# SecurityScorecard MCP connector

The SecurityScorecard connector brings your vendor portfolios, the companies in them, their expanded risk findings, and scorecard tags into Claude, ChatGPT, Cursor, or any MCP client, with every action tied to the person who signed in.

Source: https://elaichi.ai/connectors/securityscorecard/

## Facts

| | |
| --- | --- |
| Application | SecurityScorecard |
| Category | Security |
| AI tools | 405 |
| Authentication | Connects with an API key |
| Needs your own OAuth app | No |
| MCP endpoint | https://api.elaichi.ai/mcp |
| Works with | Claude, ChatGPT, Cursor, any MCP client, and the Elaichi Agent |
| Tools advertised by name | No. 405 tools is past the 30-tool threshold, so clients use `search_tools` and `execute_tool` |

## What you can ask once SecurityScorecard is connected

- List the lowest scoring companies in our vendor portfolio.
- Show new expanded risks added this week.
- Which scorecard tags have the most flagged companies.

## Connect SecurityScorecard in Elaichi

This happens once for the organization, before any client is involved.

1. Open Connections, choose Add connection, and pick SecurityScorecard.
2. Optionally set Share with, then press Connect.
3. Paste a SecurityScorecard API key. One person generates a token in SecurityScorecard and pastes it once. Everyone else works through Share with, and never sees it.

Credentials are vaulted and nobody, including the AI, reads them back. The connection becomes a toolbox immediately, so you can curate which SecurityScorecard tools are exposed, rename them, or freeze arguments before anyone points a client at it.

## Connect SecurityScorecard to Claude

Endpoint: https://api.elaichi.ai/mcp

1. Open Customize, then Connectors.
2. Press Add.
3. Name it, paste the MCP server URL, then Continue.
4. Sign in and approve.

On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.

## Connect SecurityScorecard to ChatGPT

Endpoint: https://api.elaichi.ai/mcp

1. Open Plugins, then press the + button.
2. Name it and paste the endpoint into Server URL.
3. Leave Authentication on OAuth, then tick the risk acknowledgement.
4. Press Create, then sign in and approve.

Works on the web today. The plugin directory lives at chatgpt.com/plugins.

## Connect SecurityScorecard to Cursor

Endpoint: https://api.elaichi.ai/mcp

1. Open `~/.cursor/mcp.json`.
2. Add the endpoint under `mcpServers`.
3. Reload Cursor, then sign in and approve.

Set up per machine, so repeat it on each computer you work from.

## Connect SecurityScorecard to any MCP client

Endpoint: https://api.elaichi.ai/mcp

1. Add the endpoint as a remote MCP server.
2. Sign in and approve.

The Elaichi Agent already has these tools, with nothing to set up.

## What the consent screen decides

Only Read is granted by default, which is not enough to call a SecurityScorecard tool. Over MCP there is no trusted place to confirm a write in the moment, so the consent screen is the standing approval rather than a formality. Grant Read and Run tools. Think hard before granting Delete, which reaches into connected apps and cannot be undone.

## What teams do with SecurityScorecard through Elaichi

### Review a vendor portfolio before the quarterly meeting

Third-party risk. Ask for every company in a SecurityScorecard portfolio along with its open risk findings, then get a plain summary of which vendors need a conversation this quarter.

### Add new vendors to the right portfolio

Security. After a contract is signed, add the vendor to the correct SecurityScorecard portfolio, tag it by business unit and criticality, and move on without opening a spreadsheet.

### Tag vendors by contract owner and renewal date

Procurement. Create scorecard tags for contract owners and renewal windows, attach them to the right companies, and pull the list of vendors coming up for renewal when it is time to negotiate.

### Pull risk findings for the audit binder

Compliance. List the expanded risk findings across a portfolio of in-scope vendors and turn them into the evidence an auditor asks for, in the wording the auditor expects.

### Clean up portfolios after a reorganization

Security. Move companies between SecurityScorecard portfolios in bulk, rename portfolios to match the new team structure, and retire the ones nobody owns anymore.

### Keep tag groups tidy across the organization

IT. Group related scorecard tags, rename or merge the ones that drifted, and remove tags that are no longer used so every team is describing vendors the same way.

## Frequently asked questions

### How do I connect SecurityScorecard to Claude?

Connect SecurityScorecard in Elaichi first: you paste an API key generated in your SecurityScorecard account, and there is no OAuth application to register and no client ID or secret to generate. Then open Claude, go to Customize, then Connectors, then Add, and paste https://api.elaichi.ai/mcp. Claude asks you to sign in to Elaichi as yourself, and from then on your SecurityScorecard portfolios, companies, and tags are available in the conversation.

### Does SecurityScorecard work with ChatGPT and Cursor as well as Claude?

Yes. Once SecurityScorecard is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, any other MCP client, and the Elaichi Agent. You connect SecurityScorecard once and every client you use picks it up.

### What can an AI agent actually do with my SecurityScorecard data?

With SecurityScorecard connected, an agent can list your portfolios and the companies in each one, pull the expanded risk findings for a portfolio, and create, rename, or remove portfolios. It can also add companies to portfolios in bulk, create and organize scorecard tags and tag groups, and attach tags to companies or remove them. SecurityScorecard exposes a large number of actions, so short concrete asks such as "list the companies in the Critical Vendors portfolio" work better than long paragraphs.

### Does connecting SecurityScorecard give the AI every portfolio in my account?

No. An agent working through SecurityScorecard sees only what the API key you connected is allowed to see, and everything it does runs inside that access. Elaichi can narrow that further with restrictions per team or per action, but it can never widen it beyond what SecurityScorecard itself grants.

### Can my team share one SecurityScorecard connection?

Yes. One person connects SecurityScorecard in Elaichi and shares the connection with a team, and nobody else ever sees or handles the API key. Each teammate still signs in to Elaichi as themselves, so every portfolio change or tag update in the audit log names the actual person who made it.

### Can I stop an agent from deleting or changing things in SecurityScorecard?

Yes. In Elaichi, restrictions on the SecurityScorecard connection work per action, so you can allow listing portfolios and risk findings while blocking deletions or bulk changes to companies and tags. A blocked action is never advertised to Claude, ChatGPT, Cursor, or any other client, so no prompt, accidental or otherwise, can reach it.

### What happens to a SecurityScorecard connection when someone leaves?

Offboarding a person in Elaichi ends their access to SecurityScorecard at once, across every client they used. If they had shared a SecurityScorecard connection with a team, it keeps working for everyone else on that team. If you want SecurityScorecard gone entirely, disconnecting it once in Elaichi removes it from Claude, ChatGPT, Cursor, and every other client at the same time.

## All 405 SecurityScorecard tools

Every tool below is callable through https://api.elaichi.ai/mcp once SecurityScorecard is connected, subject to the toolbox it is in and the restrictions on the caller.

- **List all SecurityScorecard portfolios** (List). List SecurityScorecard portfolios. Returns: id, name, description, privacy, team_id.
- **Create a SecurityScorecard portfolio** (Create). Create a SecurityScorecard portfolio with a name, description, and privacy level. Returns: id, name, description, privacy, team_id. Required: name.
- **Update a SecurityScorecard portfolio by ID** (Update). Update a SecurityScorecard portfolio by id. Returns: id, name, description, privacy, team_id. Required: id, name.
- **Delete a SecurityScorecard portfolio by ID** (Delete). Delete a SecurityScorecard portfolio by id. Returns an empty 204 response on success. Required: id.
- **SecurityScorecard companies bulk uploads bulk update** (Update). Bulk upload companies to SecurityScorecard portfolios via a PUT request. Returns a list of the uploaded companies following processing. Provide a JSON request body containing the companies to add.
- **List all SecurityScorecard portfolio companies** (List). List companies (scorecards) in a SecurityScorecard portfolio with optional filters for grade, industry, vulnerability, issue type, status, and recent breaches. Returns: domain, grade, industry, status. Required: portfolio_id.
- **SecurityScorecard portfolio companies bulk update** (Update). Add a company scorecard to a SecurityScorecard portfolio by domain. Returns: domain, grade, industry, status. Required: portfolio_id, domain.
- **SecurityScorecard portfolio companies bulk delete** (Delete). Remove a company from a SecurityScorecard portfolio by domain. Returns an empty 204 response on success. Required: portfolio_id, domain.
- **SecurityScorecard companies alls bulk delete** (Delete). Remove all companies from a SecurityScorecard portfolio by portfolio id. Returns an empty 204 response on success. Required: id.
- **List all SecurityScorecard portfolio expanded risks** (List). List expanded risk entries for all companies in a SecurityScorecard portfolio. Returns: domain, name, grade, score, industry, status. Required: portfolio_id.
- **List all SecurityScorecard scorecard tags** (List). List scorecard tags in SecurityScorecard. Returns: id, name. Uses cursor-based pagination via the entries array.
- **Create a SecurityScorecard scorecard tag** (Create). Create a new scorecard tag in SecurityScorecard. Returns: id, name.
- **Update a SecurityScorecard scorecard tag by ID** (Update). Update a scorecard tag by id in SecurityScorecard. Returns: id, name. Required: id.
- **Delete a SecurityScorecard scorecard tag by ID** (Delete). Delete a scorecard tag by id in SecurityScorecard. Returns an empty 204 response on success. Required: id.
- **Create a SecurityScorecard scorecard tags bulk delete** (Create). Bulk delete scorecard tags in SecurityScorecard by submitting a list of tag IDs. Returns an empty 204 response on success. Required: ids.
- **List all SecurityScorecard scorecard tags groups** (List). List SecurityScorecard scorecard tag groups. Returns: id, name.
- **Create a SecurityScorecard scorecard tags group** (Create). Create a new scorecard tag group in SecurityScorecard. Returns: id, name. Required: name.
- **Get single SecurityScorecard scorecard tags group by ID** (Get). Get a single SecurityScorecard scorecard tag group by id. Returns: id, name. Required: id.
- **Update a SecurityScorecard scorecard tags group by ID** (Update). Update a SecurityScorecard scorecard tag group by id. Returns: id, name. Required: id.
- **Delete a SecurityScorecard scorecard tags group by ID** (Delete). Delete a SecurityScorecard scorecard tag group by id. Returns an empty 204 response on success. Required: id.
- **Create scorecard tags remove public tag association** (Delete). Remove a public tag association from scorecard tags in SecurityScorecard. Returns an empty 204 response on success.
- **List all SecurityScorecard scorecard tag companies** (List). List companies assigned to a SecurityScorecard scorecard tag. Returns: domain, name, grade, score, industry. Required: scorecard_tag_id.
- **Create a SecurityScorecard scorecard tag company** (Create). Add a company to a SecurityScorecard scorecard tag by domain. Returns: domain, name, grade, score, industry. Required: scorecard_tag_id, domain.
- **SecurityScorecard scorecard tag companies bulk delete** (Delete). Remove a company from a SecurityScorecard scorecard tag by domain. Returns an empty 204 response on success. Required: id, domain.
- **Create a SecurityScorecard scorecard tag group** (Create). Assign a SecurityScorecard tag group to a scorecard tag. Returns an empty 204 response on success. Required: tag_id, tag_group_id.
- **Delete a SecurityScorecard scorecard tag group by ID** (Delete). Remove a SecurityScorecard tag group from a scorecard tag. Returns an empty 204 response on success. Required: tag_id, id.
- **List all SecurityScorecard IP domain tags** (List). List IP domain tags in SecurityScorecard. Returns: id, domain, ip.
- **Create a SecurityScorecard IP domain tag** (Create). Create a new IP domain tag in SecurityScorecard. Returns: id, domain, ip. Required: domain.
- **Update a SecurityScorecard IP domain tag by ID** (Update). Update an IP domain tag in SecurityScorecard by id. Returns: id, created_at, updated_at. Required: id.
- **Delete a SecurityScorecard IP domain tag by ID** (Delete). Delete an IP domain tag in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
- **List all SecurityScorecard IP domain tags groups** (List). List IP domain tag groups in SecurityScorecard. Returns: id, name.
- **Create a SecurityScorecard IP domain tags group** (Create). Create a new IP domain tag group in SecurityScorecard. Returns: id, name. Required: name.
- **Get single SecurityScorecard IP domain tags group by ID** (Get). Get a single IP domain tag group by id in SecurityScorecard. Returns: id, name. Required: id.
- **Update a SecurityScorecard IP domain tags group by ID** (Update). Update an IP domain tag group in SecurityScorecard by id. Returns the updated group object including id, created_at, and updated_at. Required: id.
- **Delete a SecurityScorecard IP domain tags group by ID** (Delete). Delete an IP domain tag group in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
- **List all SecurityScorecard parent domain domains** (List). List domains under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: parent_domain.
- **Create a SecurityScorecard parent domain domain** (Create). Associate a domain with an IP domain tag under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: tag_id, parent_domain, domain.
- **SecurityScorecard parent domain domains search** (Search). Search domains under a parent domain in SecurityScorecard. Returns: id, domain, parent_domain. Required: parent_domain.
- **SecurityScorecard parent domain domains bulk delete** (Delete). Remove a domain's association with an IP domain tag under a parent domain in SecurityScorecard. Returns an empty 204 response on success. Required: tag_id, parent_domain, domain.
- **List all SecurityScorecard parent domain ips** (List). List IP addresses associated with a parent domain in SecurityScorecard, including their related tags. Returns: ip, parent_domain. Required: parent_domain.
- **Create a SecurityScorecard parent domain IP** (Create). Associate a tag with an IP address under a parent domain in SecurityScorecard. Returns: ip, parent_domain. Required: tag_id, parent_domain, ip.
- **SecurityScorecard parent domain ips search** (Search). Search for IP addresses associated with a parent domain in SecurityScorecard. Returns: ip, parent_domain. Required: parent_domain.
- **SecurityScorecard parent domain ips bulk delete** (Delete). Remove a tag association from an IP address under a parent domain in SecurityScorecard. Returns an empty 204 response on success. Required: tag_id, parent_domain, ip.
- **Create a SecurityScorecard IP domain tag group** (Create). Create an IP domain tag group association in SecurityScorecard by linking a tag group to an IP domain tag. Returns an empty 204 response on success. Required: tag_id, tag_group_id.
- **Delete a SecurityScorecard IP domain tag group by ID** (Delete). Delete an IP domain tag group association in SecurityScorecard by removing a tag group from an IP domain tag. Returns an empty 204 response on success. Required: tag_id, id.
- **Create a SecurityScorecard companies bulk search** (Create). Initiate a bulk search for SecurityScorecard company scorecards by submitting a list of domains. Returns an array of scorecards including name, domain, grade, score, industry, and scorecard_identifier. Required: domains.
- **List all SecurityScorecard companies** (List). Get a company's scorecard summary from SecurityScorecard by scorecard identifier. Returns: id, name, grade, score, industry. Required: scorecard_identifier. The company must be added to a portfolio before its scorecard can be accessed.
- **List all SecurityScorecard companie expanded risks** (List). List expanded risk entries for a SecurityScorecard company scorecard. Returns a collection of expanded risk entries for the specified scorecard. Required: scorecard_identifier.
- **List all SecurityScorecard companie factors** (List). List SecurityScorecard factor scores and issue counts for a company scorecard. Returns each factor's name, score, and issue_count. Required: scorecard_identifier. The company must be added to a portfolio before factor-level data is accessible.
- **List all SecurityScorecard factors scores** (List). List SecurityScorecard company factor score history for up to the last 12 months. Returns entries with date, name, score, grade, and issue_count per factor. Required: scorecard_identifier.
- **List all SecurityScorecard history scores** (List). List a company's historical SecurityScorecard scores over time. Returns each dated entry with domain, date, and score. Use timing to control granularity and from/to to bound the range. Required: scorecard_identifier.
- **List all SecurityScorecard score plans by targets** (List). Get a score plan for a SecurityScorecard company scorecard by specifying a target score. Returns a list of score plan entries describing actions needed to reach the target score. Required: domain, score.
- **List all SecurityScorecard companie summary factors** (List). List SecurityScorecard summary factors for a company by scorecard identifier. Returns: name, score, grade, issues. Required: scorecard_identifier. Company must be added to a portfolio first to access factor-level data.
- **List all SecurityScorecard industrie factors** (List). List SecurityScorecard industry factors with scores and issue counts for a given industry. Returns: name, score, issue_count. Required: industry.
- **List all SecurityScorecard history factors** (List). List historical SecurityScorecard factor scores for an industry over a date range within the last 12 months. Returns: date, name, score, grade, issues_count. Required: industry.
- **List all SecurityScorecard industrie scores** (List). List SecurityScorecard industry scores for a specified industry. Returns: score, grade. Required: industry.
- **List all SecurityScorecard history events** (List). List scorecard event log entries for a company in SecurityScorecard. Events explain score changes and act as a news feed of scorecard updates including new issues, issues getting resolved, and reported breaches. Returns: id, attributes. Required: scorecard_identifier. History data is available for the last 12 months only.
- **List all SecurityScorecard events breaches** (List). List breach events from a company's scorecard event log in SecurityScorecard. Events explain score changes and serve as a news feed of scorecard updates including reported breaches. Returns: date, description. Required: domain.
- **List all SecurityScorecard companie issue contexts** (List). List issue context entries for a SecurityScorecard company scorecard by domain and issue type. Returns a paginated collection of issue context entries for the specified company and issue type. Required: domain, issue_type.
- **List all issues active cve exploitation attempteds** (List). List active CVE exploitation attempted issues from a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, cve. Required: scorecard_identifier, effective_date. Company must be added to a portfolio first.
- **List all SecurityScorecard issues adware installations** (List). List historical "adware_installation" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, malware_type, malware_family, malware_detection_methods, src_ip, connection_attributes, connection_attributes_stamped, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues adware installation trails** (List). List adware installation trail issue entries for a SecurityScorecard scorecard at a specific effective date in the scorecard's history. Returns a paginated list of adware installation trail issue entries for that scorecard event. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues alleged breach incidents** (List). List alleged breach incident issues recorded in a SecurityScorecard company's scorecard event history for a specific effective date. Returns a paginated collection of breach incident entries from the scorecard event log. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues attack detecteds** (List). List attack-detected issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns a collection of attack-detected issue entries (each with an id). Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues attempted information leaks** (List). List attempted information leak issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues bitcoin servers** (List). List SecurityScorecard bitcoin_server issue entries from a company's scorecard history for a specific effective date. Returns: severity, issue_type, count. Required: scorecard_identifier, effective_date.
- **List all issues browser logs contain debug messages** (List). List browser_logs_contain_debug_message issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues CDN hostings** (List). List CDN hosting issues from a SecurityScorecard company scorecard's event history at a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues cobalt strike c 2 detecteds** (List). List SecurityScorecard cobalt_strike_c2_detected issue events for a scorecard on a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues cobalt strike c 2 services** (List). List SecurityScorecard cobalt strike C2 service issue findings for a specific effective date in a company's scorecard event log history. Returns: issue entries including severity, status, and first_seen/last_seen timestamps. Required: scorecard_identifier, effective_date.
- **List all issues communication server with expired certs** (List). List communication server with expired certificate issue findings for a SecurityScorecard company scorecard on a specific effective date from the scorecard event history. Returns: severity. Required: scorecard_identifier, effective_date.
- **Issues communication with server certificate issued by blacklist** (Action). List SecurityScorecard 'communication with server certificate issued by blacklisted country' issue findings for a scorecard at a specific effective date in its history. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
- **List all issues compromised by information stealers** (List). List SecurityScorecard issues where credentials or data were compromised by an information stealer for a company's scorecard on a specific effective date. Returns a paginated list of compromised-by-information-stealer issue entries. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues compromised credentials founds** (List). List compromised credentials found issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues confirmed first party breaches** (List). List confirmed first-party breach issues for a SecurityScorecard company scorecard on a specific effective date, as recorded in the scorecard event log. Returns a list of confirmed first-party breach issue entries. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues confirmed third party breaches** (List). List confirmed third-party breach issue records from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues contact information detecteds** (List). List contact information detected issues for a specific SecurityScorecard scorecard event on a given effective date. Returns entries of contact information detected issue findings from the scorecard event history. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues cookie missing http onlies** (List). List historical "cookie_missing_http_only" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, hostname, url, cookie_name, raw_cookie, observations, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all issues cookie missing secure attributes** (List). List historical "cookie_missing_secure_attribute" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, hostname, url, cookie_name, raw_cookie, observations, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues csp no policy v 2 s** (List). List historical "csp_no_policy_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues csp too broad v 2 s** (List). List CSP 'too broad' v2 issues from a SecurityScorecard company's scorecard history event for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues csp unsafe policy v 2 s** (List). List CSP unsafe policy v2 issues for a SecurityScorecard scorecard at a specific effective date in the event history. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues cve in use by threat actors** (List). List CVE-in-use-by-threat-actor issue findings from a SecurityScorecard company scorecard's history events on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues data leak detecteds** (List). List data leak detected issue events from a SecurityScorecard company's scorecard history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues dkim insufficient key lengths** (List). List DKIM insufficient key length issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard data is available.
- **List all SecurityScorecard issues dkim record detecteds** (List). List DKIM record detected issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues dkim weak signatures** (List). List DKIM weak signature issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns a list of issue entries from the scorecard event log. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues dmarc contains nones** (List). List DMARC 'contains none' issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, domain, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues dmarc record missings** (List). List DMARC record missing issue entries from a SecurityScorecard scorecard's history event log for a specific effective date. Returns: domain, severity. Required: scorecard_identifier, effective_date. Score history is available for the last 12 months.
- **List all SecurityScorecard issues domain missing https v 2 s** (List). List historical "domain_missing_https_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues dos attack attempt detecteds** (List). List DoS attack attempt detected issue events from a SecurityScorecard scorecard's event history on a specific effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues exploit attempt detecteds** (List). List exploit attempt detected issue findings from a SecurityScorecard company scorecard's history events for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues exploited products** (List). List exploited product issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: severity, issue_type, count. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues exposed cisco web uis** (List). List historical "exposed_cisco_web_ui" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all issues exposed embedded iot web servers** (List). List historical "exposed_embedded_iot_web_server" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues exposed mac airport devices** (List). List exposed Mac Airport device issue findings from a SecurityScorecard scorecard's historical event for a given effective date. Returns a paginated list of issue entries including id and finding details. Required: scorecard_identifier, effective_date.
- **List all issues exposed network attached storage devices** (List). List exposed network-attached storage device issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns a list of issue entries documenting exposed network-attached storage devices detected on the company's scorecard at that point in time. Required: scorecard_identifier, effective_date. The company must be added to a portfolio first; history is available for…
- **List all issues exposed personal information infos** (List). List exposed personal information info issues for a SecurityScorecard company scorecard event on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues exposed printers** (List). List exposed printer issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns a list of exposed printer issue entries. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard data is available.
- **List all SecurityScorecard issues fail to load page components** (List). List SecurityScorecard fail-to-load page components issue findings for a company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues general scan detecteds** (List). List general scan detected issues for a specific event in a SecurityScorecard company's scorecard history. Returns: id, issue_type, severity, count. Required: scorecard_identifier, effective_date.
- **List all issues historical compromised credentials founds** (List). List historical compromised credentials found issues for a SecurityScorecard company scorecard on a specific effective date. Returns entries with compromised credential finding records whose fields are specific to the SecurityScorecard issue type, including id and attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues hosted on object storage v 2 s** (List). List issues hosted on object storage v2 from a SecurityScorecard company's scorecard event history at a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues hsts incorrect v 2 s** (List). List HSTS incorrect v2 issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues industrial control devices** (List). List industrial control device issues from a SecurityScorecard company's scorecard history event log for a specific effective date. Returns issue entries including severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues infected by targeted attacks** (List). List SecurityScorecard 'infected by targeted attack' issues from a company's scorecard event history for a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues insecure ftps** (List). List insecure FTP issue findings from a SecurityScorecard scorecard's event history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all issues insecure https redirect pattern v 2 s** (List). List insecure HTTPS redirect pattern v2 issue findings for a specific SecurityScorecard company scorecard event on a given effective date. Returns a paginated collection of issue finding entries, each including its id. Required: scorecard_identifier, effective_date.
- **List all issues insecure server certificate key sizes** (List). List insecure server certificate key size issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: entries. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues insecure telnets** (List). List insecure telnet issue findings from a SecurityScorecard company scorecard's history event on a specific effective date. Returns entries with id, severity, and status for each insecure telnet finding. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues iot cameras** (List). List IoT camera issue findings from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all issues IP black list due malicious activities** (List). List IP black list issues due to malicious activity from a SecurityScorecard scorecard's event history for a specific effective date. Returns a paginated collection of issue entries including id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues java debuggers** (List). List Java debugger issues for a SecurityScorecard company scorecard's history events on a specific effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date.
- **List all issues known compromised or hostile hosts** (List). List known compromised or hostile host issue findings for a SecurityScorecard company on a specific event-log date. Returns: entry_id, severity, domain, discovered_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues leaked credentials infos** (List). List leaked credentials information issues for a SecurityScorecard company scorecard history event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues links to insecure websites** (List). List links to insecure website issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues local file path exposed via URL schemes** (List). List SecurityScorecard issue findings of type 'local_file_path_exposed_via_url_scheme' from a company's scorecard event history for a specific effective date. Returns a paginated collection of issue finding entries extracted from the scorecard event log. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues mail server unusual ports** (List). List mail server unusual port issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns a collection of issue entries representing findings recorded on that date. Required: scorecard_identifier, effective_date.
- **List all issues malicious botnet c and c server detecteds** (List). List malicious botnet C&C server detected issue entries from a SecurityScorecard company's scorecard event history for a specific effective date. Returns a collection of issue records associated with detected malicious botnet command-and-control servers. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues malicious scan detecteds** (List). List malicious scan detected issues for a SecurityScorecard scorecard's historical event at a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all issues malicious tor exit node detecteds** (List). List malicious Tor exit node detected issue findings for a SecurityScorecard scorecard at a specific effective date in its scorecard history. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all issues malicious tor relay router node detecteds** (List). List historical "malicious_tor_relay_router_node_detected" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, ip, port, country_city, protocol, app_proto, affected_product, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues malicious user agent detecteds** (List). List malicious user agent detected issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: id, created_at. Required: scorecard_identifier, effective_date. Score history is available for any date range within the last 12 months.
- **List all SecurityScorecard issues malware detecteds** (List). List malware detected issues recorded at a specific event date in a SecurityScorecard company's scorecard history. Returns entries of malware detection issue records, each with id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues malware infections** (List). List malware infection issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: entries with family, count, and scan_date for each detected malware infection. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues malware infection trails** (List). List malware infection trail issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all issues microsoft exchange 0 day vulnerabilities** (List). List Microsoft Exchange 0-day vulnerability issues from a SecurityScorecard company scorecard's history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues microsoft exchange http API vulnerabilities** (List). List historical "microsoft_exchange_http_api_vulnerability" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues minecraft servers** (List). List SecurityScorecard minecraft_server issue findings for a specific scorecard on a given effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues mirai botnet traffic detecteds** (List). List SecurityScorecard mirai botnet traffic detected issue findings from a scorecard's history events on a specific effective date. Returns entries describing each detected mirai botnet traffic issue from the scorecard event log. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues mysql server empty passwords** (List). List MySQL server empty password issue events from a SecurityScorecard company scorecard's history for a specific effective date. Returns issue event entries from the scorecard event log that explain score changes such as new issues and resolved issues. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues open ports** (List). List open port issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns entries describing exposed open ports with their port number, service, and host details. Required: scorecard_identifier, effective_date.
- **List all issues openssl critical vulnerabilities** (List). List historical OpenSSL critical vulnerability issue events from a SecurityScorecard company scorecard's event log at a specific effective date. Events in the event log explain score changes and work as a news feed of scorecard updates such as new issues, issues getting resolved, and reported breaches. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues outdated browsers** (List). List outdated browser issues for a SecurityScorecard company scorecard on a specific effective date from the scorecard's history events. Returns: entries with severity, scorecard_date, and last_seen. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues outdated os** (List). List outdated operating system issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns entries of outdated OS issue findings for the company. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues patching analysis highs** (List). List patching analysis high issues from a SecurityScorecard scorecard's event history for a given effective date. Returns a collection of issue entries. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues patching analysis lows** (List). List historical "patching_analysis_low" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, issue_count, resolved_issues, resolved_perc, time_to_patch_avg, range060, range61120, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues patching analysis mediums** (List). List patching analysis medium-severity issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues patching cadence highs** (List). List patching cadence high severity issues from a SecurityScorecard scorecard's history events for a specific effective date. Returns issue entries with their id and issue-specific attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues patching cadence lows** (List). List patching cadence low issue events from a SecurityScorecard company's scorecard history for a given effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues patching cadence mediums** (List). List patching cadence medium issue findings from a SecurityScorecard scorecard's history events for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues patching cadence v 3 criticals** (List). List patching cadence v3 critical issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date. The company must be added to a portfolio before scorecard history data is accessible.
- **List all SecurityScorecard issues patching cadence v 3 highs** (List). List high-severity patching cadence v3 issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues patching cadence v 3 lows** (List). List patching_cadence_v3_low issue events from a SecurityScorecard scorecard's history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues patching cadence v 3 mediums** (List). List SecurityScorecard patching cadence v3 medium-severity issue findings from a scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues payment providers** (List). List payment provider issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns entries with issue severity, status, and domain. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues potentially vulnerables** (List). List potentially vulnerable issues recorded at a specific effective date in a SecurityScorecard scorecard's history event log. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cisco rv 320 325 s** (List). List potentially vulnerable Cisco RV 320/325 issue findings from a SecurityScorecard scorecard's historical events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cve 2023 33246 s** (List). List potentially vulnerable CVE-2023-33246 issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cve 2023 34362 s** (List). List potentially vulnerable CVE-2023-34362 issues from a SecurityScorecard scorecard's event history at a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cve 2023 3519 s** (List). List potentially vulnerable CVE-2023-3519 issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cve 2023 37582 s** (List). List potentially vulnerable CVE-2023-37582 issue entries from a SecurityScorecard company's scorecard history events for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cve 2023 37979 s** (List). List potentially vulnerable CVE-2023-37979 issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cve 2023 38035 s** (List). List historical "potentially_vulnerable_cve_2023_38035" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cve 2023 46747 s** (List). List potentially vulnerable CVE-2023-46747 issues from a SecurityScorecard company's scorecard history events on a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cve 2024 21887 s** (List). List potentially vulnerable CVE-2024-21887 issues from a SecurityScorecard scorecard's history events on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues potentially vulnerable cve 2024 46805 s** (List). List potentially vulnerable CVE-2024-46805 issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all issues product exploited by ransomware actors** (List). List SecurityScorecard issues of type product_exploited_by_ransomware_actors for a specific scorecard's historical event on a given effective date. Returns a list of issue entries from the scorecard event log. Required: scorecard_identifier, effective_date.
- **List all issues product uses vulnerable log 4 js** (List). List 'product_uses_vulnerable_log4j' issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues pva installations** (List). List PVA installation issues for a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date. Max 50 items per page.
- **List all SecurityScorecard issues pva installation trails** (List). List PVA (Publicly Vulnerable Application) installation trail issues from a specific scorecard history event on a given effective date in SecurityScorecard. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues ransomware associations** (List). List ransomware association issues for a SecurityScorecard company's scorecard event on a given effective date. Returns ransomware association issue entries from the event log. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues ransomware infections** (List). List ransomware infection issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns paginated entries of ransomware infection issue records. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues ransomware infection trails** (List). List SecurityScorecard ransomware infection trail issues for a company's scorecard event on a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues ransomware victims** (List). List ransomware victim issues for a SecurityScorecard company scorecard on a specific effective date. Returns ransomware victim entries from the scorecard's historical event log. Required: scorecard_identifier, effective_date.
- **List all issues redirect chain contains http v 2 s** (List). List redirect_chain_contains_http_v2 issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: issue entries including id and name. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues redirect to insecure websites** (List). List redirect-to-insecure-website issues from a SecurityScorecard company's event history on a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues references object storage v 2 s** (List). List SecurityScorecard issue references from object storage (v2) for a specific scorecard's history event on a given effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues remote acceses** (List). List remote access issues from a SecurityScorecard company scorecard's event history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date. Scorecard history is available for the last 12 months and the company must be added to a portfolio first.
- **List issues sensitive data exposure through insecure channels** (List). List sensitive data exposure through insecure channel issue findings for a SecurityScorecard company scorecard at a specific point in its history. Returns: id, domain, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues server errors** (List). List server error issues recorded on a specific event date in a SecurityScorecard company scorecard's history. Returns an array of issue entries from the scorecard event log for the given effective date. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service cassandras** (List). List SecurityScorecard service_cassandra issues recorded in a specific scorecard's history event on a given effective date. Returns: entries with each issue's id, severity, and issue type. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service cloud providers** (List). List historical "service_cloud_provider" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service couchdbs** (List). List SecurityScorecard service_couchdb issue entries from a company's scorecard event history for a specific effective date. Returns: id, created_at, updated_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service DNS** (List). List service DNS issues from a SecurityScorecard company's scorecard event history on a specific effective date. Returns: entries with severity, issue type, and domain details for each DNS finding. Required: scorecard_identifier, effective_date. History is available within the last 12 months.
- **List all SecurityScorecard issues service elasticsearches** (List). List SecurityScorecard service_elasticsearch issue findings for a specific scorecard on a given effective date from the scorecard event history. Returns a paginated list of issue entries including id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service end of lifes** (List). List service end of life issues for a SecurityScorecard company scorecard at a specific effective date in the scorecard's history events. Returns: id and severity for each service end of life issue finding. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service end of services** (List). List service_end_of_service issue findings from a SecurityScorecard scorecard's history event log for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service ftps** (List). List SecurityScorecard service_ftp issue findings for a company's scorecard on a specific effective date from the scorecard history event log. Returns: entries with domain, port, and severity for each service_ftp issue finding. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service http proxies** (List). List SecurityScorecard service_http_proxy issue findings from a scorecard's event history for a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service imaps** (List). List historical "service_imap" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, product_name, product_version, banner, connection_attributes, reason, evidence1, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service ldaps** (List). List service LDAP issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service ldap anonymous** (List). List SecurityScorecard service_ldap_anonymous issue findings for a specific scorecard event on a given effective date. Returns: entries with issue id, severity, and finding details. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service microsoft sqls** (List). List SecurityScorecard Microsoft SQL service issues for a company's scorecard history event on a specific effective date. Returns issue entries with severity, status, and service-related details. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service mongodbs** (List). List SecurityScorecard MongoDB service issues recorded in a company's scorecard event history for a specific effective date. Returns: id, issue_type, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service mysqls** (List). List MySQL service issues from a SecurityScorecard scorecard's event history on a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service netbus remote acceses** (List). List SecurityScorecard scorecard history event issues of type service_netbus_remote_access for a specific company and effective date. Returns a list of issue event entries from the scorecard event log. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service networkings** (List). List service networking issues from a SecurityScorecard company's scorecard history events for a specific effective date. Returns entries with id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service open vpns** (List). List SecurityScorecard service open VPN issue findings recorded during a specific scorecard history event on a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service oracle dbs** (List). List SecurityScorecard service_oracle_db issue findings for a company's scorecard history on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service oracle registries** (List). List SecurityScorecard service oracle registry issue findings from a scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service pop 3 s** (List). List SecurityScorecard POP3 service issues for a specific scorecard event on a given effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service postgresqls** (List). List service_postgresql issues recorded in a SecurityScorecard company's scorecard history event log at a specific effective date. Returns entries of service_postgresql issue findings from that date's event snapshot. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service pptps** (List). List SecurityScorecard service PPTP issues for a specific company scorecard event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service pulse vpns** (List). List SecurityScorecard service pulse VPN issues for a specific company scorecard on a given effective date, retrieved from the scorecard history events. Returns entries with severity, status, and issue count details. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service rdps** (List). List SecurityScorecard service RDP issues from a company's scorecard event history for a given effective date. Returns a paginated list of service_rdp issue entries. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service redis** (List). List service_redis issues from a SecurityScorecard company's scorecard event log history for a specific effective date. Returns issue entries including id, severity, and created_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service rsyncs** (List). List service_rsync issue entries from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service smbs** (List). List SecurityScorecard service_smb issues from a company scorecard's history events on a specific effective date. Returns issue entries from the scorecard event log showing service SMB issue changes for that date. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service soaps** (List). List service SOAP issue entries from a SecurityScorecard company scorecard's history event log for a specific effective date. Returns an array of entries describing each service SOAP issue finding recorded in the event log. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service socks proxies** (List). List service SOCKS proxy issue findings from a SecurityScorecard company's scorecard event history at a given effective date. Returns: id, severity, created_at. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service telnets** (List). List SecurityScorecard service telnet issues from a scorecard's event history for a specific effective date. Returns entries with domain, port, and severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service vncs** (List). List service VNC issues from a SecurityScorecard company scorecard's historical event log for a given effective date. Returns a list of service VNC issue entries. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service vuln host highs** (List). List high-severity service vulnerability host issues from a SecurityScorecard company's scorecard historical event log on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service vuln host lows** (List). List low-severity service vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service vuln host mediums** (List). List medium-severity service vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
- **List all issues service vuln host v 3 criticals** (List). List critical service vulnerability host issues (service_vuln_host_v3_critical) from a SecurityScorecard company's scorecard history events on a specific effective date. Returns vulnerability issue entries for the specified scorecard and date. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service vuln host v 3 highs** (List). List high-severity service vulnerability host issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues service vuln host v 3 lows** (List). List low-severity service vulnerability host issues (service_vuln_host_v3_low) for a SecurityScorecard company scorecard event on a specific effective date. Returns entries with domain, cve, and ip for each vulnerability finding. Required: scorecard_identifier, effective_date, domain.
- **List all SecurityScorecard issues service vuln host v 3 mediums** (List). List medium-severity service vulnerability host issues for a SecurityScorecard scorecard event on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues site emits browser logs** (List). List site_emits_browser_log issue findings from a SecurityScorecard company's scorecard event history for a specific effective date. Returns entries of issue findings from the event log. Required: scorecard_identifier, effective_date.
- **List all issues site requests data over insecure channels** (List). List SecurityScorecard 'site_requests_data_over_insecure_channel' issue findings from a scorecard's event history for a specific effective date. Returns: domain, severity, first_observed, last_observed. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues spa browsers** (List). List SPA browser issues for a specific SecurityScorecard scorecard event on a given effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues spf record malformeds** (List). List SPF record malformed issue events from a SecurityScorecard scorecard's event history for a given effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues spf record missings** (List). List SecurityScorecard SPF record missing issue events from a company scorecard's history for a given effective date. Returns entries from the scorecard event log describing updates related to the spf_record_missing issue type, such as new issues and resolved issues. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues spf record softfails** (List). List historical "spf_record_softfail" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, domain, record, analysis, analysis_description, reason, effective_date, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues spf record wildcards** (List). List SPF record wildcard issue entries from a SecurityScorecard company scorecard's history event log for a specific effective date. The scorecard event log tracks scorecard updates such as new issues being detected and issues getting resolved. Returns a collection of SPF record wildcard issue entries from the event history. Required: scorecard_identifier, effective_date.
- **List all issues SQL payload using tor proxy detecteds** (List). List SecurityScorecard event log issues of type sql_payload_using_tor_proxy_detected for a company's scorecard on a specific effective date. Returns the event log entries describing detected SQL payload issues using Tor proxy for the given scorecard and date. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues SSH weak ciphers** (List). List SSH weak cipher issues from a SecurityScorecard company scorecard's event history for a specific effective date. Returns: id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues SSH weak macs** (List). List historical "ssh_weak_mac" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, banner, evidence, connection_attributes, reason, effective_date, group_status. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues SSH weak protocols** (List). List SSH weak protocol issues from a SecurityScorecard scorecard's historical event log for a specific effective date. Returns an array of SSH weak protocol issue finding entries. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues subdomain dmarc contains nones** (List). List SecurityScorecard subdomain DMARC issue entries (subdomains with no DMARC record) from a scorecard's event log for a specific effective date. Returns: entries with id and subdomain DMARC issue details. Required: scorecard_identifier, effective_date.
- **List all issues synth high risk appsec vulnerabilities** (List). List synthetic high-risk application security vulnerability issues recorded in a SecurityScorecard scorecard's event history for a given effective date. Returns: vulnerability issue entries with id, severity, and count. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues synth possible initial acceses** (List). List SecurityScorecard synth_possible_initial_access issues for a specific scorecard event on an effective date. Returns an array of issue entries from the scorecard's event history. Required: scorecard_identifier, effective_date.
- **List all issues targeted by threat actor groups** (List). List SecurityScorecard scorecard issues targeted by threat actor groups for a specific effective date in the scorecard event history. Returns: id, issue_type, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues telephonies** (List). List SecurityScorecard telephony issues for a company scorecard on a specific effective date from the scorecard history event log. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all issues threat actor hosting infrastructures** (List). List threat actor hosting infrastructure issues for a SecurityScorecard company scorecard event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tls ocsp staplings** (List). List TLS OCSP stapling issues from a SecurityScorecard scorecard's historical event on a specific effective date. Returns a collection of issue entries detailing the TLS OCSP stapling findings recorded for that event. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tls weak ciphers** (List). List TLS weak cipher issues for a specific historical event on a SecurityScorecard company scorecard. Returns entries describing TLS weak cipher issue findings from the scorecard event log. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tls weak protocols** (List). List TLS weak protocol issues from a SecurityScorecard company scorecard's event history at a specific effective date. Returns: domain, port, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tlscert excessive expirations** (List). List historical "tlscert_excessive_expiration" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, target, observations, sha256_fingerprint, evidence, output, reason, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tlscert expireds** (List). List TLS certificate expired issues for a SecurityScorecard scorecard at a specific effective date in the event history. Returns: severity, domain, port. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tlscert no revocations** (List). List SecurityScorecard TLS certificate no-revocation issue entries from a company's scorecard event history for a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tlscert revokeds** (List). List SecurityScorecard TLS certificate revocation issues from a scorecard's event-log history for a specific effective date. Returns a list of revoked TLS certificate issue entries from the scorecard's event history. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tlscert self signeds** (List). List TLS self-signed certificate issue findings from a specific SecurityScorecard scorecard history event on a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tlscert weak signatures** (List). List TLS certificate weak signature issues from a SecurityScorecard company's scorecard event history for a specific effective date. Returns entries with domain, port, and severity for each weak TLS certificate signature finding. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tor servers** (List). List SecurityScorecard tor_server issues recorded for a company's scorecard on a specific effective date from the scorecard event history. Returns entries with domain, severity, is_positive, first_seen, and last_seen. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues tor traffic detecteds** (List). List Tor traffic detected issues for a SecurityScorecard company scorecard's history event on a specific effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues typosquats** (List). List typosquat issue findings for a SecurityScorecard company scorecard on a specific event date in the scorecard's history. Returns a paginated list of typosquat issue entries from the scorecard event log. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues uces** (List). List historical "uce" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, src_ip, sources, reason, effective_date, group_status. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues unsafe sri v 2 s** (List). List historical "unsafe_sri_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues upnp accessibles** (List). List UPnP accessible SecurityScorecard issue findings for a specific scorecard event on a given effective date. Returns: severity, port, domain. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues uses go daddy infrastructures** (List). List GoDaddy infrastructure issues recorded in a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all issues uses go daddy managed wordpreses** (List). List uses_go_daddy_managed_wordpress issue findings from a SecurityScorecard company's scorecard event history for a given effective date. Returns: id, attributes. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues waf detected v 2 s** (List). List historical "waf_detected_v2" findings recorded on a SecurityScorecard scorecard for a given effective date. Returns each finding with issue_id, parent_domain, feedback, count, first_seen_time, last_seen_time, analysis, domain, scheme, initial_url, final_url, evidence, and more. Optionally filter by issue_id, measurement_id_in, group_status, or an effective_date range. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues web vuln host highs** (List). List high-severity web vulnerability host issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns issue entries from the event log. Required: scorecard_identifier, effective_date. History is available within the last 12 months.
- **List all SecurityScorecard issues web vuln host lows** (List). List low-severity web vulnerability host issues from a SecurityScorecard scorecard's event history for a specific effective date. Returns: entries with domain, cve, and ip for each vulnerability host finding. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues web vuln host mediums** (List). List medium-severity web vulnerability host issues from a SecurityScorecard company's scorecard history event on a specific effective date. Returns: domain, severity, count. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues web vuln host v 3 criticals** (List). List critical web vulnerability host issues (web_vuln_host_v3_critical) from a SecurityScorecard scorecard's event history for a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues web vuln host v 3 highs** (List). List high-severity web vulnerability host issues (web_vuln_host_v3_high) from a SecurityScorecard scorecard's history events on a specific effective date. Returns: id, domain, cve, ip. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues web vuln host v 3 lows** (List). List low-severity web vulnerability host issues for a SecurityScorecard company scorecard on a specific effective date. Returns: domain, cve, ip. Required: scorecard_identifier, effective_date, domain.
- **List all SecurityScorecard issues web vuln host v 3 mediums** (List). List medium-severity web vulnerability host issues from a SecurityScorecard scorecard's event log history for a specific effective date. Returns entries of web vulnerability host findings from the scorecard event log. Required: scorecard_identifier, effective_date. Scorecard history is available for the last 12 months.
- **List all issues webapp vulnerable to spring 4 shells** (List). List webapp vulnerable to Spring4Shell issue findings from a SecurityScorecard scorecard's event history for a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues website copyright expireds** (List). List website copyright expired issues for a SecurityScorecard scorecard's history event on a specific effective date. Returns: id, severity. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues website copyright up to dates** (List). List website copyright up to date issues for a SecurityScorecard company's scorecard history event on a specific effective date. Returns: id, name. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues websocket receives datas** (List). List SecurityScorecard 'websocket receives data' issue events from a company's scorecard event history for a specific effective date. Returns: id, type, severity for each issue entry. Required: scorecard_identifier, effective_date.
- **List all issues websocket requests contain sensitive fields** (List). List SecurityScorecard historical issue findings of type 'websocket_requests_contain_sensitive_fields' for a company scorecard at a specific effective date. Returns a paginated list of entries with id. Required: scorecard_identifier, effective_date.
- **List all SecurityScorecard issues websocket sends datas** (List). List SecurityScorecard websocket sends data issues for a specific scorecard event on a given effective date. Returns a paginated collection of issue entries from the scorecard's history event log. Required: scorecard_identifier, effective_date.
- **List all issues x content type options incorrect v 2 s** (List). List SecurityScorecard x_content_type_options_incorrect_v2 issue findings from a company's scorecard history event on a specific effective date. Returns issue finding entries from the scorecard event log. Required: scorecard_identifier, effective_date.
- **List all issues x frame options incorrect v 2 s** (List). List X-Frame-Options incorrect issue findings from a SecurityScorecard company scorecard's history events for a given effective date. Returns a collection of issue entries associated with the x_frame_options_incorrect_v2 issue type. Required: scorecard_identifier, effective_date.
- **List all issues x xss protection incorrect v 2 s** (List). List SecurityScorecard X-XSS-Protection incorrect v2 issue findings for a specific scorecard history event on a given effective date. Returns: id, domain, severity. Required: scorecard_identifier, effective_date.
- **List all issues xss payload using tor proxy detecteds** (List). List SecurityScorecard 'xss_payload_using_tor_proxy_detected' issue findings for a specific scorecard's history event on a given effective date. Returns a paginated collection of issue finding entries from the scorecard event log. Required: scorecard_identifier, effective_date. Company must be added to a portfolio before scorecard data is accessible.
- **Create a SecurityScorecard custom scorecard** (Create). Create a custom scorecard in SecurityScorecard for a subsidiary or subset of a regular scorecard. Returns: id, attributes.
- **Get single SecurityScorecard custom scorecard by ID** (Get). Get a custom scorecard in SecurityScorecard by id. Returns: id, attributes. Required: id.
- **Update a SecurityScorecard custom scorecard by ID** (Update). Update a custom scorecard in SecurityScorecard by id. Returns: id, attributes. Required: id.
- **Delete a SecurityScorecard custom scorecard by ID** (Delete). Delete a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
- **SecurityScorecard custom scorecard filters bulk update** (Update). Update the filter configuration for a SecurityScorecard custom scorecard. Returns: id. Required: id.
- **SecurityScorecard custom scorecard filters bulk delete** (Delete). Delete the filter configuration for a SecurityScorecard custom scorecard. Returns an empty 204 response on success. Required: id.
- **SecurityScorecard custom scorecard sources bulk update** (Update). Update the sources of a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
- **SecurityScorecard custom scorecard sources bulk delete** (Delete). Delete the sources of a custom scorecard in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
- **List all SecurityScorecard compliance frameworks** (List). List compliance frameworks available in SecurityScorecard. Returns: id.
- **Get single SecurityScorecard compliance framework by ID** (Get). Get a single compliance framework in SecurityScorecard by id. Returns: id. Required: id.
- **Get single SecurityScorecard vendor detection portfolio by ID** (Get). Get a single SecurityScorecard portfolio by its id. Returns: id, name, description, privacy. Required: id.
- **List all SecurityScorecard vendor detection fourth parties** (List). List fourth-party vendors detected by SecurityScorecard's vendor detection for a given domain. Returns: domain. Required: domain.
- **List all SecurityScorecard vendor detection products** (List). List vendor detection products detected on a domain in SecurityScorecard. Returns: id, name. Required: domain.
- **List all SecurityScorecard vendor detection risks** (List). List vendor detection risks for a domain in SecurityScorecard. Returns a paginated list of risk entries from the vendor detection analysis for the specified domain. Required: domain.
- **List all SecurityScorecard vendor detection third parties** (List). List third-party vendors and technologies detected on a domain via SecurityScorecard's Attack Surface Intelligence. Returns a paginated collection of detected third-party entries. Required: domain.
- **Create a SecurityScorecard CSV export** (Create). Create a compliance CSV export report in SecurityScorecard. Returns: report_url, status. The report is generated asynchronously; use the returned report_url to download the CSV file once the status indicates completion.
- **Create a SecurityScorecard reports detailed** (Create). Generate a detailed SecurityScorecard report asynchronously. Returns: report_url, status. The report is processed in the background and can be downloaded from the returned report_url once complete. Subject to a stricter per-endpoint rate limit; avoid high-frequency automated calls.
- **Create a SecurityScorecard reports events JSON** (Create). Generate a SecurityScorecard scorecard events report as JSON for asynchronous download. Returns: report_url, status. The report is processed asynchronously and can be downloaded from the returned report_url once complete.
- **List all SecurityScorecard reports files** (List). List SecurityScorecard report files at a given file path. Returns: id, name, report_url, status. Required: file_path.
- **Create a SecurityScorecard reports footprint domain** (Create). Generate a footprint domains report in SecurityScorecard. Returns: report_url, status. The report is processed asynchronously; once complete, download the generated file from the returned report_url.
- **Create a SecurityScorecard reports footprint IP** (Create). Generate a SecurityScorecard footprint IPs report asynchronously. Returns: report_url, status. The report_url can be used to download the generated file once processing completes.
- **Create a SecurityScorecard reports full scorecard JSON** (Create). Generate a full scorecard JSON report in SecurityScorecard. The report is produced asynchronously. Returns: report_url, status. Once the status indicates completion, download the report from the report_url.
- **Create a SecurityScorecard reports issue** (Create). Generate an issues report in SecurityScorecard. Returns: report_url, status. The report is processed asynchronously — download the file from the returned report_url once generation completes.
- **Create a SecurityScorecard reports partnership** (Create). Create a partnership report in SecurityScorecard. Returns: report_url, status. The report is generated asynchronously — download it from report_url once complete.
- **Create a SecurityScorecard reports portfolio** (Create). Generate a portfolio report in SecurityScorecard. The report is processed asynchronously and can be downloaded from the returned URL once complete. Returns: report_url, status.
- **List all SecurityScorecard reports recents** (List). List recently generated SecurityScorecard reports. Returns: report_url, status. Each entry includes a download URL for the generated report file (e.g. csv, pdf) and its current processing status.
- **Create a SecurityScorecard reports scorecard footprint** (Create). Generate a Scorecard Footprint report for a company, describing the digital footprint attributed to its scorecard. Returns the generated report id, which is then used to poll for and download the finished file. Optionally scope the report by ips, subdomains, or countries, and choose pdf or csv output. Required: scorecard_identifier.
- **Create a SecurityScorecard reports summary** (Create). Generate a Company Summary report for a company's SecurityScorecard scorecard. Returns the generated report id, which is then used to poll for and download the finished file. Optionally set branding when white-labeling is enabled for your account. Required: scorecard_identifier.
- **Create a SecurityScorecard invitation** (Create). Create an invitation in SecurityScorecard to invite a company to access and improve their own scorecard. All invited companies gain a free account. Returns: id, domain, created_at. Required: domain.
- **Create a SecurityScorecard issue feedback validation request** (Create). Submit a feedback validation request for a specific issue type on a SecurityScorecard company scorecard. Returns a confirmation of the validation request submission. Required: domain, type.
- **Create a SecurityScorecard issue feedback** (Create). Submit feedback to refute an issue of a specific type on a company's SecurityScorecard scorecard. Returns a confirmation of the submitted feedback. Required: domain, type.
- **List all SecurityScorecard metadata factors** (List). List all available SecurityScorecard factor types and their metadata. Returns: id, name.
- **List all SecurityScorecard metadata issue types** (List). List all SecurityScorecard issue types. Returns: id, name.
- **Get single SecurityScorecard metadata issue type by ID** (Get). Get a single SecurityScorecard issue type by id. Returns: id, name. Required: id.
- **List all SecurityScorecard notifications recents** (List). List recent SecurityScorecard notifications for a user by username, generated from configured scorecard alert triggers. Returns notification entries including id. Required: username.
- **List all SecurityScorecard metadata service providers** (List). List SAML service provider metadata entries in SecurityScorecard. Returns: id, name.
- **List all SecurityScorecard jiras** (List). Validate Jira secrets configured in SecurityScorecard by calling the validate-jira-secrets action endpoint. Returns a validation result object whose fields are not documented in the upstream SecurityScorecard API reference.
- **List all SecurityScorecard apps jira legacies** (List). Validate Jira secrets for the Jira Legacy app integration in SecurityScorecard. This GET action endpoint checks whether the configured Jira credentials are valid. Returns an empty 204 response on success.
- **List all SecurityScorecard jira legacy installs** (List). List SecurityScorecard Jira Legacy app installations. Returns: id, created_at, updated_at. Max 50 items per page.
- **Create a SecurityScorecard jira legacy install** (Create). Install or configure the SecurityScorecard Jira Legacy app integration. Returns: id, created_at, updated_at.
- **List all SecurityScorecard jira legacy installation errors** (List). List Jira legacy app installation errors in SecurityScorecard. Returns a paginated collection of error entries, each containing id and name. Max 50 items per page.
- **List all SecurityScorecard jira legacy redirect from sscs** (List). List Jira legacy redirect entries from SecurityScorecard. Returns: id, name. No required parameters.
- **List all SecurityScorecard jira installs** (List). List Jira app installations in SecurityScorecard. Returns a paginated collection of install records. Returns: id.
- **Create a SecurityScorecard jira install** (Create). Install a Jira app integration in SecurityScorecard. Returns the created install record. Returns: id.
- **List all SecurityScorecard jira installation errors** (List). List Jira installation errors recorded in SecurityScorecard. Returns a paginated collection of installation error records identified by id.
- **List all SecurityScorecard jira redirect from sscs** (List). List Jira redirect-from-SSC entries in SecurityScorecard. The upstream API reference does not document the response shape for this endpoint; entries are returned under the standard `entries` pagination envelope. Returns: id, attributes.
- **List all SecurityScorecard apps jiras** (List). List Jira app assets by asset filename in SecurityScorecard. Returns: id, name. Required: asset_filename.
- **Create a SecurityScorecard app job** (Create). Create a new job for a SecurityScorecard app. Returns: id, created_at, updated_at. Required: app_id.
- **Update a SecurityScorecard app job by ID** (Update). Update a SecurityScorecard app job by id. Returns: id, created_at, updated_at. Required: app_id, id.
- **List all SecurityScorecard audits API logs** (List). List SecurityScorecard API audit log entries. Returns: id, created_at, updated_at. The full field set of each audit log entry is not enumerated in the available SecurityScorecard API documentation.
- **List all SecurityScorecard companie active issues** (List). List a company's currently active issues on its SecurityScorecard scorecard, grouped by issue type. Returns issue_types, each with name, issues, and issues_count. Optionally filter with issue_types. Required: scorecard_identifier.
- **Get single SecurityScorecard domain migration statuses ID by ID** (Get). Get a domain migration status by id in SecurityScorecard. Returns the domain migration status record for the specified identifier. Required: id.
- **List all SecurityScorecard targets** (List). List domain migration statuses between a source and target domain in SecurityScorecard. Returns: source, target, status. Required: source, target.
- **SecurityScorecard footprint tags bulk create** (Create). Bulk create tags for SecurityScorecard footprint scorecards by submitting a JSON array of tag objects. Returns the created tags including their id and name. Required: a JSON array of tag objects, each with a name.
- **List all SecurityScorecard assets domains** (List). List domain assets discovered within a SecurityScorecard footprint for a given parent domain. Returns: id. Required: parent_domain.
- **List all SecurityScorecard assets ips** (List). List IP address assets discovered in the SecurityScorecard footprint for a given parent domain. Returns a paginated collection of IP entries from the domain's attack surface. Required: parent_domain.
- **Create a SecurityScorecard assignees domain** (Create). Create a domain assignee for a SecurityScorecard footprint by parent domain. Returns an empty 204 response on success. Required: parent_domain.
- **Create a SecurityScorecard assignees IP** (Create). Create an IP assignee for a SecurityScorecard footprint identified by its parent domain. Returns: ip, parent_domain, created_at. Required: parent_domain, ip.
- **List all SecurityScorecard assignee assets** (List). List assignee assets for a given parent domain and asset type in SecurityScorecard's footprint. Returns: id, name. Required: parent_domain, asset_type.
- **List all SecurityScorecard attribution logs** (List). List attribution log entries for a SecurityScorecard footprint by parent domain. Returns: id, created_at, updated_at. Required: parent_domain.
- **SecurityScorecard domain associate tags bulk create** (Create). Bulk associate tags with a domain's assets in SecurityScorecard's footprint. Returns an empty 204 response on success. Required: parent_domain.
- **SecurityScorecard IP associate tags bulk create** (Create). Bulk associate tags with IPs for a parent domain footprint in SecurityScorecard. Returns an empty 204 response on success. Required: parent_domain.
- **List all SecurityScorecard intake vendor forms** (List). List current intake vendor forms in SecurityScorecard. Returns: id, attributes. No required parameters.
- **List all SecurityScorecard forms access domains** (List). List access domains for the current SecurityScorecard intake vendor form. Returns: id, name.
- **SecurityScorecard forms access domains bulk update** (Update). Update the access domains for the current SecurityScorecard intake vendor form by replacing the existing set. Returns: id, name. Required: entries.
- **List all SecurityScorecard forms publish status** (List). List the current publish status of intake vendor forms in SecurityScorecard. Returns a paginated collection of publish status entries. The upstream response is paginated with a maximum of 50 items per page.
- **Create a SecurityScorecard forms question** (Create). Create a new question on the current SecurityScorecard intake vendor form. Returns the created question object including its id.
- **Update a SecurityScorecard forms question by ID** (Update). Update an existing question on the current SecurityScorecard intake vendor form by id. Returns the updated question object including its id. Required: id.
- **Delete a SecurityScorecard forms question by ID** (Delete). Delete a question from the current SecurityScorecard intake vendor form by id. Returns an empty 204 response on success. Required: id.
- **SecurityScorecard forms questions reorders bulk update** (Update). Reorder questions on the current SecurityScorecard intake vendor form by submitting an ordered list of question IDs reflecting the desired new sequence. Returns an empty 204 response on success. Required: a JSON array of question IDs in the new order.
- **List all SecurityScorecard forms risk settings** (List). List current risk settings for intake vendor forms in SecurityScorecard. Returns a paginated collection of risk setting entries via the entries array, each containing id and name. Max 50 items per page.
- **SecurityScorecard forms risk settings bulk update** (Update). Update current risk settings for intake vendor forms in SecurityScorecard. Returns: id, name. Required: entries.
- **Create a SecurityScorecard forms status** (Create). Update the status of the current vendor intake form in SecurityScorecard. Returns an empty 204 response on success.
- **Create a SecurityScorecard forms setup** (Create). Create a forms setup in SecurityScorecard by submitting a POST request to the intake-vendor forms setup endpoint. The response shape is not documented in the available SecurityScorecard API reference; treat the returned body as opaque. No required caller-supplied parameters are documented beyond the request body.
- **List all SecurityScorecard intake vendor review items** (List). List intake vendor review items in SecurityScorecard. Returns: id, name.
- **List all SecurityScorecard intake vendor risk tier templates** (List). List risk tier templates for vendor intake in SecurityScorecard. Returns a collection of risk tier template records from the entries array.
- **SecurityScorecard intake vendor risk tier templates bulk update** (Update). Update intake vendor risk tier templates in SecurityScorecard by submitting a JSON request body. Returns the updated risk tier template object including its id, name, and tier configuration.
- **Get single SecurityScorecard intake vendor submission by ID** (Get). Get a specific SecurityScorecard intake vendor submission by id. Returns the submission object with content-type-specific fields including id and attributes. Required: id.
- **Update a SecurityScorecard intake vendor submission by ID** (Update). Update a SecurityScorecard intake vendor submission by id with partial data. Returns the updated submission object with content-type-specific fields including id and attributes. Required: id.
- **List all SecurityScorecard jira leen installs** (List). List SecurityScorecard Jira Leen installs. Returns install records including id and additional attributes whose individual fields are not enumerated in the upstream API documentation. Max 50 items per page.
- **List all SecurityScorecard jira leen installation errors** (List). List Jira Leen installation errors in SecurityScorecard. Returns: id, name. Max 50 items per page.
- **List all SecurityScorecard jira leen redirect from sscs** (List). List redirect entries from SecurityScorecard for the Jira Leen integration. Returns: id.
- **List all SecurityScorecard leen callbacks** (List). List leen callbacks in SecurityScorecard filtered by app, organization, and status. Returns a paginated collection of callback entries with id and name. Required: app_id, organization_id, status.
- **Delete a SecurityScorecard managed services customer by ID** (Delete). Delete a managed services customer in SecurityScorecard by id. Returns an empty 204 response on success. Required: id.
- **List all SecurityScorecard managed services customers** (List). List managed services customers in SecurityScorecard. Returns: id, created_at, updated_at.
- **Get single SecurityScorecard managed services document by ID** (Get). Get a specific managed services document in SecurityScorecard by id. Returns: id, created_at, updated_at. Required: id.
- **SecurityScorecard managed services documents bulk delete** (Delete). Delete managed services documents in SecurityScorecard. Returns an empty 204 response on success.
- **Get single SecurityScorecard documents download by ID** (Get). Download a managed services document in SecurityScorecard by id. Returns: report_url, status. Required: id.
- **Create a SecurityScorecard documents upload** (Create). Upload a document to SecurityScorecard managed services via POST. Returns: id, created_at, updated_at.
- **SecurityScorecard documents uploads bulk update** (Update). Update an uploaded document in SecurityScorecard managed services via PUT. Returns: id, created_at, updated_at.
- **Get managed services managed customer by ID** (Get). Get a SecurityScorecard managed customer by id. Returns the managed customer record including its id and other customer attributes. Required: id.
- **SecurityScorecard reports likelihood assessments bulk update** (Update). Update a SecurityScorecard likelihood assessment report. Returns: report_url, status. Required: report_url, status.
- **SecurityScorecard reports likelihood assessments bulk delete** (Delete). Delete a SecurityScorecard likelihood assessment report. Returns: report_url, status. Required: report_url.
- **SecurityScorecard reports remediation plans bulk update** (Update). Update a remediation plan report in SecurityScorecard by submitting a report URL and status. Returns: report_url, status. Required: report_url, status.
- **List all SecurityScorecard max breaches** (List). List breach entries from the SecurityScorecard Max platform. Returns: id, name. The response is paginated; the upstream API wraps results in an entries array.
- **SecurityScorecard max breaches bulk update** (Update). Update SecurityScorecard breach partner findings via the Max platform. Returns: report_url, status.
- **Get single SecurityScorecard breaches report by ID** (Get). Get a SecurityScorecard breach report by id. Returns: report_url, status. Required: id.
- **List all SecurityScorecard customer breaches** (List). List customer breach records from SecurityScorecard. Returns a paginated collection of breach entries. No required parameters.
- **List all SecurityScorecard customer executive summaries** (List). List customer executive summaries from SecurityScorecard's MAX platform. Returns the executive summary object with content-type-specific fields; the available fields depend on the upstream MAX schema and are not individually documented in the public API reference. Entries are paginated.
- **SecurityScorecard customer executive summaries bulk update** (Update). Update a customer's executive summary in SecurityScorecard's MAX platform. Returns: id, attributes. Required: customer_id.
- **List all SecurityScorecard customer findings** (List). List customer security findings from SecurityScorecard's MAX platform. Returns a paginated list of finding entries, each including its id. Max 50 entries per page.
- **List all SecurityScorecard customer historical scores** (List). List historical SecurityScorecard scores for a customer scorecard over a date range within the last 12 months. Returns: score, grade, date. Required: scorecard_identifier. Optional timing granularity (daily, weekly, or monthly) defaults to daily.
- **List all customer incident likelihood over times** (List). List SecurityScorecard Max customer incident-likelihood time-series entries. Returns: date, likelihood. The response is paginated via the standard entries wrapper.
- **List all SecurityScorecard customer incident likelihood trends** (List). List SecurityScorecard customer incident likelihood trends over time. Returns: date, likelihood.
- **List all SecurityScorecard customer likelihood assessments** (List). List customer likelihood assessments in SecurityScorecard. Returns: id, attributes. The response field set for each assessment record is not documented in the available API reference; consult the SecurityScorecard MAX API docs for the field-level breakdown.
- **Get customer likelihood assessment by ID** (Get). Get a specific SecurityScorecard customer likelihood assessment by id. Returns the likelihood assessment object including its id. Required: id.
- **List all SecurityScorecard raw findings daily avgs** (List). List daily-average raw findings for a customer in SecurityScorecard. Returns a paginated collection of entries, each representing a daily-average raw finding record. No required parameters.
- **List all SecurityScorecard raw findings daily counts** (List). List daily counts of raw findings in SecurityScorecard. Returns: date, count.
- **List all SecurityScorecard customer remediation plans** (List). List customer remediation plans in SecurityScorecard. Returns a paginated collection where each entry includes: id.
- **Get single SecurityScorecard customer remediation plan by ID** (Get). Get a single customer remediation plan in SecurityScorecard by id. Returns: id. Required: id.
- **List all SecurityScorecard reports downloads** (List). List SecurityScorecard customer report download entries. Returns: report_url, status. Once a report's status indicates completion, use the report_url to download the generated file (e.g. CSV, PDF).
- **List all SecurityScorecard reports vendors** (List). List SecurityScorecard vendor reports. Returns: report_url, status. No required parameters.
- **List all SecurityScorecard customer tags counts** (List). List customer tags counts in SecurityScorecard. Returns a paginated collection of tag count entries extracted from the entries array. No required parameters.
- **List all SecurityScorecard customer vendors** (List). List customer vendors in SecurityScorecard. Returns a paginated collection of vendor records via the entries array. Returns: id, name.
- **Get single SecurityScorecard customer vendor by ID** (Get). Get a single customer vendor by id in SecurityScorecard. Returns: id, name. Required: id.
- **List all SecurityScorecard customer vendors improvements** (List). List vendor score improvements in SecurityScorecard. Returns: id, domain, name, score, grade, improvement, created_at. Entries are paginated using the standard SecurityScorecard page/size pagination structure.
- **List all SecurityScorecard customer vendors risk highlights** (List). List vendor risk highlights for customers in SecurityScorecard. Returns: id, created_at, updated_at. No required parameters.
- **List all vendors risk matrix incident likelihoods** (List). List incident likelihood entries for the vendors risk matrix in SecurityScorecard MAX. Returns a paginated collection of incident likelihood records unwrapped from the entries array. No required parameters.
- **List all vendors risk matrix indicator severities** (List). List indicator severity entries for the vendors risk matrix in SecurityScorecard. Returns a paginated collection of indicator severity entries (unwrapped from the `entries` array) with id, name, and severity. No required parameters.
- **List all SecurityScorecard slots** (List). List slots for a SecurityScorecard customer by customer_id. Returns a paginated collection of slot records; each entry includes id. Required: customer_id.
- **SecurityScorecard slots bulk update** (Update). Update slots for a SecurityScorecard customer by customer_id via a JSON request body. Returns the updated slot record including id. Required: customer_id.
- **List all SecurityScorecard customer acceses** (List). List customer access records for a specific SecurityScorecard customer. Returns: id, name. Required: customer_id.
- **Create a SecurityScorecard customer accese** (Create). Create customer access for a SecurityScorecard customer by customer id. Returns: id. Required: customer_id.
- **List all SecurityScorecard customer managed questionnaires** (List). List managed questionnaires for a SecurityScorecard customer. Returns a paginated collection of questionnaire records (via the entries array) with id and name. Required: customer_id.
- **SecurityScorecard customer managed questionnaires bulk update** (Update). Update a managed questionnaire for a SecurityScorecard customer. Returns: id, updated_at. Required: customer_id.
- **List all SecurityScorecard customer users** (List). List users belonging to a specific SecurityScorecard customer. Returns: id, created_at, updated_at. Required: customer_id.
- **List all SecurityScorecard indicators exclusions** (List). List SecurityScorecard indicator exclusions. Returns: id, created_at, updated_at.
- **Create a SecurityScorecard indicators exclusion** (Create). Create a new SecurityScorecard indicator exclusion. Returns: id, created_at, updated_at.
- **SecurityScorecard indicators exclusions bulk delete** (Delete). Bulk delete SecurityScorecard indicator exclusions. Returns an empty 204 response on success.
- **Update a SecurityScorecard indicators exclusion by ID** (Update). Update a SecurityScorecard indicator exclusion by id. Returns: id, created_at, updated_at. Required: id.
- **Get single SecurityScorecard max management request by ID** (Get). Get a specific SecurityScorecard management request by id. Returns: id. Required: id.
- **List all SecurityScorecard notification preferences** (List). List notification preferences for a SecurityScorecard contact. Returns: id, created_at, updated_at. Required: contact_id.
- **SecurityScorecard notification preferences bulk update** (Update). Update notification preferences for a SecurityScorecard contact. Returns: id, created_at, updated_at. Required: contact_id.
- **List all SecurityScorecard partner contacts** (List). List partner contacts in SecurityScorecard. Returns: id, created_at, updated_at. Max 50 per page.
- **Create a SecurityScorecard contacts bulk escalation toggle** (Create). Toggle escalation status for multiple SecurityScorecard contacts in bulk via the partner API. Returns a confirmation response indicating the result of the bulk escalation toggle operation.
- **List all SecurityScorecard vendors** (List). List vendor entries for a specific customer and vendor domain in SecurityScorecard's Max partner API. Returns: vendor_domain, customer_id, attributes. Required: customer_id, vendor_domain.
- **SecurityScorecard vendors bulk update** (Update). Update a vendor for a specific customer and vendor domain in SecurityScorecard's Max partner API. Returns the updated vendor record including vendor_domain, customer_id, and attributes. Required: customer_id, vendor_domain.
- **List all SecurityScorecard customer default ccs** (List). List default CC (carbon copy) email addresses configured for a SecurityScorecard Max partner customer. Returns: email. Required: customer_id.
- **Create a SecurityScorecard customer default cc** (Create). Add a default CC (carbon copy) email address for a SecurityScorecard Max partner customer. Returns: email, customer_id. Required: customer_id.
- **SecurityScorecard customer default ccs bulk create** (Create). Bulk add default CC (carbon copy) email addresses for a SecurityScorecard Max partner customer. Accepts an array of CC email records. Returns: email, customer_id. Required: customer_id.
- **SecurityScorecard customer default ccs bulk delete** (Delete). Delete a default CC (carbon copy) email address for a SecurityScorecard Max partner customer by CC email. Returns an empty 204 response on success. Required: customer_id, cc_email.
- **List all SecurityScorecard vendor cc extras** (List). List CC email extras for a vendor in SecurityScorecard. Returns: cc_email. Required: customer_id, vendor_id.
- **Create a SecurityScorecard vendor cc extra** (Create). Create a CC email extra for a vendor in SecurityScorecard. Returns: cc_email. Required: customer_id, vendor_id, cc_email.
