Security, automated.Every pipeline.
Comprehensive REST API for scans, findings, reports, compliance, attack surface, and AI chat. Embed security testing into every stage of your development lifecycle.
Core API
Comprehensive REST API
Scans, findings, reports, projects, admin, compliance, attack surface, and chat — all accessible programmatically with full CRUD operations.
API Key Management
Scoped API keys with expiry dates and revocation. Start assessments, retrieve results, and manage everything programmatically.
Stream Token Authentication
Scoped, TTL-bounded tokens for WebSocket connections. Secure real-time streams without exposing long-lived credentials.
Admin API
User lifecycle management (activate, suspend), worker monitoring, and scan administration at the platform level.
Security Intelligence API
Vulnerability Tracker API
Full per-finding lifecycle: confidence scores, evidence, ownership, status changes, and complete timeline history.
Attack Surface Graph API
Structured host-surface-category-port graph with risk scores, connections, and filters. Visualize your entire exposure.
Compliance Mapping API
Standards, controls, findings mapped per control with pass, partial, fail, and not-assessed status tracking.
Finding Stats & Trends
Aggregated severity distributions, category counts, risk breakdowns, and trending with delta percentages over time.
AI & Reporting API
AI Report Analysis API
On-demand LLM re-analysis of completed reports. Trigger fresh AI examination of existing scan results.
Security Chat API
Thread-based AI chat with streaming responses via WebSocket. Ask questions, request re-analysis, discuss findings.
Report-to-Chat Bridge
Send report artifacts into chat threads for collaborative AI-assisted discussion of findings and remediation.
Report Comparison API
Side-by-side diff of two scan reports. Track security posture changes across assessments.
Deep Pentest AI Trigger
Trigger autonomous agent validation pipeline via single API flag. Full pentest agent — not just a scanner.
Multi-Format Report Delivery
Download reports in HTML, PDF, JSON, SARIF, and DOCX via dedicated endpoints.
Real-Time & Operations
Real-Time Scan Progress
Live progress updates via WebSocket and internal event streams. Stream scan status, finding counts, and phase transitions.
Project-Scoped Access
Scans and findings isolated per project with dedicated API endpoints. Organize by client, environment, or team.
Contact Management API
Security stakeholder directory with company and role metadata. Manage who receives which reports.
Worker Health Monitoring
Heartbeat streams with CPU and memory metrics. Know your scanning infrastructure is healthy.