--- title: SecurityScorecard API Integration on Truto slug: securityscorecard category: Security canonical: "https://truto.one/integrations/detail/securityscorecard/" --- # SecurityScorecard API Integration on Truto **Category:** Security **Status:** Generally available ## MCP-ready AI tools Truto exposes 510 tools for SecurityScorecard that AI agents can call directly. - **list_all_security_scorecard_portfolios** — List SecurityScorecard portfolios. Returns: id, name, description, privacy, team_id. - **create_a_security_scorecard_portfolio** — Create a SecurityScorecard portfolio with a name, description, and privacy level. Returns: id, name, description, privacy, team_id. Required: name. - **update_a_security_scorecard_portfolio_by_id** — Update a SecurityScorecard portfolio by id. Returns: id, name, description, privacy, team_id. Required: id, name. - **delete_a_security_scorecard_portfolio_by_id** — Delete a SecurityScorecard portfolio by id. Returns an empty 204 response on success. Required: id. - **security_scorecard_companies_bulk_uploads_bulk_update** — Bulk upload companies to SecurityScorecard portfolios via a PUT request. Returns a list of the uploaded companies following processing. Provide a JSON request body containing the companies to add. - **list_all_security_scorecard_portfolio_companies** — List companies (scorecards) in a SecurityScorecard portfolio with optional filters for grade, industry, vulnerability, issue type, status, and recent breaches. Returns: domain, grade, industry, status. Required: portfolio_id. - **security_scorecard_portfolio_companies_bulk_update** — Add a company scorecard to a SecurityScorecard portfolio by domain. Returns: domain, grade, industry, status. Required: portfolio_id, domain. - **security_scorecard_portfolio_companies_bulk_delete** — Remove a company from a SecurityScorecard portfolio by domain. Returns an empty 204 response on success. Required: portfolio_id, domain. - **security_scorecard_companies_alls_bulk_delete** — Remove all companies from a SecurityScorecard portfolio by portfolio id. Returns an empty 204 response on success. Required: id. - **list_all_security_scorecard_portfolio_expanded_risks** — List expanded risk entries for all companies in a SecurityScorecard portfolio. Returns: domain, name, grade, score, industry, status. Required: portfolio_id. - **list_all_security_scorecard_scorecard_tags** — List scorecard tags in SecurityScorecard. Returns: id, name. Uses cursor-based pagination via the entries array. - **create_a_security_scorecard_scorecard_tag** — Create a new scorecard tag in SecurityScorecard. Returns: id, name. - **update_a_security_scorecard_scorecard_tag_by_id** — Update a scorecard tag by id in SecurityScorecard. Returns: id, name. Required: id. - **delete_a_security_scorecard_scorecard_tag_by_id** — Delete a scorecard tag by id in SecurityScorecard. Returns an empty 204 response on success. Required: id. - **create_a_security_scorecard_scorecard_tags_bulk_delete** — Bulk delete scorecard tags in SecurityScorecard by submitting a list of tag IDs. Returns an empty 204 response on success. Required: ids. - **list_all_security_scorecard_scorecard_tags_groups** — List SecurityScorecard scorecard tag groups. Returns: id, name. - **create_a_security_scorecard_scorecard_tags_group** — Create a new scorecard tag group in SecurityScorecard. Returns: id, name. Required: name. - **get_single_security_scorecard_scorecard_tags_group_by_id** — Get a single SecurityScorecard scorecard tag group by id. Returns: id, name. Required: id. - **update_a_security_scorecard_scorecard_tags_group_by_id** — Update a SecurityScorecard scorecard tag group by id. Returns: id, name. Required: id. - **delete_a_security_scorecard_scorecard_tags_group_by_id** — Delete a SecurityScorecard scorecard tag group by id. Returns an empty 204 response on success. Required: id. - **create_scorecard_tags_remove_public_tag_association** — Remove a public tag association from scorecard tags in SecurityScorecard. Returns an empty 204 response on success. - **list_all_security_scorecard_scorecard_tag_companies** — List companies assigned to a SecurityScorecard scorecard tag. Returns: domain, name, grade, score, industry. Required: scorecard_tag_id. - **create_a_security_scorecard_scorecard_tag_company** — Add a company to a SecurityScorecard scorecard tag by domain. Returns: domain, name, grade, score, industry. Required: scorecard_tag_id, domain. - **security_scorecard_scorecard_tag_companies_bulk_delete** — Remove a company from a SecurityScorecard scorecard tag by domain. Returns an empty 204 response on success. Required: id, domain. - **create_a_security_scorecard_scorecard_tag_group** — Assign a SecurityScorecard tag group to a scorecard tag. Returns an empty 204 response on success. Required: tag_id, tag_group_id. - **delete_a_security_scorecard_scorecard_tag_group_by_id** — Remove a SecurityScorecard tag group from a scorecard tag. Returns an empty 204 response on success. Required: tag_id, id. - **list_all_security_scorecard_ip_domain_tags** — List IP domain tags in SecurityScorecard. Returns: id, domain, ip. - **create_a_security_scorecard_ip_domain_tag** — Create a new IP domain tag in SecurityScorecard. Returns: id, domain, ip. Required: domain. - **update_a_security_scorecard_ip_domain_tag_by_id** — Update an IP domain tag in SecurityScorecard by id. Returns: id, created_at, updated_at. Required: id. - **delete_a_security_scorecard_ip_domain_tag_by_id** — Delete an IP domain tag in SecurityScorecard by id. Returns an empty 204 response on success. Required: id. - **list_all_security_scorecard_ip_domain_tags_groups** — List IP domain tag groups in SecurityScorecard. Returns: id, name. - **create_a_security_scorecard_ip_domain_tags_group** — Create a new IP domain tag group in SecurityScorecard. Returns: id, name. Required: name. - **get_single_security_scorecard_ip_domain_tags_group_by_id** — Get a single IP domain tag group by id in SecurityScorecard. Returns: id, name. Required: id. - **update_a_security_scorecard_ip_domain_tags_group_by_id** — Update an IP domain tag group in SecurityScorecard by id. Returns the updated group object including id, created_at, and updated_at. Required: id. - **delete_a_security_scorecard_ip_domain_tags_group_by_id** — Delete an IP domain tag group in SecurityScorecard by id. Returns an empty 204 response on success. Required: id. - **list_all_security_scorecard_parent_domain_domains** — List domains under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: parent_domain. - **create_a_security_scorecard_parent_domain_domain** — Associate a domain with an IP domain tag under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: tag_id, parent_domain, domain. - **security_scorecard_parent_domain_domains_search** — Search domains under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: parent_domain. - **security_scorecard_parent_domain_domains_bulk_delete** — Remove a domain's association with an IP domain tag under a parent domain in SecurityScorecard. Returns an empty 204 response on success. Required: tag_id, parent_domain, domain. - **list_all_security_scorecard_parent_domain_ips** — List IP addresses associated with a parent domain in SecurityScorecard, including their related tags. Returns: ip, parent_domain. Required: parent_domain. - **create_a_security_scorecard_parent_domain_ip** — Associate a tag with an IP address under a parent domain in SecurityScorecard. Returns: ip, parent_domain. Required: tag_id, parent_domain, ip. - **security_scorecard_parent_domain_ips_search** — Search for IP addresses associated with a parent domain in SecurityScorecard. Returns: ip, parent_domain. Required: parent_domain. - **security_scorecard_parent_domain_ips_bulk_delete** — Remove a tag association from an IP address under a parent domain in SecurityScorecard. Returns an empty 204 response on success. Required: tag_id, parent_domain, ip. - **create_a_security_scorecard_ip_domain_tag_group** — Create an IP domain tag group association in SecurityScorecard by linking a tag group to an IP domain tag. Returns an empty 204 response on success. Required: tag_id, tag_group_id. - **delete_a_security_scorecard_ip_domain_tag_group_by_id** — Delete an IP domain tag group association in SecurityScorecard by removing a tag group from an IP domain tag. Returns an empty 204 response on success. Required: tag_id, id. - **create_a_security_scorecard_companies_bulk_search** — Initiate a bulk search for SecurityScorecard company scorecards by submitting a list of domains. Returns an array of scorecards including name, domain, grade, score, industry, and scorecard_identifier. Required: domains. - **list_all_security_scorecard_companies** — Get a company's scorecard summary from SecurityScorecard by scorecard identifier. Returns: id, name, grade, score, industry. Required: scorecard_identifier. The company must be added to a portfolio before its scorecard can be accessed. - **list_all_security_scorecard_companie_expanded_risks** — List expanded risk entries for a SecurityScorecard company scorecard. Returns a collection of expanded risk entries for the specified scorecard. Required: scorecard_identifier. - **list_all_security_scorecard_companie_factors** — List SecurityScorecard factor scores and issue counts for a company scorecard. Returns each factor's name, score, and issue_count. Required: scorecard_identifier. The company must be added to a portfolio before factor-level data is accessible. - **list_all_security_scorecard_factors_scores** — List SecurityScorecard company factor score history for up to the last 12 months. Returns entries with date, name, score, grade, and issue_count per factor. Required: scorecard_identifier. - **list_all_security_scorecard_history_scores** — List a company's historical SecurityScorecard scores over time. Returns each dated entry with domain, date, and score. Use timing to control granularity and from/to to bound the range. Required: scorecard_identifier. - **list_all_security_scorecard_score_plans_by_targets** — Get a score plan for a SecurityScorecard company scorecard by specifying a target score. Returns a list of score plan entries describing actions needed to reach the target score. Required: domain, score. - **list_all_security_scorecard_companie_summary_factors** — List SecurityScorecard summary factors for a company by scorecard identifier. Returns: name, score, grade, issues. Required: scorecard_identifier. Company must be added to a portfolio first to access factor-level data. - **list_all_security_scorecard_industrie_factors** — List SecurityScorecard industry factors with scores and issue counts for a given industry. Returns: name, score, issue_count. Required: industry. - **list_all_security_scorecard_history_factors** — List historical SecurityScorecard factor scores for an industry over a date range within the last 12 months. Returns: date, name, score, grade, issues_count. Required: industry. - **list_all_security_scorecard_industrie_scores** — List SecurityScorecard industry scores for a specified industry. Returns: score, grade. Required: industry. - **list_all_security_scorecard_history_events** — List scorecard event log entries for a company in SecurityScorecard. Events explain score changes and act as a news feed of scorecard updates including new issues, issues getting resolved, and reported breaches. Returns: id, attributes. Required: scorecard_identifier. History data is available for the last 12 months only. - **list_all_security_scorecard_events_breaches** — List breach events from a company's scorecard event log in SecurityScorecard. Events explain score changes and serve as a news feed of scorecard updates including reported breaches. Returns: date, description. Required: domain. - **list_all_security_scorecard_companie_issue_contexts** — List issue context entries for a SecurityScorecard company scorecard by domain and issue type. Returns a paginated collection of issue context entries for the specified company and issue type. Required: domain, issue_type. - **list_all_issues_active_cve_exploitation_attempteds** — List active CVE exploitation attempted issues from a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, cve. Required: scorecard_identifier, effective_date. Company must be added to a portfolio first. - **list_all_security_scorecard_issues_adware_installations** — List historical "adware_installation" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, malware_type, malware_family, malware_detection_methods, src_ip, connection_attributes, connection_attributes_stamped, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_adware_installation_trails** — List adware installation trail issue entries for a SecurityScorecard scorecard at a specific effective date in the scorecard's history. Returns a paginated list of adware installation trail issue entries for that scorecard event. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_alleged_breach_incidents** — List alleged breach incident issues recorded in a SecurityScorecard company's scorecard event history for a specific effective date. Returns a paginated collection of breach incident entries from the scorecard event log. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_attack_detecteds** — List attack-detected issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns a collection of attack-detected issue entries (each with an id). Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_attempted_information_leaks** — List attempted information leak issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_bitcoin_servers** — List SecurityScorecard bitcoin_server issue entries from a company's scorecard history for a specific effective date. Returns: severity, issue_type, count. Required: scorecard_identifier, effective_date. - **list_all_issues_browser_logs_contain_debug_messages** — List browser_logs_contain_debug_message issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_cdn_hostings** — List CDN hosting issues from a SecurityScorecard company scorecard's event history at a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_cobalt_strike_c_2_detecteds** — List SecurityScorecard cobalt_strike_c2_detected issue events for a scorecard on a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_cobalt_strike_c_2_services** — List SecurityScorecard cobalt strike C2 service issue findings for a specific effective date in a company's scorecard event log history. Returns: issue entries including severity, status, and first_seen/last_seen timestamps. Required: scorecard_identifier, effective_date. - **list_all_issues_communication_server_with_expired_certs** — List communication server with expired certificate issue findings for a SecurityScorecard company scorecard on a specific effective date from the scorecard event history. Returns: severity. Required: scorecard_identifier, effective_date. - **issues_communication_with_server_certificate_issued_by_blacklist** — List SecurityScorecard 'communication with server certificate issued by blacklisted country' issue findings for a scorecard at a specific effective date in its history. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date. - **list_all_issues_compromised_by_information_stealers** — List SecurityScorecard issues where credentials or data were compromised by an information stealer for a company's scorecard on a specific effective date. Returns a paginated list of compromised-by-information-stealer issue entries. Required: scorecard_identifier, effective_date. - **list_all_issues_compromised_credentials_founds** — List compromised credentials found issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_issues_confirmed_first_party_breaches** — List confirmed first-party breach issues for a SecurityScorecard company scorecard on a specific effective date, as recorded in the scorecard event log. Returns a list of confirmed first-party breach issue entries. Required: scorecard_identifier, effective_date. - **list_all_issues_confirmed_third_party_breaches** — List confirmed third-party breach issue records from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_contact_information_detecteds** — List contact information detected issues for a specific SecurityScorecard scorecard event on a given effective date. Returns entries of contact information detected issue findings from the scorecard event history. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_cookie_missing_http_onlies** — List historical "cookie_missing_http_only" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, hostname, url, cookie_name, raw_cookie, observations, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_issues_cookie_missing_secure_attributes** — List historical "cookie_missing_secure_attribute" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, hostname, url, cookie_name, raw_cookie, observations, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_csp_no_policy_v_2_s** — List historical "csp_no_policy_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_csp_too_broad_v_2_s** — List CSP 'too broad' v2 issues from a SecurityScorecard company's scorecard history event for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_csp_unsafe_policy_v_2_s** — List CSP unsafe policy v2 issues for a SecurityScorecard scorecard at a specific effective date in the event history. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_cve_in_use_by_threat_actors** — List CVE-in-use-by-threat-actor issue findings from a SecurityScorecard company scorecard's history events on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_data_leak_detecteds** — List data leak detected issue events from a SecurityScorecard company's scorecard history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_dkim_insufficient_key_lengths** — List DKIM insufficient key length issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard data is available. - **list_all_security_scorecard_issues_dkim_record_detecteds** — List DKIM record detected issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_dkim_weak_signatures** — List DKIM weak signature issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns a list of issue entries from the scorecard event log. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_dmarc_contains_nones** — List DMARC 'contains none' issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, domain, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_dmarc_record_missings** — List DMARC record missing issue entries from a SecurityScorecard scorecard's history event log for a specific effective date. Returns: domain, severity. Required: scorecard_identifier, effective_date. Score history is available for the last 12 months. - **list_all_security_scorecard_issues_domain_missing_https_v_2_s** — List historical "domain_missing_https_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_dos_attack_attempt_detecteds** — List DoS attack attempt detected issue events from a SecurityScorecard scorecard's event history on a specific effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_exploit_attempt_detecteds** — List exploit attempt detected issue findings from a SecurityScorecard company scorecard's history events for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_exploited_products** — List exploited product issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: severity, issue_type, count. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_exposed_cisco_web_uis** — List historical "exposed_cisco_web_ui" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_issues_exposed_embedded_iot_web_servers** — List historical "exposed_embedded_iot_web_server" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_exposed_mac_airport_devices** — List exposed Mac Airport device issue findings from a SecurityScorecard scorecard's historical event for a given effective date. Returns a paginated list of issue entries including id and finding details. Required: scorecard_identifier, effective_date. - **list_all_issues_exposed_network_attached_storage_devices** — List exposed network-attached storage device issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns a list of issue entries documenting exposed network-attached storage devices detected on the company's scorecard at that point in time. Required: scorecard_identifier, effective_date. The company must be added to a portfolio first; history is available for… - **list_all_issues_exposed_personal_information_infos** — List exposed personal information info issues for a SecurityScorecard company scorecard event on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_exposed_printers** — List exposed printer issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns a list of exposed printer issue entries. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard data is available. - **list_all_security_scorecard_issues_fail_to_load_page_components** — List SecurityScorecard fail-to-load page components issue findings for a company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_general_scan_detecteds** — List general scan detected issues for a specific event in a SecurityScorecard company's scorecard history. Returns: id, issue_type, severity, count. Required: scorecard_identifier, effective_date. - **list_all_issues_historical_compromised_credentials_founds** — List historical compromised credentials found issues for a SecurityScorecard company scorecard on a specific effective date. Returns entries with compromised credential finding records whose fields are specific to the SecurityScorecard issue type, including id and attributes. Required: scorecard_identifier, effective_date. - **list_all_issues_hosted_on_object_storage_v_2_s** — List issues hosted on object storage v2 from a SecurityScorecard company's scorecard event history at a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_hsts_incorrect_v_2_s** — List HSTS incorrect v2 issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_industrial_control_devices** — List industrial control device issues from a SecurityScorecard company's scorecard history event log for a specific effective date. Returns issue entries including severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_infected_by_targeted_attacks** — List SecurityScorecard 'infected by targeted attack' issues from a company's scorecard event history for a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_insecure_ftps** — List insecure FTP issue findings from a SecurityScorecard scorecard's event history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_issues_insecure_https_redirect_pattern_v_2_s** — List insecure HTTPS redirect pattern v2 issue findings for a specific SecurityScorecard company scorecard event on a given effective date. Returns a paginated collection of issue finding entries, each including its id. Required: scorecard_identifier, effective_date. - **list_all_issues_insecure_server_certificate_key_sizes** — List insecure server certificate key size issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: entries. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_insecure_telnets** — List insecure telnet issue findings from a SecurityScorecard company scorecard's history event on a specific effective date. Returns entries with id, severity, and status for each insecure telnet finding. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_iot_cameras** — List IoT camera issue findings from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_issues_ip_black_list_due_malicious_activities** — List IP black list issues due to malicious activity from a SecurityScorecard scorecard's event history for a specific effective date. Returns a paginated collection of issue entries including id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_java_debuggers** — List Java debugger issues for a SecurityScorecard company scorecard's history events on a specific effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date. - **list_all_issues_known_compromised_or_hostile_hosts** — List known compromised or hostile host issue findings for a SecurityScorecard company on a specific event-log date. Returns: entry_id, severity, domain, discovered_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_leaked_credentials_infos** — List leaked credentials information issues for a SecurityScorecard company scorecard history event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_links_to_insecure_websites** — List links to insecure website issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_local_file_path_exposed_via_url_schemes** — List SecurityScorecard issue findings of type 'local_file_path_exposed_via_url_scheme' from a company's scorecard event history for a specific effective date. Returns a paginated collection of issue finding entries extracted from the scorecard event log. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_mail_server_unusual_ports** — List mail server unusual port issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns a collection of issue entries representing findings recorded on that date. Required: scorecard_identifier, effective_date. - **list_all_issues_malicious_botnet_c_and_c_server_detecteds** — List malicious botnet C&C server detected issue entries from a SecurityScorecard company's scorecard event history for a specific effective date. Returns a collection of issue records associated with detected malicious botnet command-and-control servers. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_malicious_scan_detecteds** — List malicious scan detected issues for a SecurityScorecard scorecard's historical event at a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_issues_malicious_tor_exit_node_detecteds** — List malicious Tor exit node detected issue findings for a SecurityScorecard scorecard at a specific effective date in its scorecard history. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_issues_malicious_tor_relay_router_node_detecteds** — List historical "malicious_tor_relay_router_node_detected" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, ip, port, country_city, protocol, app_proto, affected_product, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_issues_malicious_user_agent_detecteds** — List malicious user agent detected issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id, created_at. Required: scorecard_identifier, effective_date. Score history is available for any date range within the last 12 months. - **list_all_security_scorecard_issues_malware_detecteds** — List malware detected issues recorded at a specific event date in a SecurityScorecard company's scorecard history. Returns entries of malware detection issue records, each with id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_malware_infections** — List malware infection issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: entries with family, count, and scan_date for each detected malware infection. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_malware_infection_trails** — List malware infection trail issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_issues_microsoft_exchange_0_day_vulnerabilities** — List Microsoft Exchange 0-day vulnerability issues from a SecurityScorecard company scorecard's history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_microsoft_exchange_http_api_vulnerabilities** — List historical "microsoft_exchange_http_api_vulnerability" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_minecraft_servers** — List SecurityScorecard minecraft_server issue findings for a specific scorecard on a given effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_issues_mirai_botnet_traffic_detecteds** — List SecurityScorecard mirai botnet traffic detected issue findings from a scorecard's history events on a specific effective date. Returns entries describing each detected mirai botnet traffic issue from the scorecard event log. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_mysql_server_empty_passwords** — List MySQL server empty password issue events from a SecurityScorecard company scorecard's history for a specific effective date. Returns issue event entries from the scorecard event log that explain score changes such as new issues and resolved issues. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_open_ports** — List open port issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns entries describing exposed open ports with their port number, service, and host details. Required: scorecard_identifier, effective_date. - **list_all_issues_openssl_critical_vulnerabilities** — List historical OpenSSL critical vulnerability issue events from a SecurityScorecard company scorecard's event log at a specific effective date. Events in the event log explain score changes and work as a news feed of scorecard updates such as new issues, issues getting resolved, and reported breaches. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_outdated_browsers** — List outdated browser issues for a SecurityScorecard company scorecard on a specific effective date from the scorecard's history events. Returns: entries with severity, scorecard_date, and last_seen. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_outdated_os** — List outdated operating system issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns entries of outdated OS issue findings for the company. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_patching_analysis_highs** — List patching analysis high issues from a SecurityScorecard scorecard's event history for a given effective date. Returns a collection of issue entries. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_patching_analysis_lows** — List historical "patching_analysis_low" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, issue_count, resolved_issues, resolved_perc, time_to_patch_avg, range060, range61120, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_patching_analysis_mediums** — List patching analysis medium-severity issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_patching_cadence_highs** — List patching cadence high severity issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns issue entries with their id and issue-specific attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_patching_cadence_lows** — List patching cadence low issue events from a SecurityScorecard company's scorecard history for a given effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_patching_cadence_mediums** — List patching cadence medium issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_issues_patching_cadence_v_3_criticals** — List patching cadence v3 critical issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard history data is accessible. - **list_all_security_scorecard_issues_patching_cadence_v_3_highs** — List high-severity patching cadence v3 issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_patching_cadence_v_3_lows** — List patching_cadence_v3_low issue events from a SecurityScorecard scorecard's history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_patching_cadence_v_3_mediums** — List SecurityScorecard patching cadence v3 medium-severity issue findings from a scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_payment_providers** — List payment provider issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns entries with issue severity, status, and domain. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_potentially_vulnerables** — List potentially vulnerable issues recorded at a specific effective date in a SecurityScorecard scorecard's history event log. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cisco_rv_320_325_s** — List potentially vulnerable Cisco RV 320/325 issue findings from a SecurityScorecard scorecard's historical events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cve_2023_33246_s** — List potentially vulnerable CVE-2023-33246 issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cve_2023_34362_s** — List potentially vulnerable CVE-2023-34362 issues from a SecurityScorecard scorecard's event history at a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cve_2023_3519_s** — List potentially vulnerable CVE-2023-3519 issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cve_2023_37582_s** — List potentially vulnerable CVE-2023-37582 issue entries from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cve_2023_37979_s** — List potentially vulnerable CVE-2023-37979 issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cve_2023_38035_s** — List historical "potentially_vulnerable_cve_2023_38035" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cve_2023_46747_s** — List potentially vulnerable CVE-2023-46747 issues from a SecurityScorecard company's scorecard history events on a given effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cve_2024_21887_s** — List potentially vulnerable CVE-2024-21887 issues from a SecurityScorecard scorecard's history events on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_potentially_vulnerable_cve_2024_46805_s** — List potentially vulnerable CVE-2024-46805 issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_issues_product_exploited_by_ransomware_actors** — List SecurityScorecard issues of type product_exploited_by_ransomware_actors for a specific scorecard's historical event on a given effective date. Returns a list of issue entries from the scorecard event log. Required: scorecard_identifier, effective_date. - **list_all_issues_product_uses_vulnerable_log_4_js** — List 'product_uses_vulnerable_log4j' issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_pva_installations** — List PVA installation issues for a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. Max 50 items per page. - **list_all_security_scorecard_issues_pva_installation_trails** — List PVA (Publicly Vulnerable Application) installation trail issues from a specific scorecard history event on a given effective date in SecurityScorecard. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_ransomware_associations** — List ransomware association issues for a SecurityScorecard company's scorecard event on a given effective date. Returns ransomware association issue entries from the event log. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_ransomware_infections** — List ransomware infection issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns paginated entries of ransomware infection issue records. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_ransomware_infection_trails** — List SecurityScorecard ransomware infection trail issues for a company's scorecard event on a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_ransomware_victims** — List ransomware victim issues for a SecurityScorecard company scorecard on a specific effective date. Returns ransomware victim entries from the scorecard's historical event log. Required: scorecard_identifier, effective_date. - **list_all_issues_redirect_chain_contains_http_v_2_s** — List redirect_chain_contains_http_v2 issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: issue entries including id and name. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_redirect_to_insecure_websites** — List redirect-to-insecure-website issues from a SecurityScorecard company's event history on a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_references_object_storage_v_2_s** — List SecurityScorecard issue references from object storage (v2) for a specific scorecard's history event on a given effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_remote_acceses** — List remote access issues from a SecurityScorecard company scorecard's event history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. Scorecard history is available for the last 12 months and the company must be added to a portfolio first. - **list_issues_sensitive_data_exposure_through_insecure_channels** — List sensitive data exposure through insecure channel issue findings for a SecurityScorecard company scorecard at a specific point in its history. Returns: id, domain, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_server_errors** — List server error issues recorded on a specific event date in a SecurityScorecard company scorecard's history. Returns an array of issue entries from the scorecard event log for the given effective date. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_cassandras** — List SecurityScorecard service_cassandra issues recorded in a specific scorecard's history event on a given effective date. Returns: entries with each issue's id, severity, and issue type. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_cloud_providers** — List historical "service_cloud_provider" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_couchdbs** — List SecurityScorecard service_couchdb issue entries from a company's scorecard event history for a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_dns** — List service DNS issues from a SecurityScorecard company's scorecard event history on a specific effective date. Returns: entries with severity, issue type, and domain details for each DNS finding. Required: scorecard_identifier, effective_date. History is available within the last 12 months. - **list_all_security_scorecard_issues_service_elasticsearches** — List SecurityScorecard service_elasticsearch issue findings for a specific scorecard on a given effective date from the scorecard event history. Returns a paginated list of issue entries including id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_end_of_lifes** — List service end of life issues for a SecurityScorecard company scorecard at a specific effective date in the scorecard's history events. Returns: id and severity for each service end of life issue finding. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_end_of_services** — List service_end_of_service issue findings from a SecurityScorecard scorecard's history event log for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_ftps** — List SecurityScorecard service_ftp issue findings for a company's scorecard on a specific effective date from the scorecard history event log. Returns: entries with domain, port, and severity for each service_ftp issue finding. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_http_proxies** — List SecurityScorecard service_http_proxy issue findings from a scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_imaps** — List historical "service_imap" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_ldaps** — List service LDAP issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_ldap_anonymous** — List SecurityScorecard service_ldap_anonymous issue findings for a specific scorecard event on a given effective date. Returns: entries with issue id, severity, and finding details. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_microsoft_sqls** — List SecurityScorecard Microsoft SQL service issues for a company's scorecard history event on a specific effective date. Returns issue entries with severity, status, and service-related details. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_mongodbs** — List SecurityScorecard MongoDB service issues recorded in a company's scorecard event history for a specific effective date. Returns: id, issue_type, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_mysqls** — List MySQL service issues from a SecurityScorecard scorecard's event history on a given effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_netbus_remote_acceses** — List SecurityScorecard scorecard history event issues of type service_netbus_remote_access for a specific company and effective date. Returns a list of issue event entries from the scorecard event log. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_networkings** — List service networking issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns entries with id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_open_vpns** — List SecurityScorecard service open VPN issue findings recorded during a specific scorecard history event on a given effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_oracle_dbs** — List SecurityScorecard service_oracle_db issue findings for a company's scorecard history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_oracle_registries** — List SecurityScorecard service oracle registry issue findings from a scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_pop_3_s** — List SecurityScorecard POP3 service issues for a specific scorecard event on a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_postgresqls** — List service_postgresql issues recorded in a SecurityScorecard company's scorecard history event log at a specific effective date. Returns entries of service_postgresql issue findings from that date's event snapshot. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_pptps** — List SecurityScorecard service PPTP issues for a specific company scorecard event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_pulse_vpns** — List SecurityScorecard service pulse VPN issues for a specific company scorecard on a given effective date, retrieved from the scorecard history events. Returns entries with severity, status, and issue count details. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_rdps** — List SecurityScorecard service RDP issues from a company's scorecard event history for a given effective date. Returns a paginated list of service_rdp issue entries. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_redis** — List service_redis issues from a SecurityScorecard company's scorecard event log history for a specific effective date. Returns issue entries including id, severity, and created_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_rsyncs** — List service_rsync issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_smbs** — List SecurityScorecard service_smb issues from a company scorecard's history events on a specific effective date. Returns issue entries from the scorecard event log showing service SMB issue changes for that date. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_soaps** — List service SOAP issue entries from a SecurityScorecard company scorecard's history event log for a specific effective date. Returns an array of entries describing each service SOAP issue finding recorded in the event log. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_socks_proxies** — List service SOCKS proxy issue findings from a SecurityScorecard company's scorecard event history at a given effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_telnets** — List SecurityScorecard service telnet issues from a scorecard's event history for a specific effective date. Returns entries with domain, port, and severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_vncs** — List service VNC issues from a SecurityScorecard company scorecard's historical event log for a given effective date. Returns a list of service VNC issue entries. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_vuln_host_highs** — List high-severity service vulnerability host issues from a SecurityScorecard company's scorecard historical event log on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_vuln_host_lows** — List low-severity service vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_vuln_host_mediums** — List medium-severity service vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date. - **list_all_issues_service_vuln_host_v_3_criticals** — List critical service vulnerability host issues (service_vuln_host_v3_critical) from a SecurityScorecard company's scorecard history events on a specific effective date. Returns vulnerability issue entries for the specified scorecard and date. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_vuln_host_v_3_highs** — List high-severity service vulnerability host issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_service_vuln_host_v_3_lows** — List low-severity service vulnerability host issues (service_vuln_host_v3_low) for a SecurityScorecard company scorecard event on a specific effective date. Returns entries with domain, cve, and ip for each vulnerability finding. Required: scorecard_identifier, effective_date, domain. - **list_all_security_scorecard_issues_service_vuln_host_v_3_mediums** — List medium-severity service vulnerability host issues for a SecurityScorecard scorecard event on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_site_emits_browser_logs** — List site_emits_browser_log issue findings from a SecurityScorecard company's scorecard event history for a specific effective date. Returns entries of issue findings from the event log. Required: scorecard_identifier, effective_date. - **list_all_issues_site_requests_data_over_insecure_channels** — List SecurityScorecard 'site_requests_data_over_insecure_channel' issue findings from a scorecard's event history for a specific effective date. Returns: domain, severity, first_observed, last_observed. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_spa_browsers** — List SPA browser issues for a specific SecurityScorecard scorecard event on a given effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_spf_record_malformeds** — List SPF record malformed issue events from a SecurityScorecard scorecard's event history for a given effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_spf_record_missings** — List SecurityScorecard SPF record missing issue events from a company scorecard's history for a given effective date. Returns entries from the scorecard event log describing updates related to the spf_record_missing issue type, such as new issues and resolved issues. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_spf_record_softfails** — List historical "spf_record_softfail" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, domain, record, analysis, analysis_description, reason, effective_date, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_spf_record_wildcards** — List SPF record wildcard issue entries from a SecurityScorecard company scorecard's history event log for a specific effective date. The scorecard event log tracks scorecard updates such as new issues being detected and issues getting resolved. Returns a collection of SPF record wildcard issue entries from the event history. Required: scorecard_identifier, effective_date. - **list_all_issues_sql_payload_using_tor_proxy_detecteds** — List SecurityScorecard event log issues of type sql_payload_using_tor_proxy_detected for a company's scorecard on a specific effective date. Returns the event log entries describing detected SQL payload issues using Tor proxy for the given scorecard and date. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_ssh_weak_ciphers** — List SSH weak cipher issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_ssh_weak_macs** — List historical "ssh_weak_mac" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, banner, evidence, connection_attributes, reason, effective_date, group_status. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_ssh_weak_protocols** — List SSH weak protocol issues from a SecurityScorecard scorecard's historical event log for a specific effective date. Returns an array of SSH weak protocol issue finding entries. Required: scorecard_identifier, effective_date. - **list_all_issues_subdomain_dmarc_contains_nones** — List SecurityScorecard subdomain DMARC issue entries (subdomains with no DMARC record) from a scorecard's event log for a specific effective date. Returns: entries with id and subdomain DMARC issue details. Required: scorecard_identifier, effective_date. - **list_all_issues_synth_high_risk_appsec_vulnerabilities** — List synthetic high-risk application security vulnerability issues recorded in a SecurityScorecard scorecard's event history for a given effective date. Returns: vulnerability issue entries with id, severity, and count. Required: scorecard_identifier, effective_date. - **list_all_issues_synth_possible_initial_acceses** — List SecurityScorecard synth_possible_initial_access issues for a specific scorecard event on an effective date. Returns an array of issue entries from the scorecard's event history. Required: scorecard_identifier, effective_date. - **list_all_issues_targeted_by_threat_actor_groups** — List SecurityScorecard scorecard issues targeted by threat actor groups for a specific effective date in the scorecard event history. Returns: id, issue_type, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_telephonies** — List SecurityScorecard telephony issues for a company scorecard on a specific effective date from the scorecard history event log. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_issues_threat_actor_hosting_infrastructures** — List threat actor hosting infrastructure issues for a SecurityScorecard company scorecard event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tls_ocsp_staplings** — List TLS OCSP stapling issues from a SecurityScorecard scorecard's historical event on a specific effective date. Returns a collection of issue entries detailing the TLS OCSP stapling findings recorded for that event. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tls_weak_ciphers** — List TLS weak cipher issues for a specific historical event on a SecurityScorecard company scorecard. Returns entries describing TLS weak cipher issue findings from the scorecard event log. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tls_weak_protocols** — List TLS weak protocol issues from a SecurityScorecard company scorecard's event history at a specific effective date. Returns: domain, port, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tlscert_excessive_expirations** — List historical "tlscert_excessive_expiration" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, target, observations, sha256_fingerprint, evidence, output, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tlscert_expireds** — List TLS certificate expired issues for a SecurityScorecard scorecard at a specific effective date in the event history. Returns: severity, domain, port. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tlscert_no_revocations** — List SecurityScorecard TLS certificate no-revocation issue entries from a company's scorecard event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tlscert_revokeds** — List SecurityScorecard TLS certificate revocation issues from a scorecard's event-log history for a specific effective date. Returns a list of revoked TLS certificate issue entries from the scorecard's event history. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tlscert_self_signeds** — List TLS self-signed certificate issue findings from a specific SecurityScorecard scorecard history event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tlscert_weak_signatures** — List TLS certificate weak signature issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns entries with domain, port, and severity for each weak TLS certificate signature finding. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tor_servers** — List SecurityScorecard tor_server issues recorded for a company's scorecard on a specific effective date from the scorecard event history. Returns entries with domain, severity, is_positive, first_seen, and last_seen. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_tor_traffic_detecteds** — List Tor traffic detected issues for a SecurityScorecard company scorecard's history event on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_typosquats** — List typosquat issue findings for a SecurityScorecard company scorecard on a specific event date in the scorecard's history. Returns a paginated list of typosquat issue entries from the scorecard event log. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_uces** — List historical "uce" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, src_ip, sources, reason, effective_date, group_status. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_unsafe_sri_v_2_s** — List historical "unsafe_sri_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_upnp_accessibles** — List UPnP accessible SecurityScorecard issue findings for a specific scorecard event on a given effective date. Returns: severity, port, domain. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_uses_go_daddy_infrastructures** — List GoDaddy infrastructure issues recorded in a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_issues_uses_go_daddy_managed_wordpreses** — List uses_go_daddy_managed_wordpress issue findings from a SecurityScorecard company's scorecard event history for a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_waf_detected_v_2_s** — List historical "waf_detected_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_web_vuln_host_highs** — List high-severity web vulnerability host issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns issue entries from the event log. Required: scorecard_identifier, effective_date. History is available within the last 12 months. - **list_all_security_scorecard_issues_web_vuln_host_lows** — List low-severity web vulnerability host issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: entries with domain, cve, and ip for each vulnerability host finding. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_web_vuln_host_mediums** — List medium-severity web vulnerability host issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: domain, severity, count. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_web_vuln_host_v_3_criticals** — List critical web vulnerability host issues (web_vuln_host_v3_critical) from a SecurityScorecard scorecard's event history for a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_web_vuln_host_v_3_highs** — List high-severity web vulnerability host issues (web_vuln_host_v3_high) from a SecurityScorecard scorecard's history events on a specific effective date. Returns: id, domain, cve, ip. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_web_vuln_host_v_3_lows** — List low-severity web vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date, domain. - **list_all_security_scorecard_issues_web_vuln_host_v_3_mediums** — List medium-severity web vulnerability host issues from a SecurityScorecard scorecard's event log history for a specific effective date. Returns entries of web vulnerability host findings from the scorecard event log. Required: scorecard_identifier, effective_date. Scorecard history is available for the last 12 months. - **list_all_issues_webapp_vulnerable_to_spring_4_shells** — List webapp vulnerable to Spring4Shell issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_website_copyright_expireds** — List website copyright expired issues for a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_website_copyright_up_to_dates** — List website copyright up to date issues for a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_websocket_receives_datas** — List SecurityScorecard 'websocket receives data' issue events from a company's scorecard event history for a specific effective date. Returns: id, type, severity for each issue entry. Required: scorecard_identifier, effective_date. - **list_all_issues_websocket_requests_contain_sensitive_fields** — List SecurityScorecard historical issue findings of type 'websocket_requests_contain_sensitive_fields' for a company scorecard at a specific effective date. Returns a paginated list of entries with id. Required: scorecard_identifier, effective_date. - **list_all_security_scorecard_issues_websocket_sends_datas** — List SecurityScorecard websocket sends data issues for a specific scorecard event on a given effective date. Returns a paginated collection of issue entries from the scorecard's history event log. Required: scorecard_identifier, effective_date. - **list_all_issues_x_content_type_options_incorrect_v_2_s** — List SecurityScorecard x_content_type_options_incorrect_v2 issue findings from a company's scorecard history event on a specific effective date. Returns issue finding entries from the scorecard event log. Required: scorecard_identifier, effective_date. - **list_all_issues_x_frame_options_incorrect_v_2_s** — List X-Frame-Options incorrect issue findings from a SecurityScorecard company scorecard's history events for a given effective date. Returns a collection of issue entries associated with the x_frame_options_incorrect_v2 issue type. Required: scorecard_identifier, effective_date. - **list_all_issues_x_xss_protection_incorrect_v_2_s** — List SecurityScorecard X-XSS-Protection incorrect v2 issue findings for a specific scorecard history event on a given effective date. Returns: id, domain, severity. Required: scorecard_identifier, effective_date. - **list_all_issues_xss_payload_using_tor_proxy_detecteds** — List SecurityScorecard 'xss_payload_using_tor_proxy_detected' issue findings for a specific scorecard's history event on a given effective date. Returns a paginated collection of issue finding entries from the scorecard event log. Required: scorecard_identifier, effective_date. Company must be added to a portfolio before scorecard data is accessible. - **create_a_security_scorecard_custom_scorecard** — Create a custom scorecard in SecurityScorecard for a subsidiary or subset of a regular scorecard. Returns: id, attributes. - **get_single_security_scorecard_custom_scorecard_by_id** — Get a custom scorecard in SecurityScorecard by id. Returns: id, attributes. Required: id. - **update_a_security_scorecard_custom_scorecard_by_id** — Update a custom scorecard in SecurityScorecard by id. Returns: id, attributes. Required: id. - **delete_a_security_scorecard_custom_scorecard_by_id** — Delete a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id. - **security_scorecard_custom_scorecard_filters_bulk_update** — Update the filter configuration for a SecurityScorecard custom scorecard. Returns: id. Required: id. - **security_scorecard_custom_scorecard_filters_bulk_delete** — Delete the filter configuration for a SecurityScorecard custom scorecard. Returns an empty 204 response on success. Required: id. - **security_scorecard_custom_scorecard_sources_bulk_update** — Update the sources of a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id. - **security_scorecard_custom_scorecard_sources_bulk_delete** — Delete the sources of a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id. - **list_all_security_scorecard_compliance_frameworks** — List compliance frameworks available in SecurityScorecard. Returns: id. - **get_single_security_scorecard_compliance_framework_by_id** — Get a single compliance framework in SecurityScorecard by id. Returns: id. Required: id. - **get_single_security_scorecard_vendor_detection_portfolio_by_id** — Get a single SecurityScorecard portfolio by its id. Returns: id, name, description, privacy. Required: id. - **list_all_security_scorecard_vendor_detection_fourth_parties** — List fourth-party vendors detected by SecurityScorecard's vendor detection for a given domain. Returns: domain. Required: domain. - **list_all_security_scorecard_vendor_detection_products** — List vendor detection products detected on a domain in SecurityScorecard. Returns: id, name. Required: domain. - **list_all_security_scorecard_vendor_detection_risks** — List vendor detection risks for a domain in SecurityScorecard. Returns a paginated list of risk entries from the vendor detection analysis for the specified domain. Required: domain. - **list_all_security_scorecard_vendor_detection_third_parties** — List third-party vendors and technologies detected on a domain via SecurityScorecard's Attack Surface Intelligence. Returns a paginated collection of detected third-party entries. Required: domain. - **create_a_security_scorecard_csv_export** — Create a compliance CSV export report in SecurityScorecard. Returns: report_url, status. The report is generated asynchronously; use the returned report_url to download the CSV file once the status indicates completion. - **create_a_security_scorecard_reports_detailed** — Generate a detailed SecurityScorecard report asynchronously. Returns: report_url, status. The report is processed in the background and can be downloaded from the returned report_url once complete. Subject to a stricter per-endpoint rate limit; avoid high-frequency automated calls. - **create_a_security_scorecard_reports_events_json** — Generate a SecurityScorecard scorecard events report as JSON for asynchronous download. Returns: report_url, status. The report is processed asynchronously and can be downloaded from the returned report_url once complete. - **list_all_security_scorecard_reports_files** — List SecurityScorecard report files at a given file path. Returns: id, name, report_url, status. Required: file_path. - **create_a_security_scorecard_reports_footprint_domain** — Generate a footprint domains report in SecurityScorecard. Returns: report_url, status. The report is processed asynchronously; once complete, download the generated file from the returned report_url. - **create_a_security_scorecard_reports_footprint_ip** — Generate a SecurityScorecard footprint IPs report asynchronously. Returns: report_url, status. The report_url can be used to download the generated file once processing completes. - **create_a_security_scorecard_reports_full_scorecard_json** — Generate a full scorecard JSON report in SecurityScorecard. The report is produced asynchronously. Returns: report_url, status. Once the status indicates completion, download the report from the report_url. - **create_a_security_scorecard_reports_issue** — Generate an issues report in SecurityScorecard. Returns: report_url, status. The report is processed asynchronously — download the file from the returned report_url once generation completes. - **create_a_security_scorecard_reports_partnership** — Create a partnership report in SecurityScorecard. Returns: report_url, status. The report is generated asynchronously — download it from report_url once complete. - **create_a_security_scorecard_reports_portfolio** — Generate a portfolio report in SecurityScorecard. The report is processed asynchronously and can be downloaded from the returned URL once complete. Returns: report_url, status. - **list_all_security_scorecard_reports_recents** — List recently generated SecurityScorecard reports. Returns: report_url, status. Each entry includes a download URL for the generated report file (e.g. csv, pdf) and its current processing status. - **create_a_security_scorecard_reports_scorecard_footprint** — Generate a Scorecard Footprint report for a company, describing the digital footprint attributed to its scorecard. Returns the generated report id, which is then used to poll for and download the finished file. Optionally scope the report by ips, subdomains, or countries, and choose pdf or csv output. Required: scorecard_identifier. - **create_a_security_scorecard_reports_summary** — Generate a Company Summary report for a company's SecurityScorecard scorecard. Returns the generated report id, which is then used to poll for and download the finished file. Optionally set branding when white-labeling is enabled for your account. Required: scorecard_identifier. - **create_a_security_scorecard_invitation** — Create an invitation in SecurityScorecard to invite a company to access and improve their own scorecard. All invited companies gain a free account. Returns: id, domain, created_at. Required: domain. - **create_a_security_scorecard_issue_feedback_validation_request** — Submit a feedback validation request for a specific issue type on a SecurityScorecard company scorecard. Returns a confirmation of the validation request submission. Required: domain, type. - **create_a_security_scorecard_issue_feedback** — Submit feedback to refute an issue of a specific type on a company's SecurityScorecard scorecard. Returns a confirmation of the submitted feedback. Required: domain, type. - **list_all_security_scorecard_metadata_factors** — List all available SecurityScorecard factor types and their metadata. Returns: id, name. - **list_all_security_scorecard_metadata_issue_types** — List all SecurityScorecard issue types. Returns: id, name. - **get_single_security_scorecard_metadata_issue_type_by_id** — Get a single SecurityScorecard issue type by id. Returns: id, name. Required: id. - **list_all_security_scorecard_notifications_recents** — List recent SecurityScorecard notifications for a user by username, generated from configured scorecard alert triggers. Returns notification entries including id. Required: username. - **list_all_security_scorecard_metadata_service_providers** — List SAML service provider metadata entries in SecurityScorecard. Returns: id, name. - **list_all_security_scorecard_jiras** — Validate Jira secrets configured in SecurityScorecard by calling the validate-jira-secrets action endpoint. Returns a validation result object whose fields are not documented in the upstream SecurityScorecard API reference. - **list_all_security_scorecard_apps_jira_legacies** — Validate Jira secrets for the Jira Legacy app integration in SecurityScorecard. This GET action endpoint checks whether the configured Jira credentials are valid. Returns an empty 204 response on success. - **list_all_security_scorecard_jira_legacy_installs** — List SecurityScorecard Jira Legacy app installations. Returns: id, created_at, updated_at. Max 50 items per page. - **create_a_security_scorecard_jira_legacy_install** — Install or configure the SecurityScorecard Jira Legacy app integration. Returns: id, created_at, updated_at. - **list_all_security_scorecard_jira_legacy_installation_errors** — List Jira legacy app installation errors in SecurityScorecard. Returns a paginated collection of error entries, each containing id and name. Max 50 items per page. - **list_all_security_scorecard_jira_legacy_redirect_from_sscs** — List Jira legacy redirect entries from SecurityScorecard. Returns: id, name. No required parameters. - **list_all_security_scorecard_jira_installs** — List Jira app installations in SecurityScorecard. Returns a paginated collection of install records. Returns: id. - **create_a_security_scorecard_jira_install** — Install a Jira app integration in SecurityScorecard. Returns the created install record. Returns: id. - **list_all_security_scorecard_jira_installation_errors** — List Jira installation errors recorded in SecurityScorecard. Returns a paginated collection of installation error records identified by id. - **list_all_security_scorecard_jira_redirect_from_sscs** — List Jira redirect-from-SSC entries in SecurityScorecard. The upstream API reference does not document the response shape for this endpoint; entries are returned under the standard `entries` pagination envelope. Returns: id, attributes. - **list_all_security_scorecard_apps_jiras** — List Jira app assets by asset filename in SecurityScorecard. Returns: id, name. Required: asset_filename. - **create_a_security_scorecard_app_job** — Create a new job for a SecurityScorecard app. Returns: id, created_at, updated_at. Required: app_id. - **update_a_security_scorecard_app_job_by_id** — Update a SecurityScorecard app job by id. Returns: id, created_at, updated_at. Required: app_id, id. - **list_all_security_scorecard_audits_api_logs** — List SecurityScorecard API audit log entries. Returns: id, created_at, updated_at. The full field set of each audit log entry is not enumerated in the available SecurityScorecard API documentation. - **list_all_security_scorecard_companie_active_issues** — List a company's currently active issues on its SecurityScorecard scorecard, grouped by issue type. Returns issue_types, each with name, issues, and issues_count. Optionally filter with issue_types. Required: scorecard_identifier. - **get_single_security_scorecard_domain_migration_statuses_id_by_id** — Get a domain migration status by id in SecurityScorecard. Returns the domain migration status record for the specified identifier. Required: id. - **list_all_security_scorecard_targets** — List domain migration statuses between a source and target domain in SecurityScorecard. Returns: source, target, status. Required: source, target. - **security_scorecard_footprint_tags_bulk_create** — Bulk create tags for SecurityScorecard footprint scorecards by submitting a JSON array of tag objects. Returns the created tags including their id and name. Required: a JSON array of tag objects, each with a name. - **list_all_security_scorecard_assets_domains** — List domain assets discovered within a SecurityScorecard footprint for a given parent domain. Returns: id. Required: parent_domain. - **list_all_security_scorecard_assets_ips** — List IP address assets discovered in the SecurityScorecard footprint for a given parent domain. Returns a paginated collection of IP entries from the domain's attack surface. Required: parent_domain. - **create_a_security_scorecard_assignees_domain** — Create a domain assignee for a SecurityScorecard footprint by parent domain. Returns an empty 204 response on success. Required: parent_domain. - **create_a_security_scorecard_assignees_ip** — Create an IP assignee for a SecurityScorecard footprint identified by its parent domain. Returns: ip, parent_domain, created_at. Required: parent_domain, ip. - **list_all_security_scorecard_assignee_assets** — List assignee assets for a given parent domain and asset type in SecurityScorecard's footprint. Returns: id, name. Required: parent_domain, asset_type. - **list_all_security_scorecard_attribution_logs** — List attribution log entries for a SecurityScorecard footprint by parent domain. Returns: id, created_at, updated_at. Required: parent_domain. - **security_scorecard_domain_associate_tags_bulk_create** — Bulk associate tags with a domain's assets in SecurityScorecard's footprint. Returns an empty 204 response on success. Required: parent_domain. - **security_scorecard_ip_associate_tags_bulk_create** — Bulk associate tags with IPs for a parent domain footprint in SecurityScorecard. Returns an empty 204 response on success. Required: parent_domain. - **list_all_security_scorecard_intake_vendor_forms** — List current intake vendor forms in SecurityScorecard. Returns: id, attributes. No required parameters. - **list_all_security_scorecard_forms_access_domains** — List access domains for the current SecurityScorecard intake vendor form. Returns: id, name. - **security_scorecard_forms_access_domains_bulk_update** — Update the access domains for the current SecurityScorecard intake vendor form by replacing the existing set. Returns: id, name. Required: entries. - **list_all_security_scorecard_forms_publish_status** — List the current publish status of intake vendor forms in SecurityScorecard. Returns a paginated collection of publish status entries. The upstream response is paginated with a maximum of 50 items per page. - **create_a_security_scorecard_forms_question** — Create a new question on the current SecurityScorecard intake vendor form. Returns the created question object including its id. - **update_a_security_scorecard_forms_question_by_id** — Update an existing question on the current SecurityScorecard intake vendor form by id. Returns the updated question object including its id. Required: id. - **delete_a_security_scorecard_forms_question_by_id** — Delete a question from the current SecurityScorecard intake vendor form by id. Returns an empty 204 response on success. Required: id. - **security_scorecard_forms_questions_reorders_bulk_update** — Reorder questions on the current SecurityScorecard intake vendor form by submitting an ordered list of question IDs reflecting the desired new sequence. Returns an empty 204 response on success. Required: a JSON array of question IDs in the new order. - **list_all_security_scorecard_forms_risk_settings** — List current risk settings for intake vendor forms in SecurityScorecard. Returns a paginated collection of risk setting entries via the entries array, each containing id and name. Max 50 items per page. - **security_scorecard_forms_risk_settings_bulk_update** — Update current risk settings for intake vendor forms in SecurityScorecard. Returns: id, name. Required: entries. - **create_a_security_scorecard_forms_status** — Update the status of the current vendor intake form in SecurityScorecard. Returns an empty 204 response on success. - **create_a_security_scorecard_forms_setup** — Create a forms setup in SecurityScorecard by submitting a POST request to the intake-vendor forms setup endpoint. The response shape is not documented in the available SecurityScorecard API reference; treat the returned body as opaque. No required caller-supplied parameters are documented beyond the request body. - **list_all_security_scorecard_intake_vendor_review_items** — List intake vendor review items in SecurityScorecard. Returns: id, name. - **list_all_security_scorecard_intake_vendor_risk_tier_templates** — List risk tier templates for vendor intake in SecurityScorecard. Returns a collection of risk tier template records from the entries array. - **security_scorecard_intake_vendor_risk_tier_templates_bulk_update** — Update intake vendor risk tier templates in SecurityScorecard by submitting a JSON request body. Returns the updated risk tier template object including its id, name, and tier configuration. - **get_single_security_scorecard_intake_vendor_submission_by_id** — Get a specific SecurityScorecard intake vendor submission by id. Returns the submission object with content-type-specific fields including id and attributes. Required: id. - **update_a_security_scorecard_intake_vendor_submission_by_id** — Update a SecurityScorecard intake vendor submission by id with partial data. Returns the updated submission object with content-type-specific fields including id and attributes. Required: id. - **list_all_security_scorecard_jira_leen_installs** — List SecurityScorecard Jira Leen installs. Returns install records including id and additional attributes whose individual fields are not enumerated in the upstream API documentation. Max 50 items per page. - **list_all_security_scorecard_jira_leen_installation_errors** — List Jira Leen installation errors in SecurityScorecard. Returns: id, name. Max 50 items per page. - **list_all_security_scorecard_jira_leen_redirect_from_sscs** — List redirect entries from SecurityScorecard for the Jira Leen integration. Returns: id. - **list_all_security_scorecard_leen_callbacks** — List leen callbacks in SecurityScorecard filtered by app, organization, and status. Returns a paginated collection of callback entries with id and name. Required: app_id, organization_id, status. - **delete_a_security_scorecard_managed_services_customer_by_id** — Delete a managed services customer in SecurityScorecard by id. Returns an empty 204 response on success. Required: id. - **list_all_security_scorecard_managed_services_customers** — List managed services customers in SecurityScorecard. Returns: id, created_at, updated_at. - **get_single_security_scorecard_managed_services_document_by_id** — Get a specific managed services document in SecurityScorecard by id. Returns: id, created_at, updated_at. Required: id. - **security_scorecard_managed_services_documents_bulk_delete** — Delete managed services documents in SecurityScorecard. Returns an empty 204 response on success. - **get_single_security_scorecard_documents_download_by_id** — Download a managed services document in SecurityScorecard by id. Returns: report_url, status. Required: id. - **create_a_security_scorecard_documents_upload** — Upload a document to SecurityScorecard managed services via POST. Returns: id, created_at, updated_at. - **security_scorecard_documents_uploads_bulk_update** — Update an uploaded document in SecurityScorecard managed services via PUT. Returns: id, created_at, updated_at. - **get_managed_services_managed_customer_by_id** — Get a SecurityScorecard managed customer by id. Returns the managed customer record including its id and other customer attributes. Required: id. - **security_scorecard_reports_likelihood_assessments_bulk_update** — Update a SecurityScorecard likelihood assessment report. Returns: report_url, status. Required: report_url, status. - **security_scorecard_reports_likelihood_assessments_bulk_delete** — Delete a SecurityScorecard likelihood assessment report. Returns: report_url, status. Required: report_url. - **security_scorecard_reports_remediation_plans_bulk_update** — Update a remediation plan report in SecurityScorecard by submitting a report URL and status. Returns: report_url, status. Required: report_url, status. - **list_all_security_scorecard_max_breaches** — List breach entries from the SecurityScorecard Max platform. Returns: id, name. The response is paginated; the upstream API wraps results in an entries array. - **security_scorecard_max_breaches_bulk_update** — Update SecurityScorecard breach partner findings via the Max platform. Returns: report_url, status. - **get_single_security_scorecard_breaches_report_by_id** — Get a SecurityScorecard breach report by id. Returns: report_url, status. Required: id. - **list_all_security_scorecard_customer_breaches** — List customer breach records from SecurityScorecard. Returns a paginated collection of breach entries. No required parameters. - **list_all_security_scorecard_customer_executive_summaries** — List customer executive summaries from SecurityScorecard's MAX platform. Returns the executive summary object with content-type-specific fields; the available fields depend on the upstream MAX schema and are not individually documented in the public API reference. Entries are paginated. - **security_scorecard_customer_executive_summaries_bulk_update** — Update a customer's executive summary in SecurityScorecard's MAX platform. Returns: id, attributes. Required: customer_id. - **list_all_security_scorecard_customer_findings** — List customer security findings from SecurityScorecard's MAX platform. Returns a paginated list of finding entries, each including its id. Max 50 entries per page. - **list_all_security_scorecard_customer_historical_scores** — List historical SecurityScorecard scores for a customer scorecard over a date range within the last 12 months. Returns: score, grade, date. Required: scorecard_identifier. Optional timing granularity (daily, weekly, or monthly) defaults to daily. - **list_all_customer_incident_likelihood_over_times** — List SecurityScorecard Max customer incident-likelihood time-series entries. Returns: date, likelihood. The response is paginated via the standard entries wrapper. - **list_all_security_scorecard_customer_incident_likelihood_trends** — List SecurityScorecard customer incident likelihood trends over time. Returns: date, likelihood. - **list_all_security_scorecard_customer_likelihood_assessments** — List customer likelihood assessments in SecurityScorecard. Returns: id, attributes. The response field set for each assessment record is not documented in the available API reference; consult the SecurityScorecard MAX API docs for the field-level breakdown. - **get_customer_likelihood_assessment_by_id** — Get a specific SecurityScorecard customer likelihood assessment by id. Returns the likelihood assessment object including its id. Required: id. - **list_all_security_scorecard_raw_findings_daily_avgs** — List daily-average raw findings for a customer in SecurityScorecard. Returns a paginated collection of entries, each representing a daily-average raw finding record. No required parameters. - **list_all_security_scorecard_raw_findings_daily_counts** — List daily counts of raw findings in SecurityScorecard. Returns: date, count. - **list_all_security_scorecard_customer_remediation_plans** — List customer remediation plans in SecurityScorecard. Returns a paginated collection where each entry includes: id. - **get_single_security_scorecard_customer_remediation_plan_by_id** — Get a single customer remediation plan in SecurityScorecard by id. Returns: id. Required: id. - **list_all_security_scorecard_reports_downloads** — List SecurityScorecard customer report download entries. Returns: report_url, status. Once a report's status indicates completion, use the report_url to download the generated file (e.g. CSV, PDF). - **list_all_security_scorecard_reports_vendors** — List SecurityScorecard vendor reports. Returns: report_url, status. No required parameters. - **list_all_security_scorecard_customer_tags_counts** — List customer tags counts in SecurityScorecard. Returns a paginated collection of tag count entries extracted from the entries array. No required parameters. - **list_all_security_scorecard_customer_vendors** — List customer vendors in SecurityScorecard. Returns a paginated collection of vendor records via the entries array. Returns: id, name. - **get_single_security_scorecard_customer_vendor_by_id** — Get a single customer vendor by id in SecurityScorecard. Returns: id, name. Required: id. - **list_all_security_scorecard_customer_vendors_improvements** — List vendor score improvements in SecurityScorecard. Returns: id, domain, name, score, grade, improvement, created_at. Entries are paginated using the standard SecurityScorecard page/size pagination structure. - **list_all_security_scorecard_customer_vendors_risk_highlights** — List vendor risk highlights for customers in SecurityScorecard. Returns: id, created_at, updated_at. No required parameters. - **list_all_vendors_risk_matrix_incident_likelihoods** — List incident likelihood entries for the vendors risk matrix in SecurityScorecard MAX. Returns a paginated collection of incident likelihood records unwrapped from the entries array. No required parameters. - **list_all_vendors_risk_matrix_indicator_severities** — List indicator severity entries for the vendors risk matrix in SecurityScorecard. Returns a paginated collection of indicator severity entries (unwrapped from the `entries` array) with id, name, and severity. No required parameters. - **list_all_security_scorecard_slots** — List slots for a SecurityScorecard customer by customer_id. Returns a paginated collection of slot records; each entry includes id. Required: customer_id. - **security_scorecard_slots_bulk_update** — Update slots for a SecurityScorecard customer by customer_id via a JSON request body. Returns the updated slot record including id. Required: customer_id. - **list_all_security_scorecard_customer_acceses** — List customer access records for a specific SecurityScorecard customer. Returns: id, name. Required: customer_id. - **create_a_security_scorecard_customer_accese** — Create customer access for a SecurityScorecard customer by customer id. Returns: id. Required: customer_id. - **list_all_security_scorecard_customer_managed_questionnaires** — List managed questionnaires for a SecurityScorecard customer. Returns a paginated collection of questionnaire records (via the entries array) with id and name. Required: customer_id. - **security_scorecard_customer_managed_questionnaires_bulk_update** — Update a managed questionnaire for a SecurityScorecard customer. Returns: id, updated_at. Required: customer_id. - **list_all_security_scorecard_customer_users** — List users belonging to a specific SecurityScorecard customer. Returns: id, created_at, updated_at. Required: customer_id. - **list_all_security_scorecard_indicators_exclusions** — List SecurityScorecard indicator exclusions. Returns: id, created_at, updated_at. - **create_a_security_scorecard_indicators_exclusion** — Create a new SecurityScorecard indicator exclusion. Returns: id, created_at, updated_at. - **security_scorecard_indicators_exclusions_bulk_delete** — Bulk delete SecurityScorecard indicator exclusions. Returns an empty 204 response on success. - **update_a_security_scorecard_indicators_exclusion_by_id** — Update a SecurityScorecard indicator exclusion by id. Returns: id, created_at, updated_at. Required: id. - **get_single_security_scorecard_max_management_request_by_id** — Get a specific SecurityScorecard management request by id. Returns: id. Required: id. - **list_all_security_scorecard_notification_preferences** — List notification preferences for a SecurityScorecard contact. Returns: id, created_at, updated_at. Required: contact_id. - **security_scorecard_notification_preferences_bulk_update** — Update notification preferences for a SecurityScorecard contact. Returns: id, created_at, updated_at. Required: contact_id. - **list_all_security_scorecard_partner_contacts** — List partner contacts in SecurityScorecard. Returns: id, created_at, updated_at. Max 50 per page. - **create_a_security_scorecard_contacts_bulk_escalation_toggle** — Toggle escalation status for multiple SecurityScorecard contacts in bulk via the partner API. Returns a confirmation response indicating the result of the bulk escalation toggle operation. - **list_all_security_scorecard_vendors** — List vendor entries for a specific customer and vendor domain in SecurityScorecard's Max partner API. Returns: vendor_domain, customer_id, attributes. Required: customer_id, vendor_domain. - **security_scorecard_vendors_bulk_update** — Update a vendor for a specific customer and vendor domain in SecurityScorecard's Max partner API. Returns the updated vendor record including vendor_domain, customer_id, and attributes. Required: customer_id, vendor_domain. - **list_all_security_scorecard_customer_default_ccs** — List default CC (carbon copy) email addresses configured for a SecurityScorecard Max partner customer. Returns: email. Required: customer_id. - **create_a_security_scorecard_customer_default_cc** — Add a default CC (carbon copy) email address for a SecurityScorecard Max partner customer. Returns: email, customer_id. Required: customer_id. - **security_scorecard_customer_default_ccs_bulk_create** — Bulk add default CC (carbon copy) email addresses for a SecurityScorecard Max partner customer. Accepts an array of CC email records. Returns: email, customer_id. Required: customer_id. - **security_scorecard_customer_default_ccs_bulk_delete** — Delete a default CC (carbon copy) email address for a SecurityScorecard Max partner customer by CC email. Returns an empty 204 response on success. Required: customer_id, cc_email. - **list_all_security_scorecard_vendor_cc_extras** — List CC email extras for a vendor in SecurityScorecard. Returns: cc_email. Required: customer_id, vendor_id. - **create_a_security_scorecard_vendor_cc_extra** — Create a CC email extra for a vendor in SecurityScorecard. Returns: cc_email. Required: customer_id, vendor_id, cc_email. - **security_scorecard_vendor_cc_extras_bulk_delete** — Delete a CC email extra for a vendor in SecurityScorecard by cc_email. Returns an empty 204 response on success. Required: customer_id, vendor_id, cc_email. - **list_all_security_scorecard_vendor_effective_ccs** — List effective control categories (effective CCs) for a specific vendor within a SecurityScorecard customer. Returns a paginated collection of effective control category records, each with its id and attributes. Required: customer_id, vendor_id. - **list_all_security_scorecard_partner_likelihood_assessments** — List partner likelihood assessments in SecurityScorecard. Returns a paginated collection of assessment records with id. Max 50 per page. - **get_partner_likelihood_assessment_by_id** — Get a partner likelihood assessment by id in SecurityScorecard. Returns the assessment record including its id and assessment-specific attributes. Required: id. - **list_all_security_scorecard_partner_managed_customers** — List managed customers for a partner in SecurityScorecard MAX. Returns a paginated collection of managed customer records via the entries array. No required parameters. - **list_all_security_scorecard_partner_notification_settings** — List SecurityScorecard partner notification settings. Returns: id. Results are returned as entries in a paginated collection. - **security_scorecard_partner_notification_settings_bulk_update** — Update partner notification settings in SecurityScorecard via a PUT request to the Max API. Returns an empty 204 response on success. - **list_all_security_scorecard_partner_remediation_plans** — List SecurityScorecard partner remediation plans. Returns: id. Max 50 per page. - **get_single_security_scorecard_partner_remediation_plan_by_id** — Get a single SecurityScorecard partner remediation plan by id. Returns: id. Required: id. - **delete_a_security_scorecard_partner_remediation_plan_by_id** — Delete a SecurityScorecard partner remediation plan by id. Returns an empty 204 response on success. Required: id. - **list_all_security_scorecard_partner_schedules** — List partner schedules in SecurityScorecard. Returns a paginated collection of schedule records with id, created_at, and updated_at. Max 50 entries per page. - **security_scorecard_partner_schedules_bulk_update** — Update partner schedules in SecurityScorecard via a PATCH request. Returns the updated schedule record with id, created_at, and updated_at. - **list_all_security_scorecard_schedules_reminders** — List schedule reminders in SecurityScorecard. Returns: id, created_at, updated_at. - **list_all_security_scorecard_partner_tier_slots** — List partner tier slots in SecurityScorecard. Returns a paginated collection of tier slot records. Returns: id, created_at, updated_at. - **list_all_security_scorecard_partner_vendors** — List partner vendors in SecurityScorecard. Returns: id, name. Entries are paginated using the standard SecurityScorecard entries collection structure. - **list_all_security_scorecard_historical_scores** — List historical SecurityScorecard scores for a partner customer. Returns score history entries including id and attributes with score and timing data. Required: customer_id. - **list_all_security_scorecard_incident_likelihood_over_times** — List incident likelihood time-series data for a SecurityScorecard Max partner customer over time. Returns: date, likelihood. Required: customer_id. - **list_all_security_scorecard_incident_likelihood_trends** — List incident likelihood trend entries for a SecurityScorecard MAX partner customer. Returns a collection of trend entries containing id and attributes with incident likelihood values over time. Required: customer_id. - **list_all_security_scorecard_questionnaires** — List SecurityScorecard questionnaires for a partner customer. Returns: id. Required: customer_id. - **list_all_security_scorecard_questionnaires_status_summaries** — List questionnaire status summary entries for a SecurityScorecard Max partner customer. Returns: id. Required: customer_id. - **list_all_security_scorecard_tags_counts** — List tag counts for a SecurityScorecard customer via the partner API. Returns a paginated list of tag count entries (unwrapped from the `entries` array). Required: customer_id. - **list_all_security_scorecard_vendors_improvements** — List vendor improvement records for a specific customer in SecurityScorecard MAX. Returns: id. Required: customer_id. - **list_all_security_scorecard_vendors_risk_highlights** — List vendor risk highlights for a SecurityScorecard Max partner customer. Returns: id. Required: customer_id. - **list_all_security_scorecard_users_acceses** — List user access records in SecurityScorecard. Returns: id. Results are paginated via cursor-based pagination. The upstream API documentation does not enumerate additional fields for this endpoint. - **list_all_security_scorecard_vendor_likelihood_assessments** — List vendor likelihood assessments from SecurityScorecard. Returns a paginated collection where each entry includes: id. - **get_single_security_scorecard_vendor_likelihood_assessment_by_id** — Get a single vendor likelihood assessment by id in SecurityScorecard. Returns: id. Required: id. - **list_all_security_scorecard_likelihood_assessments_latests** — List the latest vendor likelihood assessments in SecurityScorecard's Max Platform. Returns: id. The detailed response fields for each assessment entry are not documented in the available SecurityScorecard API reference. - **list_all_security_scorecard_vendor_remediation_plans** — List vendor remediation plans in SecurityScorecard. Returns: id. Entries are returned via standard SecurityScorecard pagination (entries wrapper). - **get_single_security_scorecard_vendor_remediation_plan_by_id** — Get a single SecurityScorecard vendor remediation plan by id. Returns: id. Required: id. - **list_all_security_scorecard_max_indicators** — List SecurityScorecard MAX indicators. Returns: id. - **get_single_security_scorecard_max_indicator_by_id** — Get a single SecurityScorecard MAX indicator by id. Returns: id. Required: id. - **security_scorecard_update_asyncs_bulk_update** — Initiate an asynchronous domain migration in SecurityScorecard, moving a domain from an origin to a target. This is an asynchronous operation. Required: origin, target. - **list_all_security_scorecard_plans** — List SecurityScorecard plans. Returns: id, name. - **get_single_security_scorecard_plan_by_id** — Get a single SecurityScorecard plan by id. Returns: id, name. Required: id. - **delete_a_security_scorecard_plan_by_id** — Delete a SecurityScorecard plan by id. Returns an empty 204 response on success. Required: id. - **create_a_security_scorecard_plans_archive** — Create an archived score plan in SecurityScorecard by submitting a JSON request body. Returns: id, created_at, updated_at. - **create_a_security_scorecard_plans_factor_score_improvement** — Create a factor score improvement plan in SecurityScorecard. Returns the created plan object including its id and attributes. - **update_a_security_scorecard_plans_factor_score_improvement_by_id** — Update a factor score improvement plan in SecurityScorecard by id. Returns the updated plan object including its id and attributes. Required: id. - **create_a_security_scorecard_plans_issue_resolution** — Create a new issue resolution plan in SecurityScorecard. Returns the created plan including its id. Accepts a JSON request body. - **update_a_security_scorecard_plans_issue_resolution_by_id** — Update an existing SecurityScorecard issue resolution plan by id. Returns the updated plan including its id. Required: id. Accepts a JSON request body. - **list_all_security_scorecard_managed_services_vendors** — List managed services vendors in SecurityScorecard. Returns a paginated collection of vendor entries with id and name. - **create_a_security_scorecard_plans_overall_score_improvement** — Create a SecurityScorecard overall score improvement plan. Returns: entries, total, size. - **update_plans_overall_score_improvement_by_id** — Update a SecurityScorecard overall score improvement plan by id. Returns: entries, total, size. Required: id. - **get_single_security_scorecard_plans_remediation_by_id** — Get a specific SecurityScorecard remediation plan by id. Returns the remediation plan object including its id. Required: id. - **update_a_security_scorecard_plans_remediation_by_id** — Update a remediation plan in SecurityScorecard by id. Returns: id. Required: id. - **update_a_security_scorecard_item_by_id** — Update a single remediation plan item in SecurityScorecard by id. Returns the updated item including id and name. Required: id. - **security_scorecard_items_bulk_update** — Bulk update remediation plan items in SecurityScorecard for a given remediation plan. Returns the updated items including id and name. Required: remediation_id. - **create_a_security_scorecard_plans_unarchive** — Unarchive a previously archived SecurityScorecard score plan by submitting its plan identifier. Returns the unarchived plan object including its id. Required: plan_id. - **create_a_security_scorecard_plan_editor** — Add an editor to a SecurityScorecard plan. Returns: id, created_at. Required: plan_id. - **security_scorecard_plan_editors_bulk_delete** — Remove editors from a SecurityScorecard plan. Returns an empty 204 response on success. Required: id. - **create_a_security_scorecard_plan_guest** — Add a guest to a SecurityScorecard score plan. Returns: id, created_at, updated_at. Required: plan_id. - **security_scorecard_plan_guests_bulk_delete** — Remove guests from a SecurityScorecard score plan by id. Returns an empty 204 response on success. Required: id. - **security_scorecard_plan_items_bulk_delete** — Delete plan items for a specific plan in SecurityScorecard by id. Returns an empty 204 response on success. Required: id. - **create_a_security_scorecard_companies_bulk_delete** — Bulk delete companies (scorecards) from a SecurityScorecard portfolio by supplying the portfolio_id and a list of company domains to remove. Returns an empty 204 response on success. Required: portfolio_id, domains. - **create_a_security_scorecard_reports_assessment** — Create an assessment report in SecurityScorecard. Reports are generated asynchronously — the response returns a processing status and a download URL. Returns: report_url, status. The status field indicates the current generation state (e.g. 'processing') and report_url provides the download location once the report is ready. - **list_all_security_scorecard_scim_resource_types** — List SCIM resource types supported by SecurityScorecard. Returns each resource type definition including id, name, endpoint, schema, schemaExtensions, and meta. - **get_single_security_scorecard_scim_resource_type_by_id** — Get a single SCIM resource type by id. Returns the resource type definition including id, name, endpoint, schema, schemaExtensions, and meta. Required: id. - **list_all_security_scorecard_scim_schemas** — List SCIM schema definitions available in SecurityScorecard. Returns: id. - **get_single_security_scorecard_scim_schema_by_id** — Get a single SCIM schema definition by id in SecurityScorecard. Returns: id. Required: id. - **list_all_security_scorecard_scim_service_provider_configs** — List SecurityScorecard SCIM service provider configuration entries. Returns: schemas, documentationUri, patch, bulk, filter, changePassword, sort, etag, authenticationSchemes. - **delete_a_security_scorecard_scim_user_by_id** — Delete a SecurityScorecard SCIM user by id. Returns an empty 204 response on success. Required: id. - **list_all_security_scorecard_contacts_companies** — List companies (contacts) tracked in SecurityScorecard. Returns each company record including id, name, domain, grade, score, industry, and status. - **create_a_security_scorecard_custom_dashboard** — Create a new custom dashboard in SecurityScorecard. Returns the created dashboard object including its id, created_at, and updated_at. - **get_single_security_scorecard_issue_by_id** — Get a single SecurityScorecard issue by its unique identifier. Returns the full issue object including its id, issue_type, and severity. Required: id. - **list_all_security_scorecard_oauth_apps** — List OAuth apps registered in SecurityScorecard. Returns: id. - **create_a_security_scorecard_oauth_app** — Create a new OAuth app in SecurityScorecard. Returns: id. - **get_single_security_scorecard_oauth_app_by_id** — Get a SecurityScorecard OAuth app by id. Returns: id. Required: id. - **update_a_security_scorecard_oauth_app_by_id** — Update a SecurityScorecard OAuth app by id. Returns: id. Required: id. - **delete_a_security_scorecard_oauth_app_by_id** — Delete a SecurityScorecard OAuth app by id. Returns an empty 204 response on success. Required: id. - **list_all_security_scorecard_apps_secrets_expiries** — List SecurityScorecard OAuth app secret expiry entries. Returns: id, app_id, secret_id, expires_at. No required parameters. - **list_all_security_scorecard_app_owners** — List owners of a SecurityScorecard OAuth app. Returns: id, created_at, updated_at. Required: app_id. - **security_scorecard_app_owners_bulk_update** — Update the owners of a SecurityScorecard OAuth app by id. Returns: id, created_at, updated_at. Required: id. - **create_a_security_scorecard_app_revoke_token** — Revoke all OAuth tokens for a SecurityScorecard app. Returns an empty 204 response on success. Required: app_id. - **list_all_security_scorecard_app_secrets** — List app secrets for a SecurityScorecard OAuth app. Returns: id, name, created_at, updated_at. Required: app_id. - **create_a_security_scorecard_app_secret** — Create a new app secret for a SecurityScorecard OAuth app. Returns: id, name, created_at, updated_at. Required: app_id. - **update_a_security_scorecard_app_secret_by_id** — Update a SecurityScorecard app secret by id. Returns: id, name, created_at, updated_at. Required: id. - **delete_a_security_scorecard_app_secret_by_id** — Delete a SecurityScorecard app secret by id. Returns an empty 204 response on success. Required: id. - **list_all_security_scorecard_organization_follow_numbers** — List follow numbers for a SecurityScorecard organization. Returns a paginated collection of follow number entries. Required: organization_id. - **list_all_security_scorecard_organization_portfolios** — List SecurityScorecard portfolios for a specific organization. Returns: id, name, description, privacy, team_id. Required: organization_id. - **list_all_security_scorecard_organization_profiles** — List SecurityScorecard organization profiles for a given organization. Returns: id, created_at, updated_at. Required: organization_id. - **security_scorecard_organization_profiles_bulk_update** — Update a SecurityScorecard organization profile by id. Returns: id, created_at, updated_at. Required: id. - **security_scorecard_organization_trust_centers_bulk_update** — Update the trust center configuration for a SecurityScorecard organization. Returns the updated trust center object including id, created_at, and updated_at. Required: id. - **list_all_security_scorecard_trust_center_drafts** — List trust center draft entries for a SecurityScorecard organization. Returns the draft records including id. Required: organization_id. - **security_scorecard_trust_center_drafts_bulk_update** — Update the trust center draft for a SecurityScorecard organization by id. Returns the updated draft record including id. Required: id. - **security_scorecard_trust_center_drafts_bulk_delete** — Delete the trust center draft for a SecurityScorecard organization by id. Returns an empty 204 response on success. Required: id. - **create_a_security_scorecard_tags_bulk_export** — Create a bulk export of tags in SecurityScorecard by bulk_export_id, initiating an asynchronous export process. Returns export status and download information for retrieving the generated file. Required: bulk_export_id. - **create_a_security_scorecard_user_revoke_token** — Revoke the API token for a SecurityScorecard user by username. Returns an empty 204 response on success. Required: username. - **list_all_security_scorecard_companies_facets** — List facet values for companies in a SecurityScorecard portfolio, such as grades, industries, or issue types. Returns: id, name. Required: portfolio_id, facet. Optional filters (grade, industry, vulnerability, issue_type, status, had_breach_within_last_days) narrow the underlying company set. - **security_scorecard_scorecards_search** — Search SecurityScorecard scorecards by company name, domain, or other criteria. Returns: id, name, score, grade, domain, industry. Required: query. Max 200 per page. - **list_all_security_scorecard_search_facets** — List available facet values for SecurityScorecard scorecard search by facet name. Returns: id, name. Required: facet. - **list_all_security_scorecard_users_by_usernames** — List SecurityScorecard users matching a given username. Returns: id, name. Required: username. - **create_a_security_scorecard_vendor_portfolio_automation_ingest** — Ingest vendor portfolio automation data into SecurityScorecard by submitting a JSON request body to the ingest endpoint. The response shape for this endpoint is not documented in the SecurityScorecard API reference. - **vendor_portfolio_automation_ingests_bulk_delete** — Delete ingested vendor portfolio automation data in SecurityScorecard by submitting a JSON request body to the ingest endpoint. Returns an empty 204 response on success. - **list_all_vendor_portfolio_automation_ingested_vendors** — List ingested vendors from SecurityScorecard's vendor portfolio automation. Returns: id, created_at, updated_at. - **list_all_vendor_portfolio_automation_suggested_vendors** — List suggested vendors from SecurityScorecard's vendor portfolio automation. Returns: id. - **list_all_security_scorecard_industry_history_scores** — List historical SecurityScorecard scores for a specific industry over a configurable date range. Returns: date, score. Required: industry. Optional timing granularity supports daily, weekly, or monthly intervals (defaults to daily). - **list_all_security_scorecard_portfolio_companies_v_2** — List companies in a SecurityScorecard portfolio with optional filters by grade, industry, vulnerability, issue type, status, and breach history. Returns: domain, name, grade, score, industry, status. Required: portfolio_id. Max 200 per page. - **list_all_security_scorecard_organization_portfolios_v_2** — List portfolios for a specific SecurityScorecard organization. Returns a collection of portfolio records including id, name, description, privacy, and team_id. Required: organization_id. - **list_all_security_scorecard_partner_executive_summaries** — Get the executive security summary for a SecurityScorecard partner customer. Returns the customer's security scorecard executive summary overview. Required: customer_id. - **list_all_security_scorecard_partner_raw_findings_daily_avgs** — Retrieve daily average raw-findings figures for a managed customer through the SecurityScorecard partner (MAX) API. Required: customer_id. - **list_all_security_scorecard_partner_raw_findings_daily_counts** — List daily counts of raw findings for a SecurityScorecard partner customer. Returns a paginated collection of entries, each representing a day's raw-finding count. Required: customer_id. - **list_all_security_scorecard_partner_reports_vendors** — List vendors associated with SecurityScorecard partner reports. Returns: id, name. - **list_all_security_scorecard_organization_vendors** — List vendors for a SecurityScorecard customer organization. Returns a paginated collection of vendor entries with id and name. Required: organization_id. - **list_all_partner_vendors_risk_matrix_incident_likelihoods** — List incident likelihood entries from a SecurityScorecard partner customer's vendors risk matrix. Returns: id. Required: customer_id. Response fields beyond id are not documented in the available API reference for this endpoint. - **list_all_partner_vendors_risk_matrix_indicator_severities** — List vendor risk matrix indicator severities for a partner customer in SecurityScorecard. Returns a paginated collection of indicator severity entries. Required: customer_id. ## How it works 1. **Link your customer's SecurityScorecard account.** Use Truto's frontend SDK; we handle every OAuth and API key flow so you don't need to create the OAuth app. 2. **Authentication is automatic.** Truto refreshes tokens, stores credentials securely, and injects them into every API request. 3. **Call Truto's API to reach SecurityScorecard.** The Proxy API is a 1-to-1 mapping of the SecurityScorecard API. 4. **Get a unified response format.** Every response uses a single shape, with cursor-based pagination and data in the `result` field. ## Use cases - **Embed cyber risk scores into vendor management workflows** — Procurement and VMS platforms can display SecurityScorecard's A-F grades and 0-100 scores directly on vendor profiles, giving buyers cyber risk context before signing contracts. This turns security posture into a first-class decision factor alongside price and financial health. - **Automate third-party risk monitoring for GRC platforms** — GRC and compliance tools can continuously sync portfolio company scores, factor breakdowns, and issues to validate self-reported vendor questionnaires against real-world evidence. When a vendor's posture degrades or contradicts their claims, the platform can trigger reassessment workflows automatically. - **Power dynamic underwriting for cyber insurance products** — Insurtech platforms can pull historical scores, incident likelihood trends, and specific issue findings to price policies based on real security posture rather than static questionnaires. Premiums, exclusions, and remediation requirements can be adjusted programmatically at quote time. - **Drive zero-day supply chain response in ITSM tools** — When a critical CVE like Log4j surfaces, ITSM and security orchestration platforms can query portfolio companies against specific vulnerability endpoints to identify exposed vendors instantly. Tickets, notifications, and remediation plans can then be spawned without manual triage. - **Enrich vendor records the moment a domain is added** — Any B2B SaaS handling vendor or customer domains can silently add them to a SecurityScorecard portfolio and pull back grades, factor scores, and top issues in the background. Users see a fully enriched risk profile without leaving the host application. ## What you can build - **Portfolio-backed vendor onboarding** — Create and manage SecurityScorecard portfolios and portfolio companies programmatically so every new vendor added in your product is automatically tracked and scored. - **Score and factor dashboards** — Surface overall scores, grades, industry benchmarks, and factor-level breakdowns (network security, patching cadence, DNS health, application security) inside your own analytics views. - **Granular issue-to-ticket automation** — Pull findings from 100+ specific issue endpoints — compromised credentials, exposed services, malware infections, expired certs, critical CVEs — and route them into your native ticketing or remediation workflow. - **Historical score and incident likelihood trends** — Chart 12-month score history and incident likelihood trajectories for each vendor to power risk trend visualizations and threshold-based alerting. - **Score improvement playbooks** — Fetch target-based score plans to show vendors or internal teams the exact remediation steps needed to move from their current score to a target grade. - **Third and fourth-party discovery views** — Expose SecurityScorecard's vendor detection data to show the sub-processors, products, and technologies each monitored company depends on — critical for concentration risk analysis. ## FAQs ### How does authentication work for the SecurityScorecard integration? SecurityScorecard uses API token authentication. Each of your end users provides their SecurityScorecard API token when connecting their account through Truto, and Truto securely stores and injects it on every request — you never handle the credential directly. ### Do we need to add domains to a portfolio before we can pull risk data? Yes. For most deep-data endpoints (factor scores, issues, historical scores), the target company or domain must first exist in a SecurityScorecard portfolio. Truto exposes the portfolio and portfolio company management tools so you can programmatically add vendors as part of your onboarding flow before querying their data. ### What kinds of security findings can we sync into our product? Truto exposes over 100 specific issue endpoints covering categories like compromised credentials, exposed services (Elasticsearch, MongoDB, RDP, Telnet), TLS/certificate issues, DKIM/DMARC/SPF misconfigurations, malware infections, ransomware associations, and named CVE exposures (Log4j, Spring4Shell, MOVEit, Ivanti, and others). ### Can we bulk manage vendors instead of adding them one at a time? Yes. Truto supports SecurityScorecard's bulk operations for uploading, updating, and deleting portfolio companies, as well as bulk operations for tags, custom scorecard filters, and other resources — useful when onboarding large vendor lists at once. ### How fresh is the data returned from SecurityScorecard? SecurityScorecard continuously scans the public internet and updates scores and findings on an ongoing basis. Truto passes through the data as SecurityScorecard exposes it, so freshness matches what a user would see in the SecurityScorecard UI. For near-real-time updates in your product, poll the relevant endpoints on a schedule that matches your risk workflow. ### Can we generate reports and exports through the integration? Yes. Truto exposes SecurityScorecard's report generation endpoints, including detailed scorecard reports, portfolio reports, issue reports, footprint reports, summary reports, and CSV exports, so you can offer downloadable artifacts to your users without building the rendering yourself. ### Does the integration support custom scorecards and tagging? Yes. You can create, update, and delete custom scorecards, manage scorecard tags and tag groups, and manage IP/domain tags — enabling customer-specific segmentation, portfolio organization, and custom risk views inside your product. ## Related reading - [Connect SecurityScorecard to Claude: Audit Trends & Compliance](https://truto.one/blog/connect-securityscorecard-to-claude-audit-trends-compliance/) — Learn how to build a managed MCP server to connect SecurityScorecard to Claude, enabling AI agents to automate vendor risk audits and compliance reporting. - [Connect SecurityScorecard to ChatGPT: Track Risk & Portfolios](https://truto.one/blog/connect-securityscorecard-to-chatgpt-track-risk-portfolios/) — Learn how to connect SecurityScorecard to ChatGPT using an MCP server. Automate portfolio tracking, compliance audits, and risk assessments. - [Connect SecurityScorecard to AI Agents: Automate Issues & Reporting](https://truto.one/blog/connect-securityscorecard-to-ai-agents-automate-issues-reporting/) — Learn how to connect SecurityScorecard to AI Agents using Truto's SDK. Build autonomous workflows for risk auditing, issue tracking, and automated reporting.