_info" historical issues inget
      • Get "sensitive_data_exposure_through_insecure_changet
      • Get "sql_payload_using_tor_proxy_detected" historiget
      • Get "xss_payload_using_tor_proxy_detected" historiget
    • Email Security Findings
      • Get "dmarc_contains_none" historical issues in a sget
      • Get "dmarc_record_missing" historical issues in a get
      • Get "mail_server_unusual_port" historical issues iget
      • Get "spf_record_malformed" historical issues in a get
      • Get "spf_record_missing" historical issues in a scget
      • Get "spf_record_softfail" historical issues in a sget
      • Get "spf_record_wildcard" historical issues in a sget
      • Get "subdomain_dmarc_contains_none" historical issget
    • System Configuration & Patching Findings
      • Get "outdated_browser" historical issues in a scorget
      • Get "outdated_os" historical issues in a scorecardget
      • Get "patching_analysis_high" historical issues in get
      • Get "patching_analysis_low" historical issues in aget
      • Get "patching_analysis_medium" historical issues iget
      • Get "patching_cadence_high" historical issues in aget
      • Get "patching_cadence_low" historical issues in a get
      • Get "patching_cadence_medium" historical issues inget
      • Get "patching_cadence_v3_critical" historical issuget
      • Get "patching_cadence_v3_high" historical issues iget
      • Get "patching_cadence_v3_low" historical issues inget
      • Get "patching_cadence_v3_medium" historical issuesget
      • Get "tls_ocsp_stapling" historical issues in a scoget
      • Get "tls_weak_cipher" historical issues in a scoreget
      • Get "tls_weak_protocol" historical issues in a scoget
      • Get "tlscert_excessive_expiration" historical issuget
      • Get "tlscert_expired" historical issues in a scoreget
      • Get "tlscert_no_revocation" historical issues in aget
      • Get "tlscert_revoked" historical issues in a scoreget
      • Get "tlscert_self_signed" historical issues in a sget
      • Get "tlscert_weak_signature" historical issues in get
    • Threat Intelligence & Actors Findings
      • Get "ransomware_association" historical issues in get
      • Get "ransomware_infection" historical issues in a get
      • Get "ransomware_infection_trail" historical issuesget
      • Get "ransomware_victim" historical issues in a scoget
      • Get "targeted_by_threat_actor_group" historical isget
      • Get "threat_actor_hosting_infrastructure" historicget
  • Custom Scorecards
  • Vendor Detection
    • Get third party vendors by portfolio IDget
    • Get third party vendors by domainget
    • Get fourth party vendors by domainget
    • Get products by domainget
    • Get risk score by domainget
  • Reports
    • Get reports you have generated recentlyget
    • Download a generated reportget
    • Generate a Portfolio reportpost
    • Generate Company Reports
      • Generate a Company Events reportpost
      • Generate a Company Detailed reportpost
      • Generate a Company Compliance Framework Report in CSVpost
      • Generate a Company Issues reportpost
      • Generate a Company Partnership reportpost
      • Generate a Company Summary reportpost
      • Generate a CSV containing Scorecard Domainspost
      • Generate a CSV containing Scorecard IPspost
    • Generate Scorecard Report
      • Generate a Full Scorecard reportpost
      • Generate a Scorecard Footprint reportpost
  • Security Management
    • Alerts
      • get all notifications from latest 7 daysget
    • Feedback
      • Send a new feedback validation request on findingspost
      • Send new feedback on findings from a specific issupost
    • Compliance
      • get all available compliance frameworksget
      • get a compliance framework detailsget
    • Invites
      • create a new invitation for a new user/vendorpost
  • Data and Metadata
    • Attribution Log
      • Get the attribution log for the parent domainget
    • Metadata
      • get metadata for the factors used when scoring comget
      • get metadata for all issue types that can be detecget
      • get detailed metadata for the issue typeget
    • Issues
      • Get a company's active issuesget
  • Integrations and Automation
    • SAML
      • returns SAML Service Provider metadataget
    • Apps
      • creates an app jobpost
      • Update a Jobput
  • Action Plans
    • Get plans listget
    • Get list of managed action plans for managed customers vendorsget
    • Creating & Deleting Plans
      • Create new factor score improvement planpost
      • Create new issue resolution planpost
      • Create new overall score improvement planpost
      • Delete plan by IDdel
    • Updating Plans
      • Update partially the factor score improvement plan by IDpatch
      • Update partially the issue resolution plan by IDpatch
      • Update partially the overall score improvement plan by IDpatch
      • Remove item from plandel
      • Add guests to plan by IDpost
      • Remove guests from plan by IDdel
    • Archiving Plans
      • Archive list of plans by IDpost
      • Unarchive list of plans by IDpost

External Attack Surface Management

  • Assets
  • Custom Scorecards
    • Manage Custom Scorecards
      • Get a custom scorecardget
      • Create a custom scorecardpost
      • Update a custom scorecardput
      • Delete a custom scorecarddel
    • Using Filters
      • Update custom scorecard filterspatch
      • Delete custom scorecard filtersdel
    • Using Sources
      • Update custom scorecard sourcespatch
      • Delete custom scorecard sourcesdel
  • IP Domain Tags
    • Get all the domains for the parent domainpost
    • Get all the ips for the parent domainpost
    • Manage IP Domain Tags
      • Get all ip domain tagsget
      • Create an ip domain tagpost
      • Edit an ip domain tagput
      • Delete an ip domain tagdel
    • Using IP Domain Tags
      • Get all the ip tags of the parent domainget
      • Add a tag to an ippost
      • Remove a tag from an ipdel
      • Get all the domain tags of the parent domainget
      • Add a tag to a domainpost
      • Remove a tag from a domaindel
    • Manage IP Domain Tag Groups
      • Get all ip domain tag groupsget
      • Get an ip domain tag groupget
      • Create a new ip domain tag grouppost
      • Edit an ip domain tag groupput
      • Delete an ip domain tag groupdel
    • Using IP Domain Tag Groups
      • Add ip domain tag to a ip domain tag grouppost
      • Remove ip domain tag to a ip domain tag groupdel
  • Attribution Log
    • Get all the domain tags of the parent domainget

Attack Surface Intelligence API

  • Introduction
  • search
    • /asi/searchpost
    • /asi/facetspost
  • asset
    • /asi/details/asset/{ip}get
    • /asi/details/asset/{asset}/port/{port}get
  • cve
    • /asi/details/cve/{cve}get
    • Get vulnerability details by domain with a row for each IP + vulnerabilityget
  • threat-actors
    • /asi/details/threat-actor/{threatActor}get
  • ransomware
    • /asi/details/ransomware/{ransomware}get
  • active-infections
    • /asi/details/active-infections/{family}get

MAX API (BETA)

  • Customer
    • Findings
      • /max/customer/findingsget
    • Breaches
      • /max/customer/breachesget
    • Documents
      • /max/customer/documentsget
      • /max/customer/documents/{id}get
      • /max/customer/documentspost
      • /max/customer/documentsput
    • Customer Updates
      • /max/customer/updatesget
    • Vendors
      • /max/customer/vendorsget
      • /max/customer/vendors/updatesget
      • /max/customer/vendors-improvementsget
    • Reports
      • /max/customer/reports/remediation-plansget
    • User Access
      • /max/customer/users/accessget
  • Partner
    • Breaches
      • /max/partner/breachesget
      • Update the status of the breach finding as reported to make it available in the Likelihood Assessment reportput
    • Documents
      • /max/partner/documents/{id}get
      • /max/partner/documentspost
      • /max/partner/documentsput
      • /max/partner/documentsdel
    • Findings
      • /max/partner/findingsget
      • /max/partner/findings/report/{id}get
      • Update the status of the finding as reported to make it available in the Likelihood Assessment reportput
    • Indicators
      • /max/partner/indicatorsget
      • /max/partner/indicators/exclusionget
    • Managed Customers
      • /max/partner/managed-customersget
      • /max/partner/managed-customers/{customer_id}get
      • Remove a managed customer and delete its managed portfoliodel
      • /max/partner/managed-customers/{customer_id}/managed-portfoliosget
      • /max/partner/managed-customers/{id}/accessget
      • Update the access for the organizationpost
      • /max/partner/managed-customers/{customer_id}/documentsget
      • /max/partner/managed-customers/{customer_id}/updatesget
      • /max/partner/managed-customers/updates/{id}put
      • /max/partner/managed-customers/{customer_id}/updatespost
      • Delete updates for a managed customerdel
      • /max/partner/managed-customers/{id}/usersget
      • /max/partner/managed-customers/{customer_id}/vendors/{domain}get
      • /max/partner/managed-customers/{customer_id}/vendors/{domain}/updatespost
      • /max/partner/managed-customers/{customer_domain}/vendor/{vendor_domain}/reports/likelihood-assessments/{date}get
      • /max/partner/managed-customers/{customer_id}/vendors/updatesget
      • Delete vendor updates for a managed customerdel
      • /max/partner/management-requestspost
      • /max/partner/unmanaged-customersget
    • Reports
      • /max/partner/reportsget
      • /max/partner/reports/managed-customersget
      • /max/partner/reports/vendorsget
      • /max/partner/reports/remediation-plansget
      • /max/partner/reports/likelihood-assessments/logsget
      • /max/partner/reports/likelihood-assessmentspost
      • /max/partner/reports/bulk-deletedel
    • Vendor Onboarding
      • /max/partner/vendor-onboarding/add-vendor-domains/{domain_or_portfolio_id}post
      • /max/partner/vendor-onboarding/add-vendor-domains/{domain_or_portfolio_id}put
      • /max/partner/vendor-onboarding/negotiate-vendor-listpost
      • /max/partner/vendor-onboarding/negotiate-vendor-listput
    • Vendors
      • /max/partner/vendorsget
      • /max/partner/vendorsdel
      • /max/partner/vendors/statusesput
      • /max/partner/vendors/updates/{id}put
      • /max/partner/vendors/{domain}/managed-customersget
      • /max/partner/{customer_id}/vendors-improvementsget
Powered by 

Custom Scorecards

Custom Scorecards have moved to the External Attack Surface Management section which you can find here: External Attack Surface Management - Custom Scorecards

Updated about 1 year ago


Get "threat_actor_hosting_infrastructure" historic
Vendor Detection
Did this page help you?

Updated about 1 year ago


Get "threat_actor_hosting_infrastructure" historic
Vendor Detection
Did this page help you?