Security
SecurityScorecard
API integration
Ship Security features without building the integration. Full SecurityScorecard API access via Proxy and 510+ MCP-ready tools for AI agents — extend models and mappings to fit your product.
Talk to usUse Cases
Why integrate with SecurityScorecard
Common scenarios for SaaS companies building SecurityScorecard integrations for their customers.
Embed cyber risk scores into vendor management workflows
Procurement and VMS platforms can display SecurityScorecard's A-F grades and 0-100 scores directly on vendor profiles, giving buyers cyber risk context before signing contracts. This turns security posture into a first-class decision factor alongside price and financial health.
Automate third-party risk monitoring for GRC platforms
GRC and compliance tools can continuously sync portfolio company scores, factor breakdowns, and issues to validate self-reported vendor questionnaires against real-world evidence. When a vendor's posture degrades or contradicts their claims, the platform can trigger reassessment workflows automatically.
Power dynamic underwriting for cyber insurance products
Insurtech platforms can pull historical scores, incident likelihood trends, and specific issue findings to price policies based on real security posture rather than static questionnaires. Premiums, exclusions, and remediation requirements can be adjusted programmatically at quote time.
Drive zero-day supply chain response in ITSM tools
When a critical CVE like Log4j surfaces, ITSM and security orchestration platforms can query portfolio companies against specific vulnerability endpoints to identify exposed vendors instantly. Tickets, notifications, and remediation plans can then be spawned without manual triage.
Enrich vendor records the moment a domain is added
Any B2B SaaS handling vendor or customer domains can silently add them to a SecurityScorecard portfolio and pull back grades, factor scores, and top issues in the background. Users see a fully enriched risk profile without leaving the host application.
What You Can Build
Ship these features with Truto + SecurityScorecard
Concrete product features your team can ship faster by leveraging Truto’s SecurityScorecard integration instead of building from scratch.
Portfolio-backed vendor onboarding
Create and manage SecurityScorecard portfolios and portfolio companies programmatically so every new vendor added in your product is automatically tracked and scored.
Score and factor dashboards
Surface overall scores, grades, industry benchmarks, and factor-level breakdowns (network security, patching cadence, DNS health, application security) inside your own analytics views.
Granular issue-to-ticket automation
Pull findings from 100+ specific issue endpoints — compromised credentials, exposed services, malware infections, expired certs, critical CVEs — and route them into your native ticketing or remediation workflow.
Historical score and incident likelihood trends
Chart 12-month score history and incident likelihood trajectories for each vendor to power risk trend visualizations and threshold-based alerting.
Score improvement playbooks
Fetch target-based score plans to show vendors or internal teams the exact remediation steps needed to move from their current score to a target grade.
Third and fourth-party discovery views
Expose SecurityScorecard's vendor detection data to show the sub-processors, products, and technologies each monitored company depends on — critical for concentration risk analysis.
SuperAI
SecurityScorecard AI agent tools
Comprehensive AI agent toolset with fine-grained control. Integrates with MCP clients like Cursor and Claude, or frameworks like LangChain.
list_all_security_scorecard_portfolios
List SecurityScorecard portfolios. Returns: id, name, description, privacy, team_id.
create_a_security_scorecard_portfolio
Create a SecurityScorecard portfolio with a name, description, and privacy level. Returns: id, name, description, privacy, team_id. Required: name.
update_a_security_scorecard_portfolio_by_id
Update a SecurityScorecard portfolio by id. Returns: id, name, description, privacy, team_id. Required: id, name.
delete_a_security_scorecard_portfolio_by_id
Delete a SecurityScorecard portfolio by id. Returns an empty 204 response on success. Required: id.
security_scorecard_companies_bulk_uploads_bulk_update
Bulk upload companies to SecurityScorecard portfolios via a PUT request. Returns a list of the uploaded companies following processing. Provide a JSON request body containing the companies to add.
list_all_security_scorecard_portfolio_companies
List companies (scorecards) in a SecurityScorecard portfolio with optional filters for grade, industry, vulnerability, issue type, status, and recent breaches. Returns: domain, grade, industry, status. Required: portfolio_id.
security_scorecard_portfolio_companies_bulk_update
Add a company scorecard to a SecurityScorecard portfolio by domain. Returns: domain, grade, industry, status. Required: portfolio_id, domain.
security_scorecard_portfolio_companies_bulk_delete
Remove a company from a SecurityScorecard portfolio by domain. Returns an empty 204 response on success. Required: portfolio_id, domain.
security_scorecard_companies_alls_bulk_delete
Remove all companies from a SecurityScorecard portfolio by portfolio id. Returns an empty 204 response on success. Required: id.
list_all_security_scorecard_portfolio_expanded_risks
List expanded risk entries for all companies in a SecurityScorecard portfolio. Returns: domain, name, grade, score, industry, status. Required: portfolio_id.
list_all_security_scorecard_scorecard_tags
List scorecard tags in SecurityScorecard. Returns: id, name. Uses cursor-based pagination via the entries array.
create_a_security_scorecard_scorecard_tag
Create a new scorecard tag in SecurityScorecard. Returns: id, name.
update_a_security_scorecard_scorecard_tag_by_id
Update a scorecard tag by id in SecurityScorecard. Returns: id, name. Required: id.
delete_a_security_scorecard_scorecard_tag_by_id
Delete a scorecard tag by id in SecurityScorecard. Returns an empty 204 response on success. Required: id.
create_a_security_scorecard_scorecard_tags_bulk_delete
Bulk delete scorecard tags in SecurityScorecard by submitting a list of tag IDs. Returns an empty 204 response on success. Required: ids.
list_all_security_scorecard_scorecard_tags_groups
List SecurityScorecard scorecard tag groups. Returns: id, name.
create_a_security_scorecard_scorecard_tags_group
Create a new scorecard tag group in SecurityScorecard. Returns: id, name. Required: name.
get_single_security_scorecard_scorecard_tags_group_by_id
Get a single SecurityScorecard scorecard tag group by id. Returns: id, name. Required: id.
update_a_security_scorecard_scorecard_tags_group_by_id
Update a SecurityScorecard scorecard tag group by id. Returns: id, name. Required: id.
delete_a_security_scorecard_scorecard_tags_group_by_id
Delete a SecurityScorecard scorecard tag group by id. Returns an empty 204 response on success. Required: id.
create_scorecard_tags_remove_public_tag_association
Remove a public tag association from scorecard tags in SecurityScorecard. Returns an empty 204 response on success.
list_all_security_scorecard_scorecard_tag_companies
List companies assigned to a SecurityScorecard scorecard tag. Returns: domain, name, grade, score, industry. Required: scorecard_tag_id.
create_a_security_scorecard_scorecard_tag_company
Add a company to a SecurityScorecard scorecard tag by domain. Returns: domain, name, grade, score, industry. Required: scorecard_tag_id, domain.
security_scorecard_scorecard_tag_companies_bulk_delete
Remove a company from a SecurityScorecard scorecard tag by domain. Returns an empty 204 response on success. Required: id, domain.
create_a_security_scorecard_scorecard_tag_group
Assign a SecurityScorecard tag group to a scorecard tag. Returns an empty 204 response on success. Required: tag_id, tag_group_id.
delete_a_security_scorecard_scorecard_tag_group_by_id
Remove a SecurityScorecard tag group from a scorecard tag. Returns an empty 204 response on success. Required: tag_id, id.
list_all_security_scorecard_ip_domain_tags
List IP domain tags in SecurityScorecard. Returns: id, domain, ip.
create_a_security_scorecard_ip_domain_tag
Create a new IP domain tag in SecurityScorecard. Returns: id, domain, ip. Required: domain.
update_a_security_scorecard_ip_domain_tag_by_id
Update an IP domain tag in SecurityScorecard by id. Returns: id, created_at, updated_at. Required: id.
delete_a_security_scorecard_ip_domain_tag_by_id
Delete an IP domain tag in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
list_all_security_scorecard_ip_domain_tags_groups
List IP domain tag groups in SecurityScorecard. Returns: id, name.
create_a_security_scorecard_ip_domain_tags_group
Create a new IP domain tag group in SecurityScorecard. Returns: id, name. Required: name.
get_single_security_scorecard_ip_domain_tags_group_by_id
Get a single IP domain tag group by id in SecurityScorecard. Returns: id, name. Required: id.
update_a_security_scorecard_ip_domain_tags_group_by_id
Update an IP domain tag group in SecurityScorecard by id. Returns the updated group object including id, created_at, and updated_at. Required: id.
delete_a_security_scorecard_ip_domain_tags_group_by_id
Delete an IP domain tag group in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
list_all_security_scorecard_parent_domain_domains
List domains under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: parent_domain.
create_a_security_scorecard_parent_domain_domain
Associate a domain with an IP domain tag under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: tag_id, parent_domain, domain.
security_scorecard_parent_domain_domains_search
Search domains under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: parent_domain.
security_scorecard_parent_domain_domains_bulk_delete
Remove a domain's association with an IP domain tag under a parent domain in SecurityScorecard. Returns an empty 204 response on success. Required: tag_id, parent_domain, domain.
list_all_security_scorecard_parent_domain_ips
List IP addresses associated with a parent domain in SecurityScorecard, including their related tags. Returns: ip, parent_domain. Required: parent_domain.
create_a_security_scorecard_parent_domain_ip
Associate a tag with an IP address under a parent domain in SecurityScorecard. Returns: ip, parent_domain. Required: tag_id, parent_domain, ip.
security_scorecard_parent_domain_ips_search
Search for IP addresses associated with a parent domain in SecurityScorecard. Returns: ip, parent_domain. Required: parent_domain.
security_scorecard_parent_domain_ips_bulk_delete
Remove a tag association from an IP address under a parent domain in SecurityScorecard. Returns an empty 204 response on success. Required: tag_id, parent_domain, ip.
create_a_security_scorecard_ip_domain_tag_group
Create an IP domain tag group association in SecurityScorecard by linking a tag group to an IP domain tag. Returns an empty 204 response on success. Required: tag_id, tag_group_id.
delete_a_security_scorecard_ip_domain_tag_group_by_id
Delete an IP domain tag group association in SecurityScorecard by removing a tag group from an IP domain tag. Returns an empty 204 response on success. Required: tag_id, id.
create_a_security_scorecard_companies_bulk_search
Initiate a bulk search for SecurityScorecard company scorecards by submitting a list of domains. Returns an array of scorecards including name, domain, grade, score, industry, and scorecard_identifier. Required: domains.
list_all_security_scorecard_companies
Get a company's scorecard summary from SecurityScorecard by scorecard identifier. Returns: id, name, grade, score, industry. Required: scorecard_identifier. The company must be added to a portfolio before its scorecard can be accessed.
list_all_security_scorecard_companie_expanded_risks
List expanded risk entries for a SecurityScorecard company scorecard. Returns a collection of expanded risk entries for the specified scorecard. Required: scorecard_identifier.
list_all_security_scorecard_companie_factors
List SecurityScorecard factor scores and issue counts for a company scorecard. Returns each factor's name, score, and issue_count. Required: scorecard_identifier. The company must be added to a portfolio before factor-level data is accessible.
list_all_security_scorecard_factors_scores
List SecurityScorecard company factor score history for up to the last 12 months. Returns entries with date, name, score, grade, and issue_count per factor. Required: scorecard_identifier.
list_all_security_scorecard_history_scores
List a company's historical SecurityScorecard scores over time. Returns each dated entry with domain, date, and score. Use timing to control granularity and from/to to bound the range. Required: scorecard_identifier.
list_all_security_scorecard_score_plans_by_targets
Get a score plan for a SecurityScorecard company scorecard by specifying a target score. Returns a list of score plan entries describing actions needed to reach the target score. Required: domain, score.
list_all_security_scorecard_companie_summary_factors
List SecurityScorecard summary factors for a company by scorecard identifier. Returns: name, score, grade, issues. Required: scorecard_identifier. Company must be added to a portfolio first to access factor-level data.
list_all_security_scorecard_industrie_factors
List SecurityScorecard industry factors with scores and issue counts for a given industry. Returns: name, score, issue_count. Required: industry.
list_all_security_scorecard_history_factors
List historical SecurityScorecard factor scores for an industry over a date range within the last 12 months. Returns: date, name, score, grade, issues_count. Required: industry.
list_all_security_scorecard_industrie_scores
List SecurityScorecard industry scores for a specified industry. Returns: score, grade. Required: industry.
list_all_security_scorecard_history_events
List scorecard event log entries for a company in SecurityScorecard. Events explain score changes and act as a news feed of scorecard updates including new issues, issues getting resolved, and reported breaches. Returns: id, attributes. Required: scorecard_identifier. History data is available for the last 12 months only.
list_all_security_scorecard_events_breaches
List breach events from a company's scorecard event log in SecurityScorecard. Events explain score changes and serve as a news feed of scorecard updates including reported breaches. Returns: date, description. Required: domain.
list_all_security_scorecard_companie_issue_contexts
List issue context entries for a SecurityScorecard company scorecard by domain and issue type. Returns a paginated collection of issue context entries for the specified company and issue type. Required: domain, issue_type.
list_all_issues_active_cve_exploitation_attempteds
List active CVE exploitation attempted issues from a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, cve. Required: scorecard_identifier, effective_date. Company must be added to a portfolio first.
list_all_security_scorecard_issues_adware_installations
List historical "adware_installation" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, malware_type, malware_family, malware_detection_methods, src_ip, connection_attributes, connection_attributes_stamped, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_adware_installation_trails
List adware installation trail issue entries for a SecurityScorecard scorecard at a specific effective date in the scorecard's history. Returns a paginated list of adware installation trail issue entries for that scorecard event. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_alleged_breach_incidents
List alleged breach incident issues recorded in a SecurityScorecard company's scorecard event history for a specific effective date. Returns a paginated collection of breach incident entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_attack_detecteds
List attack-detected issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns a collection of attack-detected issue entries (each with an id). Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_attempted_information_leaks
List attempted information leak issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_bitcoin_servers
List SecurityScorecard bitcoin_server issue entries from a company's scorecard history for a specific effective date. Returns: severity, issue_type, count. Required: scorecard_identifier, effective_date.
list_all_issues_browser_logs_contain_debug_messages
List browser_logs_contain_debug_message issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_cdn_hostings
List CDN hosting issues from a SecurityScorecard company scorecard's event history at a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_cobalt_strike_c_2_detecteds
List SecurityScorecard cobalt_strike_c2_detected issue events for a scorecard on a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_cobalt_strike_c_2_services
List SecurityScorecard cobalt strike C2 service issue findings for a specific effective date in a company's scorecard event log history. Returns: issue entries including severity, status, and first_seen/last_seen timestamps. Required: scorecard_identifier, effective_date.
list_all_issues_communication_server_with_expired_certs
List communication server with expired certificate issue findings for a SecurityScorecard company scorecard on a specific effective date from the scorecard event history. Returns: severity. Required: scorecard_identifier, effective_date.
issues_communication_with_server_certificate_issued_by_blacklist
List SecurityScorecard 'communication with server certificate issued by blacklisted country' issue findings for a scorecard at a specific effective date in its history. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_issues_compromised_by_information_stealers
List SecurityScorecard issues where credentials or data were compromised by an information stealer for a company's scorecard on a specific effective date. Returns a paginated list of compromised-by-information-stealer issue entries. Required: scorecard_identifier, effective_date.
list_all_issues_compromised_credentials_founds
List compromised credentials found issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_issues_confirmed_first_party_breaches
List confirmed first-party breach issues for a SecurityScorecard company scorecard on a specific effective date, as recorded in the scorecard event log. Returns a list of confirmed first-party breach issue entries. Required: scorecard_identifier, effective_date.
list_all_issues_confirmed_third_party_breaches
List confirmed third-party breach issue records from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_contact_information_detecteds
List contact information detected issues for a specific SecurityScorecard scorecard event on a given effective date. Returns entries of contact information detected issue findings from the scorecard event history. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_cookie_missing_http_onlies
List historical "cookie_missing_http_only" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, hostname, url, cookie_name, raw_cookie, observations, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_issues_cookie_missing_secure_attributes
List historical "cookie_missing_secure_attribute" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, hostname, url, cookie_name, raw_cookie, observations, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_csp_no_policy_v_2_s
List historical "csp_no_policy_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_csp_too_broad_v_2_s
List CSP 'too broad' v2 issues from a SecurityScorecard company's scorecard history event for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_csp_unsafe_policy_v_2_s
List CSP unsafe policy v2 issues for a SecurityScorecard scorecard at a specific effective date in the event history. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_cve_in_use_by_threat_actors
List CVE-in-use-by-threat-actor issue findings from a SecurityScorecard company scorecard's history events on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_data_leak_detecteds
List data leak detected issue events from a SecurityScorecard company's scorecard history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_dkim_insufficient_key_lengths
List DKIM insufficient key length issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard data is available.
list_all_security_scorecard_issues_dkim_record_detecteds
List DKIM record detected issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_dkim_weak_signatures
List DKIM weak signature issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns a list of issue entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_dmarc_contains_nones
List DMARC 'contains none' issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, domain, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_dmarc_record_missings
List DMARC record missing issue entries from a SecurityScorecard scorecard's history event log for a specific effective date. Returns: domain, severity. Required: scorecard_identifier, effective_date. Score history is available for the last 12 months.
list_all_security_scorecard_issues_domain_missing_https_v_2_s
List historical "domain_missing_https_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_dos_attack_attempt_detecteds
List DoS attack attempt detected issue events from a SecurityScorecard scorecard's event history on a specific effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_exploit_attempt_detecteds
List exploit attempt detected issue findings from a SecurityScorecard company scorecard's history events for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_exploited_products
List exploited product issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: severity, issue_type, count. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_exposed_cisco_web_uis
List historical "exposed_cisco_web_ui" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_issues_exposed_embedded_iot_web_servers
List historical "exposed_embedded_iot_web_server" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_exposed_mac_airport_devices
List exposed Mac Airport device issue findings from a SecurityScorecard scorecard's historical event for a given effective date. Returns a paginated list of issue entries including id and finding details. Required: scorecard_identifier, effective_date.
list_all_issues_exposed_network_attached_storage_devices
List exposed network-attached storage device issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns a list of issue entries documenting exposed network-attached storage devices detected on the company's scorecard at that point in time. Required: scorecard_identifier, effective_date. The company must be added to a portfolio first; history is available for…
list_all_issues_exposed_personal_information_infos
List exposed personal information info issues for a SecurityScorecard company scorecard event on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_exposed_printers
List exposed printer issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns a list of exposed printer issue entries. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard data is available.
list_all_security_scorecard_issues_fail_to_load_page_components
List SecurityScorecard fail-to-load page components issue findings for a company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_general_scan_detecteds
List general scan detected issues for a specific event in a SecurityScorecard company's scorecard history. Returns: id, issue_type, severity, count. Required: scorecard_identifier, effective_date.
list_all_issues_historical_compromised_credentials_founds
List historical compromised credentials found issues for a SecurityScorecard company scorecard on a specific effective date. Returns entries with compromised credential finding records whose fields are specific to the SecurityScorecard issue type, including id and attributes. Required: scorecard_identifier, effective_date.
list_all_issues_hosted_on_object_storage_v_2_s
List issues hosted on object storage v2 from a SecurityScorecard company's scorecard event history at a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_hsts_incorrect_v_2_s
List HSTS incorrect v2 issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_industrial_control_devices
List industrial control device issues from a SecurityScorecard company's scorecard history event log for a specific effective date. Returns issue entries including severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_infected_by_targeted_attacks
List SecurityScorecard 'infected by targeted attack' issues from a company's scorecard event history for a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_insecure_ftps
List insecure FTP issue findings from a SecurityScorecard scorecard's event history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_issues_insecure_https_redirect_pattern_v_2_s
List insecure HTTPS redirect pattern v2 issue findings for a specific SecurityScorecard company scorecard event on a given effective date. Returns a paginated collection of issue finding entries, each including its id. Required: scorecard_identifier, effective_date.
list_all_issues_insecure_server_certificate_key_sizes
List insecure server certificate key size issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: entries. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_insecure_telnets
List insecure telnet issue findings from a SecurityScorecard company scorecard's history event on a specific effective date. Returns entries with id, severity, and status for each insecure telnet finding. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_iot_cameras
List IoT camera issue findings from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_issues_ip_black_list_due_malicious_activities
List IP black list issues due to malicious activity from a SecurityScorecard scorecard's event history for a specific effective date. Returns a paginated collection of issue entries including id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_java_debuggers
List Java debugger issues for a SecurityScorecard company scorecard's history events on a specific effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date.
list_all_issues_known_compromised_or_hostile_hosts
List known compromised or hostile host issue findings for a SecurityScorecard company on a specific event-log date. Returns: entry_id, severity, domain, discovered_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_leaked_credentials_infos
List leaked credentials information issues for a SecurityScorecard company scorecard history event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_links_to_insecure_websites
List links to insecure website issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_local_file_path_exposed_via_url_schemes
List SecurityScorecard issue findings of type 'local_file_path_exposed_via_url_scheme' from a company's scorecard event history for a specific effective date. Returns a paginated collection of issue finding entries extracted from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_mail_server_unusual_ports
List mail server unusual port issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns a collection of issue entries representing findings recorded on that date. Required: scorecard_identifier, effective_date.
list_all_issues_malicious_botnet_c_and_c_server_detecteds
List malicious botnet C&C server detected issue entries from a SecurityScorecard company's scorecard event history for a specific effective date. Returns a collection of issue records associated with detected malicious botnet command-and-control servers. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_malicious_scan_detecteds
List malicious scan detected issues for a SecurityScorecard scorecard's historical event at a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_issues_malicious_tor_exit_node_detecteds
List malicious Tor exit node detected issue findings for a SecurityScorecard scorecard at a specific effective date in its scorecard history. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_issues_malicious_tor_relay_router_node_detecteds
List historical "malicious_tor_relay_router_node_detected" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, ip, port, country_city, protocol, app_proto, affected_product, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_issues_malicious_user_agent_detecteds
List malicious user agent detected issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id, created_at. Required: scorecard_identifier, effective_date. Score history is available for any date range within the last 12 months.
list_all_security_scorecard_issues_malware_detecteds
List malware detected issues recorded at a specific event date in a SecurityScorecard company's scorecard history. Returns entries of malware detection issue records, each with id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_malware_infections
List malware infection issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: entries with family, count, and scan_date for each detected malware infection. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_malware_infection_trails
List malware infection trail issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_issues_microsoft_exchange_0_day_vulnerabilities
List Microsoft Exchange 0-day vulnerability issues from a SecurityScorecard company scorecard's history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_microsoft_exchange_http_api_vulnerabilities
List historical "microsoft_exchange_http_api_vulnerability" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_minecraft_servers
List SecurityScorecard minecraft_server issue findings for a specific scorecard on a given effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_issues_mirai_botnet_traffic_detecteds
List SecurityScorecard mirai botnet traffic detected issue findings from a scorecard's history events on a specific effective date. Returns entries describing each detected mirai botnet traffic issue from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_mysql_server_empty_passwords
List MySQL server empty password issue events from a SecurityScorecard company scorecard's history for a specific effective date. Returns issue event entries from the scorecard event log that explain score changes such as new issues and resolved issues. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_open_ports
List open port issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns entries describing exposed open ports with their port number, service, and host details. Required: scorecard_identifier, effective_date.
list_all_issues_openssl_critical_vulnerabilities
List historical OpenSSL critical vulnerability issue events from a SecurityScorecard company scorecard's event log at a specific effective date. Events in the event log explain score changes and work as a news feed of scorecard updates such as new issues, issues getting resolved, and reported breaches. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_outdated_browsers
List outdated browser issues for a SecurityScorecard company scorecard on a specific effective date from the scorecard's history events. Returns: entries with severity, scorecard_date, and last_seen. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_outdated_os
List outdated operating system issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns entries of outdated OS issue findings for the company. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_patching_analysis_highs
List patching analysis high issues from a SecurityScorecard scorecard's event history for a given effective date. Returns a collection of issue entries. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_patching_analysis_lows
List historical "patching_analysis_low" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, issue_count, resolved_issues, resolved_perc, time_to_patch_avg, range060, range61120, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_patching_analysis_mediums
List patching analysis medium-severity issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_patching_cadence_highs
List patching cadence high severity issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns issue entries with their id and issue-specific attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_patching_cadence_lows
List patching cadence low issue events from a SecurityScorecard company's scorecard history for a given effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_patching_cadence_mediums
List patching cadence medium issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_issues_patching_cadence_v_3_criticals
List patching cadence v3 critical issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard history data is accessible.
list_all_security_scorecard_issues_patching_cadence_v_3_highs
List high-severity patching cadence v3 issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_patching_cadence_v_3_lows
List patching_cadence_v3_low issue events from a SecurityScorecard scorecard's history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_patching_cadence_v_3_mediums
List SecurityScorecard patching cadence v3 medium-severity issue findings from a scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_payment_providers
List payment provider issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns entries with issue severity, status, and domain. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_potentially_vulnerables
List potentially vulnerable issues recorded at a specific effective date in a SecurityScorecard scorecard's history event log. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cisco_rv_320_325_s
List potentially vulnerable Cisco RV 320/325 issue findings from a SecurityScorecard scorecard's historical events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_33246_s
List potentially vulnerable CVE-2023-33246 issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_34362_s
List potentially vulnerable CVE-2023-34362 issues from a SecurityScorecard scorecard's event history at a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_3519_s
List potentially vulnerable CVE-2023-3519 issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_37582_s
List potentially vulnerable CVE-2023-37582 issue entries from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_37979_s
List potentially vulnerable CVE-2023-37979 issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_38035_s
List historical "potentially_vulnerable_cve_2023_38035" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2023_46747_s
List potentially vulnerable CVE-2023-46747 issues from a SecurityScorecard company's scorecard history events on a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2024_21887_s
List potentially vulnerable CVE-2024-21887 issues from a SecurityScorecard scorecard's history events on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_potentially_vulnerable_cve_2024_46805_s
List potentially vulnerable CVE-2024-46805 issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_issues_product_exploited_by_ransomware_actors
List SecurityScorecard issues of type product_exploited_by_ransomware_actors for a specific scorecard's historical event on a given effective date. Returns a list of issue entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_issues_product_uses_vulnerable_log_4_js
List 'product_uses_vulnerable_log4j' issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_pva_installations
List PVA installation issues for a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. Max 50 items per page.
list_all_security_scorecard_issues_pva_installation_trails
List PVA (Publicly Vulnerable Application) installation trail issues from a specific scorecard history event on a given effective date in SecurityScorecard. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_ransomware_associations
List ransomware association issues for a SecurityScorecard company's scorecard event on a given effective date. Returns ransomware association issue entries from the event log. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_ransomware_infections
List ransomware infection issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns paginated entries of ransomware infection issue records. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_ransomware_infection_trails
List SecurityScorecard ransomware infection trail issues for a company's scorecard event on a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_ransomware_victims
List ransomware victim issues for a SecurityScorecard company scorecard on a specific effective date. Returns ransomware victim entries from the scorecard's historical event log. Required: scorecard_identifier, effective_date.
list_all_issues_redirect_chain_contains_http_v_2_s
List redirect_chain_contains_http_v2 issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: issue entries including id and name. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_redirect_to_insecure_websites
List redirect-to-insecure-website issues from a SecurityScorecard company's event history on a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_references_object_storage_v_2_s
List SecurityScorecard issue references from object storage (v2) for a specific scorecard's history event on a given effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_remote_acceses
List remote access issues from a SecurityScorecard company scorecard's event history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. Scorecard history is available for the last 12 months and the company must be added to a portfolio first.
list_issues_sensitive_data_exposure_through_insecure_channels
List sensitive data exposure through insecure channel issue findings for a SecurityScorecard company scorecard at a specific point in its history. Returns: id, domain, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_server_errors
List server error issues recorded on a specific event date in a SecurityScorecard company scorecard's history. Returns an array of issue entries from the scorecard event log for the given effective date. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_cassandras
List SecurityScorecard service_cassandra issues recorded in a specific scorecard's history event on a given effective date. Returns: entries with each issue's id, severity, and issue type. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_cloud_providers
List historical "service_cloud_provider" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_couchdbs
List SecurityScorecard service_couchdb issue entries from a company's scorecard event history for a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_dns
List service DNS issues from a SecurityScorecard company's scorecard event history on a specific effective date. Returns: entries with severity, issue type, and domain details for each DNS finding. Required: scorecard_identifier, effective_date. History is available within the last 12 months.
list_all_security_scorecard_issues_service_elasticsearches
List SecurityScorecard service_elasticsearch issue findings for a specific scorecard on a given effective date from the scorecard event history. Returns a paginated list of issue entries including id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_end_of_lifes
List service end of life issues for a SecurityScorecard company scorecard at a specific effective date in the scorecard's history events. Returns: id and severity for each service end of life issue finding. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_end_of_services
List service_end_of_service issue findings from a SecurityScorecard scorecard's history event log for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_ftps
List SecurityScorecard service_ftp issue findings for a company's scorecard on a specific effective date from the scorecard history event log. Returns: entries with domain, port, and severity for each service_ftp issue finding. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_http_proxies
List SecurityScorecard service_http_proxy issue findings from a scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_imaps
List historical "service_imap" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_ldaps
List service LDAP issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_ldap_anonymous
List SecurityScorecard service_ldap_anonymous issue findings for a specific scorecard event on a given effective date. Returns: entries with issue id, severity, and finding details. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_microsoft_sqls
List SecurityScorecard Microsoft SQL service issues for a company's scorecard history event on a specific effective date. Returns issue entries with severity, status, and service-related details. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_mongodbs
List SecurityScorecard MongoDB service issues recorded in a company's scorecard event history for a specific effective date. Returns: id, issue_type, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_mysqls
List MySQL service issues from a SecurityScorecard scorecard's event history on a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_netbus_remote_acceses
List SecurityScorecard scorecard history event issues of type service_netbus_remote_access for a specific company and effective date. Returns a list of issue event entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_networkings
List service networking issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns entries with id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_open_vpns
List SecurityScorecard service open VPN issue findings recorded during a specific scorecard history event on a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_oracle_dbs
List SecurityScorecard service_oracle_db issue findings for a company's scorecard history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_oracle_registries
List SecurityScorecard service oracle registry issue findings from a scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_pop_3_s
List SecurityScorecard POP3 service issues for a specific scorecard event on a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_postgresqls
List service_postgresql issues recorded in a SecurityScorecard company's scorecard history event log at a specific effective date. Returns entries of service_postgresql issue findings from that date's event snapshot. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_pptps
List SecurityScorecard service PPTP issues for a specific company scorecard event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_pulse_vpns
List SecurityScorecard service pulse VPN issues for a specific company scorecard on a given effective date, retrieved from the scorecard history events. Returns entries with severity, status, and issue count details. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_rdps
List SecurityScorecard service RDP issues from a company's scorecard event history for a given effective date. Returns a paginated list of service_rdp issue entries. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_redis
List service_redis issues from a SecurityScorecard company's scorecard event log history for a specific effective date. Returns issue entries including id, severity, and created_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_rsyncs
List service_rsync issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_smbs
List SecurityScorecard service_smb issues from a company scorecard's history events on a specific effective date. Returns issue entries from the scorecard event log showing service SMB issue changes for that date. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_soaps
List service SOAP issue entries from a SecurityScorecard company scorecard's history event log for a specific effective date. Returns an array of entries describing each service SOAP issue finding recorded in the event log. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_socks_proxies
List service SOCKS proxy issue findings from a SecurityScorecard company's scorecard event history at a given effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_telnets
List SecurityScorecard service telnet issues from a scorecard's event history for a specific effective date. Returns entries with domain, port, and severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_vncs
List service VNC issues from a SecurityScorecard company scorecard's historical event log for a given effective date. Returns a list of service VNC issue entries. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_vuln_host_highs
List high-severity service vulnerability host issues from a SecurityScorecard company's scorecard historical event log on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_vuln_host_lows
List low-severity service vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_vuln_host_mediums
List medium-severity service vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_issues_service_vuln_host_v_3_criticals
List critical service vulnerability host issues (service_vuln_host_v3_critical) from a SecurityScorecard company's scorecard history events on a specific effective date. Returns vulnerability issue entries for the specified scorecard and date. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_vuln_host_v_3_highs
List high-severity service vulnerability host issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_service_vuln_host_v_3_lows
List low-severity service vulnerability host issues (service_vuln_host_v3_low) for a SecurityScorecard company scorecard event on a specific effective date. Returns entries with domain, cve, and ip for each vulnerability finding. Required: scorecard_identifier, effective_date, domain.
list_all_security_scorecard_issues_service_vuln_host_v_3_mediums
List medium-severity service vulnerability host issues for a SecurityScorecard scorecard event on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_site_emits_browser_logs
List site_emits_browser_log issue findings from a SecurityScorecard company's scorecard event history for a specific effective date. Returns entries of issue findings from the event log. Required: scorecard_identifier, effective_date.
list_all_issues_site_requests_data_over_insecure_channels
List SecurityScorecard 'site_requests_data_over_insecure_channel' issue findings from a scorecard's event history for a specific effective date. Returns: domain, severity, first_observed, last_observed. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_spa_browsers
List SPA browser issues for a specific SecurityScorecard scorecard event on a given effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_spf_record_malformeds
List SPF record malformed issue events from a SecurityScorecard scorecard's event history for a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_spf_record_missings
List SecurityScorecard SPF record missing issue events from a company scorecard's history for a given effective date. Returns entries from the scorecard event log describing updates related to the spf_record_missing issue type, such as new issues and resolved issues. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_spf_record_softfails
List historical "spf_record_softfail" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, domain, record, analysis, analysis_description, reason, effective_date, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_spf_record_wildcards
List SPF record wildcard issue entries from a SecurityScorecard company scorecard's history event log for a specific effective date. The scorecard event log tracks scorecard updates such as new issues being detected and issues getting resolved. Returns a collection of SPF record wildcard issue entries from the event history. Required: scorecard_identifier, effective_date.
list_all_issues_sql_payload_using_tor_proxy_detecteds
List SecurityScorecard event log issues of type sql_payload_using_tor_proxy_detected for a company's scorecard on a specific effective date. Returns the event log entries describing detected SQL payload issues using Tor proxy for the given scorecard and date. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_ssh_weak_ciphers
List SSH weak cipher issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_ssh_weak_macs
List historical "ssh_weak_mac" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, banner, evidence, connection_attributes, reason, effective_date, group_status. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_ssh_weak_protocols
List SSH weak protocol issues from a SecurityScorecard scorecard's historical event log for a specific effective date. Returns an array of SSH weak protocol issue finding entries. Required: scorecard_identifier, effective_date.
list_all_issues_subdomain_dmarc_contains_nones
List SecurityScorecard subdomain DMARC issue entries (subdomains with no DMARC record) from a scorecard's event log for a specific effective date. Returns: entries with id and subdomain DMARC issue details. Required: scorecard_identifier, effective_date.
list_all_issues_synth_high_risk_appsec_vulnerabilities
List synthetic high-risk application security vulnerability issues recorded in a SecurityScorecard scorecard's event history for a given effective date. Returns: vulnerability issue entries with id, severity, and count. Required: scorecard_identifier, effective_date.
list_all_issues_synth_possible_initial_acceses
List SecurityScorecard synth_possible_initial_access issues for a specific scorecard event on an effective date. Returns an array of issue entries from the scorecard's event history. Required: scorecard_identifier, effective_date.
list_all_issues_targeted_by_threat_actor_groups
List SecurityScorecard scorecard issues targeted by threat actor groups for a specific effective date in the scorecard event history. Returns: id, issue_type, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_telephonies
List SecurityScorecard telephony issues for a company scorecard on a specific effective date from the scorecard history event log. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_issues_threat_actor_hosting_infrastructures
List threat actor hosting infrastructure issues for a SecurityScorecard company scorecard event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tls_ocsp_staplings
List TLS OCSP stapling issues from a SecurityScorecard scorecard's historical event on a specific effective date. Returns a collection of issue entries detailing the TLS OCSP stapling findings recorded for that event. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tls_weak_ciphers
List TLS weak cipher issues for a specific historical event on a SecurityScorecard company scorecard. Returns entries describing TLS weak cipher issue findings from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tls_weak_protocols
List TLS weak protocol issues from a SecurityScorecard company scorecard's event history at a specific effective date. Returns: domain, port, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tlscert_excessive_expirations
List historical "tlscert_excessive_expiration" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, target, observations, sha256_fingerprint, evidence, output, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tlscert_expireds
List TLS certificate expired issues for a SecurityScorecard scorecard at a specific effective date in the event history. Returns: severity, domain, port. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tlscert_no_revocations
List SecurityScorecard TLS certificate no-revocation issue entries from a company's scorecard event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tlscert_revokeds
List SecurityScorecard TLS certificate revocation issues from a scorecard's event-log history for a specific effective date. Returns a list of revoked TLS certificate issue entries from the scorecard's event history. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tlscert_self_signeds
List TLS self-signed certificate issue findings from a specific SecurityScorecard scorecard history event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tlscert_weak_signatures
List TLS certificate weak signature issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns entries with domain, port, and severity for each weak TLS certificate signature finding. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tor_servers
List SecurityScorecard tor_server issues recorded for a company's scorecard on a specific effective date from the scorecard event history. Returns entries with domain, severity, is_positive, first_seen, and last_seen. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_tor_traffic_detecteds
List Tor traffic detected issues for a SecurityScorecard company scorecard's history event on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_typosquats
List typosquat issue findings for a SecurityScorecard company scorecard on a specific event date in the scorecard's history. Returns a paginated list of typosquat issue entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_uces
List historical "uce" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, src_ip, sources, reason, effective_date, group_status. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_unsafe_sri_v_2_s
List historical "unsafe_sri_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_upnp_accessibles
List UPnP accessible SecurityScorecard issue findings for a specific scorecard event on a given effective date. Returns: severity, port, domain. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_uses_go_daddy_infrastructures
List GoDaddy infrastructure issues recorded in a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_issues_uses_go_daddy_managed_wordpreses
List uses_go_daddy_managed_wordpress issue findings from a SecurityScorecard company's scorecard event history for a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_waf_detected_v_2_s
List historical "waf_detected_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_web_vuln_host_highs
List high-severity web vulnerability host issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns issue entries from the event log. Required: scorecard_identifier, effective_date. History is available within the last 12 months.
list_all_security_scorecard_issues_web_vuln_host_lows
List low-severity web vulnerability host issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: entries with domain, cve, and ip for each vulnerability host finding. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_web_vuln_host_mediums
List medium-severity web vulnerability host issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: domain, severity, count. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_web_vuln_host_v_3_criticals
List critical web vulnerability host issues (web_vuln_host_v3_critical) from a SecurityScorecard scorecard's event history for a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_web_vuln_host_v_3_highs
List high-severity web vulnerability host issues (web_vuln_host_v3_high) from a SecurityScorecard scorecard's history events on a specific effective date. Returns: id, domain, cve, ip. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_web_vuln_host_v_3_lows
List low-severity web vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date, domain.
list_all_security_scorecard_issues_web_vuln_host_v_3_mediums
List medium-severity web vulnerability host issues from a SecurityScorecard scorecard's event log history for a specific effective date. Returns entries of web vulnerability host findings from the scorecard event log. Required: scorecard_identifier, effective_date. Scorecard history is available for the last 12 months.
list_all_issues_webapp_vulnerable_to_spring_4_shells
List webapp vulnerable to Spring4Shell issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_website_copyright_expireds
List website copyright expired issues for a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_website_copyright_up_to_dates
List website copyright up to date issues for a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_websocket_receives_datas
List SecurityScorecard 'websocket receives data' issue events from a company's scorecard event history for a specific effective date. Returns: id, type, severity for each issue entry. Required: scorecard_identifier, effective_date.
list_all_issues_websocket_requests_contain_sensitive_fields
List SecurityScorecard historical issue findings of type 'websocket_requests_contain_sensitive_fields' for a company scorecard at a specific effective date. Returns a paginated list of entries with id. Required: scorecard_identifier, effective_date.
list_all_security_scorecard_issues_websocket_sends_datas
List SecurityScorecard websocket sends data issues for a specific scorecard event on a given effective date. Returns a paginated collection of issue entries from the scorecard's history event log. Required: scorecard_identifier, effective_date.
list_all_issues_x_content_type_options_incorrect_v_2_s
List SecurityScorecard x_content_type_options_incorrect_v2 issue findings from a company's scorecard history event on a specific effective date. Returns issue finding entries from the scorecard event log. Required: scorecard_identifier, effective_date.
list_all_issues_x_frame_options_incorrect_v_2_s
List X-Frame-Options incorrect issue findings from a SecurityScorecard company scorecard's history events for a given effective date. Returns a collection of issue entries associated with the x_frame_options_incorrect_v2 issue type. Required: scorecard_identifier, effective_date.
list_all_issues_x_xss_protection_incorrect_v_2_s
List SecurityScorecard X-XSS-Protection incorrect v2 issue findings for a specific scorecard history event on a given effective date. Returns: id, domain, severity. Required: scorecard_identifier, effective_date.
list_all_issues_xss_payload_using_tor_proxy_detecteds
List SecurityScorecard 'xss_payload_using_tor_proxy_detected' issue findings for a specific scorecard's history event on a given effective date. Returns a paginated collection of issue finding entries from the scorecard event log. Required: scorecard_identifier, effective_date. Company must be added to a portfolio before scorecard data is accessible.
create_a_security_scorecard_custom_scorecard
Create a custom scorecard in SecurityScorecard for a subsidiary or subset of a regular scorecard. Returns: id, attributes.
get_single_security_scorecard_custom_scorecard_by_id
Get a custom scorecard in SecurityScorecard by id. Returns: id, attributes. Required: id.
update_a_security_scorecard_custom_scorecard_by_id
Update a custom scorecard in SecurityScorecard by id. Returns: id, attributes. Required: id.
delete_a_security_scorecard_custom_scorecard_by_id
Delete a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
security_scorecard_custom_scorecard_filters_bulk_update
Update the filter configuration for a SecurityScorecard custom scorecard. Returns: id. Required: id.
security_scorecard_custom_scorecard_filters_bulk_delete
Delete the filter configuration for a SecurityScorecard custom scorecard. Returns an empty 204 response on success. Required: id.
security_scorecard_custom_scorecard_sources_bulk_update
Update the sources of a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
security_scorecard_custom_scorecard_sources_bulk_delete
Delete the sources of a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
list_all_security_scorecard_compliance_frameworks
List compliance frameworks available in SecurityScorecard. Returns: id.
get_single_security_scorecard_compliance_framework_by_id
Get a single compliance framework in SecurityScorecard by id. Returns: id. Required: id.
get_single_security_scorecard_vendor_detection_portfolio_by_id
Get a single SecurityScorecard portfolio by its id. Returns: id, name, description, privacy. Required: id.
list_all_security_scorecard_vendor_detection_fourth_parties
List fourth-party vendors detected by SecurityScorecard's vendor detection for a given domain. Returns: domain. Required: domain.
list_all_security_scorecard_vendor_detection_products
List vendor detection products detected on a domain in SecurityScorecard. Returns: id, name. Required: domain.
list_all_security_scorecard_vendor_detection_risks
List vendor detection risks for a domain in SecurityScorecard. Returns a paginated list of risk entries from the vendor detection analysis for the specified domain. Required: domain.
list_all_security_scorecard_vendor_detection_third_parties
List third-party vendors and technologies detected on a domain via SecurityScorecard's Attack Surface Intelligence. Returns a paginated collection of detected third-party entries. Required: domain.
create_a_security_scorecard_csv_export
Create a compliance CSV export report in SecurityScorecard. Returns: report_url, status. The report is generated asynchronously; use the returned report_url to download the CSV file once the status indicates completion.
create_a_security_scorecard_reports_detailed
Generate a detailed SecurityScorecard report asynchronously. Returns: report_url, status. The report is processed in the background and can be downloaded from the returned report_url once complete. Subject to a stricter per-endpoint rate limit; avoid high-frequency automated calls.
create_a_security_scorecard_reports_events_json
Generate a SecurityScorecard scorecard events report as JSON for asynchronous download. Returns: report_url, status. The report is processed asynchronously and can be downloaded from the returned report_url once complete.
list_all_security_scorecard_reports_files
List SecurityScorecard report files at a given file path. Returns: id, name, report_url, status. Required: file_path.
create_a_security_scorecard_reports_footprint_domain
Generate a footprint domains report in SecurityScorecard. Returns: report_url, status. The report is processed asynchronously; once complete, download the generated file from the returned report_url.
create_a_security_scorecard_reports_footprint_ip
Generate a SecurityScorecard footprint IPs report asynchronously. Returns: report_url, status. The report_url can be used to download the generated file once processing completes.
create_a_security_scorecard_reports_full_scorecard_json
Generate a full scorecard JSON report in SecurityScorecard. The report is produced asynchronously. Returns: report_url, status. Once the status indicates completion, download the report from the report_url.
create_a_security_scorecard_reports_issue
Generate an issues report in SecurityScorecard. Returns: report_url, status. The report is processed asynchronously — download the file from the returned report_url once generation completes.
create_a_security_scorecard_reports_partnership
Create a partnership report in SecurityScorecard. Returns: report_url, status. The report is generated asynchronously — download it from report_url once complete.
create_a_security_scorecard_reports_portfolio
Generate a portfolio report in SecurityScorecard. The report is processed asynchronously and can be downloaded from the returned URL once complete. Returns: report_url, status.
list_all_security_scorecard_reports_recents
List recently generated SecurityScorecard reports. Returns: report_url, status. Each entry includes a download URL for the generated report file (e.g. csv, pdf) and its current processing status.
create_a_security_scorecard_reports_scorecard_footprint
Generate a Scorecard Footprint report for a company, describing the digital footprint attributed to its scorecard. Returns the generated report id, which is then used to poll for and download the finished file. Optionally scope the report by ips, subdomains, or countries, and choose pdf or csv output. Required: scorecard_identifier.
create_a_security_scorecard_reports_summary
Generate a Company Summary report for a company's SecurityScorecard scorecard. Returns the generated report id, which is then used to poll for and download the finished file. Optionally set branding when white-labeling is enabled for your account. Required: scorecard_identifier.
create_a_security_scorecard_invitation
Create an invitation in SecurityScorecard to invite a company to access and improve their own scorecard. All invited companies gain a free account. Returns: id, domain, created_at. Required: domain.
create_a_security_scorecard_issue_feedback_validation_request
Submit a feedback validation request for a specific issue type on a SecurityScorecard company scorecard. Returns a confirmation of the validation request submission. Required: domain, type.
create_a_security_scorecard_issue_feedback
Submit feedback to refute an issue of a specific type on a company's SecurityScorecard scorecard. Returns a confirmation of the submitted feedback. Required: domain, type.
list_all_security_scorecard_metadata_factors
List all available SecurityScorecard factor types and their metadata. Returns: id, name.
list_all_security_scorecard_metadata_issue_types
List all SecurityScorecard issue types. Returns: id, name.
get_single_security_scorecard_metadata_issue_type_by_id
Get a single SecurityScorecard issue type by id. Returns: id, name. Required: id.
list_all_security_scorecard_notifications_recents
List recent SecurityScorecard notifications for a user by username, generated from configured scorecard alert triggers. Returns notification entries including id. Required: username.
list_all_security_scorecard_metadata_service_providers
List SAML service provider metadata entries in SecurityScorecard. Returns: id, name.
list_all_security_scorecard_jiras
Validate Jira secrets configured in SecurityScorecard by calling the validate-jira-secrets action endpoint. Returns a validation result object whose fields are not documented in the upstream SecurityScorecard API reference.
list_all_security_scorecard_apps_jira_legacies
Validate Jira secrets for the Jira Legacy app integration in SecurityScorecard. This GET action endpoint checks whether the configured Jira credentials are valid. Returns an empty 204 response on success.
list_all_security_scorecard_jira_legacy_installs
List SecurityScorecard Jira Legacy app installations. Returns: id, created_at, updated_at. Max 50 items per page.
create_a_security_scorecard_jira_legacy_install
Install or configure the SecurityScorecard Jira Legacy app integration. Returns: id, created_at, updated_at.
list_all_security_scorecard_jira_legacy_installation_errors
List Jira legacy app installation errors in SecurityScorecard. Returns a paginated collection of error entries, each containing id and name. Max 50 items per page.
list_all_security_scorecard_jira_legacy_redirect_from_sscs
List Jira legacy redirect entries from SecurityScorecard. Returns: id, name. No required parameters.
list_all_security_scorecard_jira_installs
List Jira app installations in SecurityScorecard. Returns a paginated collection of install records. Returns: id.
create_a_security_scorecard_jira_install
Install a Jira app integration in SecurityScorecard. Returns the created install record. Returns: id.
list_all_security_scorecard_jira_installation_errors
List Jira installation errors recorded in SecurityScorecard. Returns a paginated collection of installation error records identified by id.
list_all_security_scorecard_jira_redirect_from_sscs
List Jira redirect-from-SSC entries in SecurityScorecard. The upstream API reference does not document the response shape for this endpoint; entries are returned under the standard `entries` pagination envelope. Returns: id, attributes.
list_all_security_scorecard_apps_jiras
List Jira app assets by asset filename in SecurityScorecard. Returns: id, name. Required: asset_filename.
create_a_security_scorecard_app_job
Create a new job for a SecurityScorecard app. Returns: id, created_at, updated_at. Required: app_id.
update_a_security_scorecard_app_job_by_id
Update a SecurityScorecard app job by id. Returns: id, created_at, updated_at. Required: app_id, id.
list_all_security_scorecard_audits_api_logs
List SecurityScorecard API audit log entries. Returns: id, created_at, updated_at. The full field set of each audit log entry is not enumerated in the available SecurityScorecard API documentation.
list_all_security_scorecard_companie_active_issues
List a company's currently active issues on its SecurityScorecard scorecard, grouped by issue type. Returns issue_types, each with name, issues, and issues_count. Optionally filter with issue_types. Required: scorecard_identifier.
get_single_security_scorecard_domain_migration_statuses_id_by_id
Get a domain migration status by id in SecurityScorecard. Returns the domain migration status record for the specified identifier. Required: id.
list_all_security_scorecard_targets
List domain migration statuses between a source and target domain in SecurityScorecard. Returns: source, target, status. Required: source, target.
security_scorecard_footprint_tags_bulk_create
Bulk create tags for SecurityScorecard footprint scorecards by submitting a JSON array of tag objects. Returns the created tags including their id and name. Required: a JSON array of tag objects, each with a name.
list_all_security_scorecard_assets_domains
List domain assets discovered within a SecurityScorecard footprint for a given parent domain. Returns: id. Required: parent_domain.
list_all_security_scorecard_assets_ips
List IP address assets discovered in the SecurityScorecard footprint for a given parent domain. Returns a paginated collection of IP entries from the domain's attack surface. Required: parent_domain.
create_a_security_scorecard_assignees_domain
Create a domain assignee for a SecurityScorecard footprint by parent domain. Returns an empty 204 response on success. Required: parent_domain.
create_a_security_scorecard_assignees_ip
Create an IP assignee for a SecurityScorecard footprint identified by its parent domain. Returns: ip, parent_domain, created_at. Required: parent_domain, ip.
list_all_security_scorecard_assignee_assets
List assignee assets for a given parent domain and asset type in SecurityScorecard's footprint. Returns: id, name. Required: parent_domain, asset_type.
list_all_security_scorecard_attribution_logs
List attribution log entries for a SecurityScorecard footprint by parent domain. Returns: id, created_at, updated_at. Required: parent_domain.
security_scorecard_domain_associate_tags_bulk_create
Bulk associate tags with a domain's assets in SecurityScorecard's footprint. Returns an empty 204 response on success. Required: parent_domain.
security_scorecard_ip_associate_tags_bulk_create
Bulk associate tags with IPs for a parent domain footprint in SecurityScorecard. Returns an empty 204 response on success. Required: parent_domain.
list_all_security_scorecard_intake_vendor_forms
List current intake vendor forms in SecurityScorecard. Returns: id, attributes. No required parameters.
list_all_security_scorecard_forms_access_domains
List access domains for the current SecurityScorecard intake vendor form. Returns: id, name.
security_scorecard_forms_access_domains_bulk_update
Update the access domains for the current SecurityScorecard intake vendor form by replacing the existing set. Returns: id, name. Required: entries.
list_all_security_scorecard_forms_publish_status
List the current publish status of intake vendor forms in SecurityScorecard. Returns a paginated collection of publish status entries. The upstream response is paginated with a maximum of 50 items per page.
create_a_security_scorecard_forms_question
Create a new question on the current SecurityScorecard intake vendor form. Returns the created question object including its id.
update_a_security_scorecard_forms_question_by_id
Update an existing question on the current SecurityScorecard intake vendor form by id. Returns the updated question object including its id. Required: id.
delete_a_security_scorecard_forms_question_by_id
Delete a question from the current SecurityScorecard intake vendor form by id. Returns an empty 204 response on success. Required: id.
security_scorecard_forms_questions_reorders_bulk_update
Reorder questions on the current SecurityScorecard intake vendor form by submitting an ordered list of question IDs reflecting the desired new sequence. Returns an empty 204 response on success. Required: a JSON array of question IDs in the new order.
list_all_security_scorecard_forms_risk_settings
List current risk settings for intake vendor forms in SecurityScorecard. Returns a paginated collection of risk setting entries via the entries array, each containing id and name. Max 50 items per page.
security_scorecard_forms_risk_settings_bulk_update
Update current risk settings for intake vendor forms in SecurityScorecard. Returns: id, name. Required: entries.
create_a_security_scorecard_forms_status
Update the status of the current vendor intake form in SecurityScorecard. Returns an empty 204 response on success.
create_a_security_scorecard_forms_setup
Create a forms setup in SecurityScorecard by submitting a POST request to the intake-vendor forms setup endpoint. The response shape is not documented in the available SecurityScorecard API reference; treat the returned body as opaque. No required caller-supplied parameters are documented beyond the request body.
list_all_security_scorecard_intake_vendor_review_items
List intake vendor review items in SecurityScorecard. Returns: id, name.
list_all_security_scorecard_intake_vendor_risk_tier_templates
List risk tier templates for vendor intake in SecurityScorecard. Returns a collection of risk tier template records from the entries array.
security_scorecard_intake_vendor_risk_tier_templates_bulk_update
Update intake vendor risk tier templates in SecurityScorecard by submitting a JSON request body. Returns the updated risk tier template object including its id, name, and tier configuration.
get_single_security_scorecard_intake_vendor_submission_by_id
Get a specific SecurityScorecard intake vendor submission by id. Returns the submission object with content-type-specific fields including id and attributes. Required: id.
update_a_security_scorecard_intake_vendor_submission_by_id
Update a SecurityScorecard intake vendor submission by id with partial data. Returns the updated submission object with content-type-specific fields including id and attributes. Required: id.
list_all_security_scorecard_jira_leen_installs
List SecurityScorecard Jira Leen installs. Returns install records including id and additional attributes whose individual fields are not enumerated in the upstream API documentation. Max 50 items per page.
list_all_security_scorecard_jira_leen_installation_errors
List Jira Leen installation errors in SecurityScorecard. Returns: id, name. Max 50 items per page.
list_all_security_scorecard_jira_leen_redirect_from_sscs
List redirect entries from SecurityScorecard for the Jira Leen integration. Returns: id.
list_all_security_scorecard_leen_callbacks
List leen callbacks in SecurityScorecard filtered by app, organization, and status. Returns a paginated collection of callback entries with id and name. Required: app_id, organization_id, status.
delete_a_security_scorecard_managed_services_customer_by_id
Delete a managed services customer in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
list_all_security_scorecard_managed_services_customers
List managed services customers in SecurityScorecard. Returns: id, created_at, updated_at.
get_single_security_scorecard_managed_services_document_by_id
Get a specific managed services document in SecurityScorecard by id. Returns: id, created_at, updated_at. Required: id.
security_scorecard_managed_services_documents_bulk_delete
Delete managed services documents in SecurityScorecard. Returns an empty 204 response on success.
get_single_security_scorecard_documents_download_by_id
Download a managed services document in SecurityScorecard by id. Returns: report_url, status. Required: id.
create_a_security_scorecard_documents_upload
Upload a document to SecurityScorecard managed services via POST. Returns: id, created_at, updated_at.
security_scorecard_documents_uploads_bulk_update
Update an uploaded document in SecurityScorecard managed services via PUT. Returns: id, created_at, updated_at.
get_managed_services_managed_customer_by_id
Get a SecurityScorecard managed customer by id. Returns the managed customer record including its id and other customer attributes. Required: id.
security_scorecard_reports_likelihood_assessments_bulk_update
Update a SecurityScorecard likelihood assessment report. Returns: report_url, status. Required: report_url, status.
security_scorecard_reports_likelihood_assessments_bulk_delete
Delete a SecurityScorecard likelihood assessment report. Returns: report_url, status. Required: report_url.
security_scorecard_reports_remediation_plans_bulk_update
Update a remediation plan report in SecurityScorecard by submitting a report URL and status. Returns: report_url, status. Required: report_url, status.
list_all_security_scorecard_max_breaches
List breach entries from the SecurityScorecard Max platform. Returns: id, name. The response is paginated; the upstream API wraps results in an entries array.
security_scorecard_max_breaches_bulk_update
Update SecurityScorecard breach partner findings via the Max platform. Returns: report_url, status.
get_single_security_scorecard_breaches_report_by_id
Get a SecurityScorecard breach report by id. Returns: report_url, status. Required: id.
list_all_security_scorecard_customer_breaches
List customer breach records from SecurityScorecard. Returns a paginated collection of breach entries. No required parameters.
list_all_security_scorecard_customer_executive_summaries
List customer executive summaries from SecurityScorecard's MAX platform. Returns the executive summary object with content-type-specific fields; the available fields depend on the upstream MAX schema and are not individually documented in the public API reference. Entries are paginated.
security_scorecard_customer_executive_summaries_bulk_update
Update a customer's executive summary in SecurityScorecard's MAX platform. Returns: id, attributes. Required: customer_id.
list_all_security_scorecard_customer_findings
List customer security findings from SecurityScorecard's MAX platform. Returns a paginated list of finding entries, each including its id. Max 50 entries per page.
list_all_security_scorecard_customer_historical_scores
List historical SecurityScorecard scores for a customer scorecard over a date range within the last 12 months. Returns: score, grade, date. Required: scorecard_identifier. Optional timing granularity (daily, weekly, or monthly) defaults to daily.
list_all_customer_incident_likelihood_over_times
List SecurityScorecard Max customer incident-likelihood time-series entries. Returns: date, likelihood. The response is paginated via the standard entries wrapper.
list_all_security_scorecard_customer_incident_likelihood_trends
List SecurityScorecard customer incident likelihood trends over time. Returns: date, likelihood.
list_all_security_scorecard_customer_likelihood_assessments
List customer likelihood assessments in SecurityScorecard. Returns: id, attributes. The response field set for each assessment record is not documented in the available API reference; consult the SecurityScorecard MAX API docs for the field-level breakdown.
get_customer_likelihood_assessment_by_id
Get a specific SecurityScorecard customer likelihood assessment by id. Returns the likelihood assessment object including its id. Required: id.
list_all_security_scorecard_raw_findings_daily_avgs
List daily-average raw findings for a customer in SecurityScorecard. Returns a paginated collection of entries, each representing a daily-average raw finding record. No required parameters.
list_all_security_scorecard_raw_findings_daily_counts
List daily counts of raw findings in SecurityScorecard. Returns: date, count.
list_all_security_scorecard_customer_remediation_plans
List customer remediation plans in SecurityScorecard. Returns a paginated collection where each entry includes: id.
get_single_security_scorecard_customer_remediation_plan_by_id
Get a single customer remediation plan in SecurityScorecard by id. Returns: id. Required: id.
list_all_security_scorecard_reports_downloads
List SecurityScorecard customer report download entries. Returns: report_url, status. Once a report's status indicates completion, use the report_url to download the generated file (e.g. CSV, PDF).
list_all_security_scorecard_reports_vendors
List SecurityScorecard vendor reports. Returns: report_url, status. No required parameters.
list_all_security_scorecard_customer_tags_counts
List customer tags counts in SecurityScorecard. Returns a paginated collection of tag count entries extracted from the entries array. No required parameters.
list_all_security_scorecard_customer_vendors
List customer vendors in SecurityScorecard. Returns a paginated collection of vendor records via the entries array. Returns: id, name.
get_single_security_scorecard_customer_vendor_by_id
Get a single customer vendor by id in SecurityScorecard. Returns: id, name. Required: id.
list_all_security_scorecard_customer_vendors_improvements
List vendor score improvements in SecurityScorecard. Returns: id, domain, name, score, grade, improvement, created_at. Entries are paginated using the standard SecurityScorecard page/size pagination structure.
list_all_security_scorecard_customer_vendors_risk_highlights
List vendor risk highlights for customers in SecurityScorecard. Returns: id, created_at, updated_at. No required parameters.
list_all_vendors_risk_matrix_incident_likelihoods
List incident likelihood entries for the vendors risk matrix in SecurityScorecard MAX. Returns a paginated collection of incident likelihood records unwrapped from the entries array. No required parameters.
list_all_vendors_risk_matrix_indicator_severities
List indicator severity entries for the vendors risk matrix in SecurityScorecard. Returns a paginated collection of indicator severity entries (unwrapped from the `entries` array) with id, name, and severity. No required parameters.
list_all_security_scorecard_slots
List slots for a SecurityScorecard customer by customer_id. Returns a paginated collection of slot records; each entry includes id. Required: customer_id.
security_scorecard_slots_bulk_update
Update slots for a SecurityScorecard customer by customer_id via a JSON request body. Returns the updated slot record including id. Required: customer_id.
list_all_security_scorecard_customer_acceses
List customer access records for a specific SecurityScorecard customer. Returns: id, name. Required: customer_id.
create_a_security_scorecard_customer_accese
Create customer access for a SecurityScorecard customer by customer id. Returns: id. Required: customer_id.
list_all_security_scorecard_customer_managed_questionnaires
List managed questionnaires for a SecurityScorecard customer. Returns a paginated collection of questionnaire records (via the entries array) with id and name. Required: customer_id.
security_scorecard_customer_managed_questionnaires_bulk_update
Update a managed questionnaire for a SecurityScorecard customer. Returns: id, updated_at. Required: customer_id.
list_all_security_scorecard_customer_users
List users belonging to a specific SecurityScorecard customer. Returns: id, created_at, updated_at. Required: customer_id.
list_all_security_scorecard_indicators_exclusions
List SecurityScorecard indicator exclusions. Returns: id, created_at, updated_at.
create_a_security_scorecard_indicators_exclusion
Create a new SecurityScorecard indicator exclusion. Returns: id, created_at, updated_at.
security_scorecard_indicators_exclusions_bulk_delete
Bulk delete SecurityScorecard indicator exclusions. Returns an empty 204 response on success.
update_a_security_scorecard_indicators_exclusion_by_id
Update a SecurityScorecard indicator exclusion by id. Returns: id, created_at, updated_at. Required: id.
get_single_security_scorecard_max_management_request_by_id
Get a specific SecurityScorecard management request by id. Returns: id. Required: id.
list_all_security_scorecard_notification_preferences
List notification preferences for a SecurityScorecard contact. Returns: id, created_at, updated_at. Required: contact_id.
security_scorecard_notification_preferences_bulk_update
Update notification preferences for a SecurityScorecard contact. Returns: id, created_at, updated_at. Required: contact_id.
list_all_security_scorecard_partner_contacts
List partner contacts in SecurityScorecard. Returns: id, created_at, updated_at. Max 50 per page.
create_a_security_scorecard_contacts_bulk_escalation_toggle
Toggle escalation status for multiple SecurityScorecard contacts in bulk via the partner API. Returns a confirmation response indicating the result of the bulk escalation toggle operation.
list_all_security_scorecard_vendors
List vendor entries for a specific customer and vendor domain in SecurityScorecard's Max partner API. Returns: vendor_domain, customer_id, attributes. Required: customer_id, vendor_domain.
security_scorecard_vendors_bulk_update
Update a vendor for a specific customer and vendor domain in SecurityScorecard's Max partner API. Returns the updated vendor record including vendor_domain, customer_id, and attributes. Required: customer_id, vendor_domain.
list_all_security_scorecard_customer_default_ccs
List default CC (carbon copy) email addresses configured for a SecurityScorecard Max partner customer. Returns: email. Required: customer_id.
create_a_security_scorecard_customer_default_cc
Add a default CC (carbon copy) email address for a SecurityScorecard Max partner customer. Returns: email, customer_id. Required: customer_id.
security_scorecard_customer_default_ccs_bulk_create
Bulk add default CC (carbon copy) email addresses for a SecurityScorecard Max partner customer. Accepts an array of CC email records. Returns: email, customer_id. Required: customer_id.
security_scorecard_customer_default_ccs_bulk_delete
Delete a default CC (carbon copy) email address for a SecurityScorecard Max partner customer by CC email. Returns an empty 204 response on success. Required: customer_id, cc_email.
list_all_security_scorecard_vendor_cc_extras
List CC email extras for a vendor in SecurityScorecard. Returns: cc_email. Required: customer_id, vendor_id.
create_a_security_scorecard_vendor_cc_extra
Create a CC email extra for a vendor in SecurityScorecard. Returns: cc_email. Required: customer_id, vendor_id, cc_email.
security_scorecard_vendor_cc_extras_bulk_delete
Delete a CC email extra for a vendor in SecurityScorecard by cc_email. Returns an empty 204 response on success. Required: customer_id, vendor_id, cc_email.
list_all_security_scorecard_vendor_effective_ccs
List effective control categories (effective CCs) for a specific vendor within a SecurityScorecard customer. Returns a paginated collection of effective control category records, each with its id and attributes. Required: customer_id, vendor_id.
list_all_security_scorecard_partner_likelihood_assessments
List partner likelihood assessments in SecurityScorecard. Returns a paginated collection of assessment records with id. Max 50 per page.
get_partner_likelihood_assessment_by_id
Get a partner likelihood assessment by id in SecurityScorecard. Returns the assessment record including its id and assessment-specific attributes. Required: id.
list_all_security_scorecard_partner_managed_customers
List managed customers for a partner in SecurityScorecard MAX. Returns a paginated collection of managed customer records via the entries array. No required parameters.
list_all_security_scorecard_partner_notification_settings
List SecurityScorecard partner notification settings. Returns: id. Results are returned as entries in a paginated collection.
security_scorecard_partner_notification_settings_bulk_update
Update partner notification settings in SecurityScorecard via a PUT request to the Max API. Returns an empty 204 response on success.
list_all_security_scorecard_partner_remediation_plans
List SecurityScorecard partner remediation plans. Returns: id. Max 50 per page.
get_single_security_scorecard_partner_remediation_plan_by_id
Get a single SecurityScorecard partner remediation plan by id. Returns: id. Required: id.
delete_a_security_scorecard_partner_remediation_plan_by_id
Delete a SecurityScorecard partner remediation plan by id. Returns an empty 204 response on success. Required: id.
list_all_security_scorecard_partner_schedules
List partner schedules in SecurityScorecard. Returns a paginated collection of schedule records with id, created_at, and updated_at. Max 50 entries per page.
security_scorecard_partner_schedules_bulk_update
Update partner schedules in SecurityScorecard via a PATCH request. Returns the updated schedule record with id, created_at, and updated_at.
list_all_security_scorecard_schedules_reminders
List schedule reminders in SecurityScorecard. Returns: id, created_at, updated_at.
list_all_security_scorecard_partner_tier_slots
List partner tier slots in SecurityScorecard. Returns a paginated collection of tier slot records. Returns: id, created_at, updated_at.
list_all_security_scorecard_partner_vendors
List partner vendors in SecurityScorecard. Returns: id, name. Entries are paginated using the standard SecurityScorecard entries collection structure.
list_all_security_scorecard_historical_scores
List historical SecurityScorecard scores for a partner customer. Returns score history entries including id and attributes with score and timing data. Required: customer_id.
list_all_security_scorecard_incident_likelihood_over_times
List incident likelihood time-series data for a SecurityScorecard Max partner customer over time. Returns: date, likelihood. Required: customer_id.
list_all_security_scorecard_incident_likelihood_trends
List incident likelihood trend entries for a SecurityScorecard MAX partner customer. Returns a collection of trend entries containing id and attributes with incident likelihood values over time. Required: customer_id.
list_all_security_scorecard_questionnaires
List SecurityScorecard questionnaires for a partner customer. Returns: id. Required: customer_id.
list_all_security_scorecard_questionnaires_status_summaries
List questionnaire status summary entries for a SecurityScorecard Max partner customer. Returns: id. Required: customer_id.
list_all_security_scorecard_tags_counts
List tag counts for a SecurityScorecard customer via the partner API. Returns a paginated list of tag count entries (unwrapped from the `entries` array). Required: customer_id.
list_all_security_scorecard_vendors_improvements
List vendor improvement records for a specific customer in SecurityScorecard MAX. Returns: id. Required: customer_id.
list_all_security_scorecard_vendors_risk_highlights
List vendor risk highlights for a SecurityScorecard Max partner customer. Returns: id. Required: customer_id.
list_all_security_scorecard_users_acceses
List user access records in SecurityScorecard. Returns: id. Results are paginated via cursor-based pagination. The upstream API documentation does not enumerate additional fields for this endpoint.
list_all_security_scorecard_vendor_likelihood_assessments
List vendor likelihood assessments from SecurityScorecard. Returns a paginated collection where each entry includes: id.
get_single_security_scorecard_vendor_likelihood_assessment_by_id
Get a single vendor likelihood assessment by id in SecurityScorecard. Returns: id. Required: id.
list_all_security_scorecard_likelihood_assessments_latests
List the latest vendor likelihood assessments in SecurityScorecard's Max Platform. Returns: id. The detailed response fields for each assessment entry are not documented in the available SecurityScorecard API reference.
list_all_security_scorecard_vendor_remediation_plans
List vendor remediation plans in SecurityScorecard. Returns: id. Entries are returned via standard SecurityScorecard pagination (entries wrapper).
get_single_security_scorecard_vendor_remediation_plan_by_id
Get a single SecurityScorecard vendor remediation plan by id. Returns: id. Required: id.
list_all_security_scorecard_max_indicators
List SecurityScorecard MAX indicators. Returns: id.
get_single_security_scorecard_max_indicator_by_id
Get a single SecurityScorecard MAX indicator by id. Returns: id. Required: id.
security_scorecard_update_asyncs_bulk_update
Initiate an asynchronous domain migration in SecurityScorecard, moving a domain from an origin to a target. This is an asynchronous operation. Required: origin, target.
list_all_security_scorecard_plans
List SecurityScorecard plans. Returns: id, name.
get_single_security_scorecard_plan_by_id
Get a single SecurityScorecard plan by id. Returns: id, name. Required: id.
delete_a_security_scorecard_plan_by_id
Delete a SecurityScorecard plan by id. Returns an empty 204 response on success. Required: id.
create_a_security_scorecard_plans_archive
Create an archived score plan in SecurityScorecard by submitting a JSON request body. Returns: id, created_at, updated_at.
create_a_security_scorecard_plans_factor_score_improvement
Create a factor score improvement plan in SecurityScorecard. Returns the created plan object including its id and attributes.
update_a_security_scorecard_plans_factor_score_improvement_by_id
Update a factor score improvement plan in SecurityScorecard by id. Returns the updated plan object including its id and attributes. Required: id.
create_a_security_scorecard_plans_issue_resolution
Create a new issue resolution plan in SecurityScorecard. Returns the created plan including its id. Accepts a JSON request body.
update_a_security_scorecard_plans_issue_resolution_by_id
Update an existing SecurityScorecard issue resolution plan by id. Returns the updated plan including its id. Required: id. Accepts a JSON request body.
list_all_security_scorecard_managed_services_vendors
List managed services vendors in SecurityScorecard. Returns a paginated collection of vendor entries with id and name.
create_a_security_scorecard_plans_overall_score_improvement
Create a SecurityScorecard overall score improvement plan. Returns: entries, total, size.
update_plans_overall_score_improvement_by_id
Update a SecurityScorecard overall score improvement plan by id. Returns: entries, total, size. Required: id.
get_single_security_scorecard_plans_remediation_by_id
Get a specific SecurityScorecard remediation plan by id. Returns the remediation plan object including its id. Required: id.
update_a_security_scorecard_plans_remediation_by_id
Update a remediation plan in SecurityScorecard by id. Returns: id. Required: id.
update_a_security_scorecard_item_by_id
Update a single remediation plan item in SecurityScorecard by id. Returns the updated item including id and name. Required: id.
security_scorecard_items_bulk_update
Bulk update remediation plan items in SecurityScorecard for a given remediation plan. Returns the updated items including id and name. Required: remediation_id.
create_a_security_scorecard_plans_unarchive
Unarchive a previously archived SecurityScorecard score plan by submitting its plan identifier. Returns the unarchived plan object including its id. Required: plan_id.
create_a_security_scorecard_plan_editor
Add an editor to a SecurityScorecard plan. Returns: id, created_at. Required: plan_id.
security_scorecard_plan_editors_bulk_delete
Remove editors from a SecurityScorecard plan. Returns an empty 204 response on success. Required: id.
create_a_security_scorecard_plan_guest
Add a guest to a SecurityScorecard score plan. Returns: id, created_at, updated_at. Required: plan_id.
security_scorecard_plan_guests_bulk_delete
Remove guests from a SecurityScorecard score plan by id. Returns an empty 204 response on success. Required: id.
security_scorecard_plan_items_bulk_delete
Delete plan items for a specific plan in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
create_a_security_scorecard_companies_bulk_delete
Bulk delete companies (scorecards) from a SecurityScorecard portfolio by supplying the portfolio_id and a list of company domains to remove. Returns an empty 204 response on success. Required: portfolio_id, domains.
create_a_security_scorecard_reports_assessment
Create an assessment report in SecurityScorecard. Reports are generated asynchronously — the response returns a processing status and a download URL. Returns: report_url, status. The status field indicates the current generation state (e.g. 'processing') and report_url provides the download location once the report is ready.
list_all_security_scorecard_scim_resource_types
List SCIM resource types supported by SecurityScorecard. Returns each resource type definition including id, name, endpoint, schema, schemaExtensions, and meta.
get_single_security_scorecard_scim_resource_type_by_id
Get a single SCIM resource type by id. Returns the resource type definition including id, name, endpoint, schema, schemaExtensions, and meta. Required: id.
list_all_security_scorecard_scim_schemas
List SCIM schema definitions available in SecurityScorecard. Returns: id.
get_single_security_scorecard_scim_schema_by_id
Get a single SCIM schema definition by id in SecurityScorecard. Returns: id. Required: id.
list_all_security_scorecard_scim_service_provider_configs
List SecurityScorecard SCIM service provider configuration entries. Returns: schemas, documentationUri, patch, bulk, filter, changePassword, sort, etag, authenticationSchemes.
delete_a_security_scorecard_scim_user_by_id
Delete a SecurityScorecard SCIM user by id. Returns an empty 204 response on success. Required: id.
list_all_security_scorecard_contacts_companies
List companies (contacts) tracked in SecurityScorecard. Returns each company record including id, name, domain, grade, score, industry, and status.
create_a_security_scorecard_custom_dashboard
Create a new custom dashboard in SecurityScorecard. Returns the created dashboard object including its id, created_at, and updated_at.
get_single_security_scorecard_issue_by_id
Get a single SecurityScorecard issue by its unique identifier. Returns the full issue object including its id, issue_type, and severity. Required: id.
list_all_security_scorecard_oauth_apps
List OAuth apps registered in SecurityScorecard. Returns: id.
create_a_security_scorecard_oauth_app
Create a new OAuth app in SecurityScorecard. Returns: id.
get_single_security_scorecard_oauth_app_by_id
Get a SecurityScorecard OAuth app by id. Returns: id. Required: id.
update_a_security_scorecard_oauth_app_by_id
Update a SecurityScorecard OAuth app by id. Returns: id. Required: id.
delete_a_security_scorecard_oauth_app_by_id
Delete a SecurityScorecard OAuth app by id. Returns an empty 204 response on success. Required: id.
list_all_security_scorecard_apps_secrets_expiries
List SecurityScorecard OAuth app secret expiry entries. Returns: id, app_id, secret_id, expires_at. No required parameters.
list_all_security_scorecard_app_owners
List owners of a SecurityScorecard OAuth app. Returns: id, created_at, updated_at. Required: app_id.
security_scorecard_app_owners_bulk_update
Update the owners of a SecurityScorecard OAuth app by id. Returns: id, created_at, updated_at. Required: id.
create_a_security_scorecard_app_revoke_token
Revoke all OAuth tokens for a SecurityScorecard app. Returns an empty 204 response on success. Required: app_id.
list_all_security_scorecard_app_secrets
List app secrets for a SecurityScorecard OAuth app. Returns: id, name, created_at, updated_at. Required: app_id.
create_a_security_scorecard_app_secret
Create a new app secret for a SecurityScorecard OAuth app. Returns: id, name, created_at, updated_at. Required: app_id.
update_a_security_scorecard_app_secret_by_id
Update a SecurityScorecard app secret by id. Returns: id, name, created_at, updated_at. Required: id.
delete_a_security_scorecard_app_secret_by_id
Delete a SecurityScorecard app secret by id. Returns an empty 204 response on success. Required: id.
list_all_security_scorecard_organization_follow_numbers
List follow numbers for a SecurityScorecard organization. Returns a paginated collection of follow number entries. Required: organization_id.
list_all_security_scorecard_organization_portfolios
List SecurityScorecard portfolios for a specific organization. Returns: id, name, description, privacy, team_id. Required: organization_id.
list_all_security_scorecard_organization_profiles
List SecurityScorecard organization profiles for a given organization. Returns: id, created_at, updated_at. Required: organization_id.
security_scorecard_organization_profiles_bulk_update
Update a SecurityScorecard organization profile by id. Returns: id, created_at, updated_at. Required: id.
security_scorecard_organization_trust_centers_bulk_update
Update the trust center configuration for a SecurityScorecard organization. Returns the updated trust center object including id, created_at, and updated_at. Required: id.
list_all_security_scorecard_trust_center_drafts
List trust center draft entries for a SecurityScorecard organization. Returns the draft records including id. Required: organization_id.
security_scorecard_trust_center_drafts_bulk_update
Update the trust center draft for a SecurityScorecard organization by id. Returns the updated draft record including id. Required: id.
security_scorecard_trust_center_drafts_bulk_delete
Delete the trust center draft for a SecurityScorecard organization by id. Returns an empty 204 response on success. Required: id.
create_a_security_scorecard_tags_bulk_export
Create a bulk export of tags in SecurityScorecard by bulk_export_id, initiating an asynchronous export process. Returns export status and download information for retrieving the generated file. Required: bulk_export_id.
create_a_security_scorecard_user_revoke_token
Revoke the API token for a SecurityScorecard user by username. Returns an empty 204 response on success. Required: username.
list_all_security_scorecard_companies_facets
List facet values for companies in a SecurityScorecard portfolio, such as grades, industries, or issue types. Returns: id, name. Required: portfolio_id, facet. Optional filters (grade, industry, vulnerability, issue_type, status, had_breach_within_last_days) narrow the underlying company set.
security_scorecard_scorecards_search
Search SecurityScorecard scorecards by company name, domain, or other criteria. Returns: id, name, score, grade, domain, industry. Required: query. Max 200 per page.
list_all_security_scorecard_search_facets
List available facet values for SecurityScorecard scorecard search by facet name. Returns: id, name. Required: facet.
list_all_security_scorecard_users_by_usernames
List SecurityScorecard users matching a given username. Returns: id, name. Required: username.
create_a_security_scorecard_vendor_portfolio_automation_ingest
Ingest vendor portfolio automation data into SecurityScorecard by submitting a JSON request body to the ingest endpoint. The response shape for this endpoint is not documented in the SecurityScorecard API reference.
vendor_portfolio_automation_ingests_bulk_delete
Delete ingested vendor portfolio automation data in SecurityScorecard by submitting a JSON request body to the ingest endpoint. Returns an empty 204 response on success.
list_all_vendor_portfolio_automation_ingested_vendors
List ingested vendors from SecurityScorecard's vendor portfolio automation. Returns: id, created_at, updated_at.
list_all_vendor_portfolio_automation_suggested_vendors
List suggested vendors from SecurityScorecard's vendor portfolio automation. Returns: id.
list_all_security_scorecard_industry_history_scores
List historical SecurityScorecard scores for a specific industry over a configurable date range. Returns: date, score. Required: industry. Optional timing granularity supports daily, weekly, or monthly intervals (defaults to daily).
list_all_security_scorecard_portfolio_companies_v_2
List companies in a SecurityScorecard portfolio with optional filters by grade, industry, vulnerability, issue type, status, and breach history. Returns: domain, name, grade, score, industry, status. Required: portfolio_id. Max 200 per page.
list_all_security_scorecard_organization_portfolios_v_2
List portfolios for a specific SecurityScorecard organization. Returns a collection of portfolio records including id, name, description, privacy, and team_id. Required: organization_id.
list_all_security_scorecard_partner_executive_summaries
Get the executive security summary for a SecurityScorecard partner customer. Returns the customer's security scorecard executive summary overview. Required: customer_id.
list_all_security_scorecard_partner_raw_findings_daily_avgs
Retrieve daily average raw-findings figures for a managed customer through the SecurityScorecard partner (MAX) API. Required: customer_id.
list_all_security_scorecard_partner_raw_findings_daily_counts
List daily counts of raw findings for a SecurityScorecard partner customer. Returns a paginated collection of entries, each representing a day's raw-finding count. Required: customer_id.
list_all_security_scorecard_partner_reports_vendors
List vendors associated with SecurityScorecard partner reports. Returns: id, name.
list_all_security_scorecard_organization_vendors
List vendors for a SecurityScorecard customer organization. Returns a paginated collection of vendor entries with id and name. Required: organization_id.
list_all_partner_vendors_risk_matrix_incident_likelihoods
List incident likelihood entries from a SecurityScorecard partner customer's vendors risk matrix. Returns: id. Required: customer_id. Response fields beyond id are not documented in the available API reference for this endpoint.
list_all_partner_vendors_risk_matrix_indicator_severities
List vendor risk matrix indicator severities for a partner customer in SecurityScorecard. Returns a paginated collection of indicator severity entries. Required: customer_id.
Why Truto
Why use Truto’s MCP server for SecurityScorecard
Other MCP servers give you a static tool list for one app. Truto gives you a managed, multi-tenant MCP infrastructure across 800+ integrations.
Auto-generated, always up to date
Tools are dynamically generated from curated documentation — not hand-coded. As integrations evolve, tools stay current without manual maintenance.
Fine-grained access control
Scope each MCP server to read-only, write-only, specific methods, or tagged tool groups. Expose only what your AI agent needs — nothing more.
Multi-tenant by design
Each MCP server is scoped to a single connected account with its own credentials. The URL itself is the auth token — no shared secrets, no credential leaking across tenants.
Works with every MCP client
Standard JSON-RPC 2.0 protocol. Paste the URL into Claude, ChatGPT, Cursor, or any MCP-compatible agent framework — tools are discovered automatically.
Built-in auth, rate limits, and error handling
Tool calls execute through Truto’s proxy layer with automatic OAuth refresh, rate-limit handling, and normalized error responses. No raw API plumbing in your agent.
Expiring and auditable servers
Create time-limited MCP servers for contractors or automated workflows. Optional dual-auth requires both the URL and a Truto API token for high-security environments.
How It Works
From zero to integrated
Go live with SecurityScorecard in under an hour. No boilerplate, no maintenance burden.
Link your customer’s SecurityScorecard account
Use Truto’s frontend SDK to connect your customer’s SecurityScorecard account. We handle all OAuth and API key flows — you don’t need to create the OAuth app.
We handle authentication
Don’t spend time refreshing access tokens or figuring out secure storage. We handle it and inject credentials into every API request.
Call our API, we call SecurityScorecard
Truto’s Proxy API is a 1-to-1 mapping of the SecurityScorecard API. You call us, we call SecurityScorecard, and pass the response back in the same cycle.
Unified response format
Every response follows a single format across all integrations. We translate SecurityScorecard’s pagination into unified cursor-based pagination. Data is always in the result attribute.
FAQs
Common questions about SecurityScorecard on Truto
Authentication, rate limits, data freshness, and everything else you need to know before you integrate.
How does authentication work for the SecurityScorecard integration?
SecurityScorecard uses API token authentication. Each of your end users provides their SecurityScorecard API token when connecting their account through Truto, and Truto securely stores and injects it on every request — you never handle the credential directly.
Do we need to add domains to a portfolio before we can pull risk data?
Yes. For most deep-data endpoints (factor scores, issues, historical scores), the target company or domain must first exist in a SecurityScorecard portfolio. Truto exposes the portfolio and portfolio company management tools so you can programmatically add vendors as part of your onboarding flow before querying their data.
What kinds of security findings can we sync into our product?
Truto exposes over 100 specific issue endpoints covering categories like compromised credentials, exposed services (Elasticsearch, MongoDB, RDP, Telnet), TLS/certificate issues, DKIM/DMARC/SPF misconfigurations, malware infections, ransomware associations, and named CVE exposures (Log4j, Spring4Shell, MOVEit, Ivanti, and others).
Can we bulk manage vendors instead of adding them one at a time?
Yes. Truto supports SecurityScorecard's bulk operations for uploading, updating, and deleting portfolio companies, as well as bulk operations for tags, custom scorecard filters, and other resources — useful when onboarding large vendor lists at once.
How fresh is the data returned from SecurityScorecard?
SecurityScorecard continuously scans the public internet and updates scores and findings on an ongoing basis. Truto passes through the data as SecurityScorecard exposes it, so freshness matches what a user would see in the SecurityScorecard UI. For near-real-time updates in your product, poll the relevant endpoints on a schedule that matches your risk workflow.
Can we generate reports and exports through the integration?
Yes. Truto exposes SecurityScorecard's report generation endpoints, including detailed scorecard reports, portfolio reports, issue reports, footprint reports, summary reports, and CSV exports, so you can offer downloadable artifacts to your users without building the rendering yourself.
Does the integration support custom scorecards and tagging?
Yes. You can create, update, and delete custom scorecards, manage scorecard tags and tag groups, and manage IP/domain tags — enabling customer-specific segmentation, portfolio organization, and custom risk views inside your product.
From the Blog
SecurityScorecard integration guides
Deep dives, architecture guides, and practical tutorials for building SecurityScorecard integrations.
SecurityScorecard
Get SecurityScorecard integrated into your app
Our team understands what it takes to make a SecurityScorecard integration successful. A short, crisp 30 minute call with folks who understand the problem.