API reference
Every endpoint an API key or an OAuth token can call, at https://api.fortwatch.ai. See Authentication for the access each needs and Limits and paging for budgets.
Assets
Domains, subdomains, IP addresses and cloud buckets, their ownership proof and what anyone can see of them.
- GETList assets/app/assets
- GETGet an asset/app/assets/{id}
- GETGet the outside view/app/assets/{id}/outside-view/{part}
- GETGet the ownership state/app/assets/{id}/ownership
- GETGet an asset's screenshot/app/assets/{id}/screenshot
- POSTAdd an asset/app/assets
- POSTVerify ownership/app/assets/{id}/ownership/verify
- POSTCheck an asset again/app/assets/{id}/revalidate
- PUTUpdate an asset/app/assets/{id}
- DELETEDelete an asset/app/assets/{id}
Projects
Groups of assets.
Discovery
Hostnames public sources know under your proven domains, to add as assets.
Scans
Start scans and read their results.
Scan schedules
When each asset is scanned on its own.
Issues
What needs fixing: one issue per kind of problem and asset, with its findings, status and comments.
- GETList issues/app/issues
- GETGet an issue/app/issues/{id}
- GETList an issue's comments/app/issues/{id}/comments
- POSTComment on an issue/app/issues/{id}/comments
- PATCHAssign an issue/app/issues/{id}/assignee
- PATCHEdit a comment/app/issues/{id}/comments/{commentId}
- PATCHDismiss an issue/app/issues/{id}/dismiss
- PATCHChange an issue's status/app/issues/{id}/status
- DELETEDelete a comment/app/issues/{id}/comments/{commentId}
Findings
Everything the scanners found.
Ports
Open ports across your assets.
Reports
Period summaries, the most vulnerable assets and SLA performance.
Assessments
Forwardable assessment reports, as HTML or PDF, and their share links.
- GETList assessment reports/app/assessments
- GETGet an assessment report/app/assessments/{id}
- GETGet a report as HTML/app/assessments/{id}/html
- GETGet a report as PDF/app/assessments/{id}/pdf
- POSTCreate an assessment report/app/assessments
- POSTShare a report/app/assessments/{id}/share
- DELETEDelete a report/app/assessments/{id}
- DELETEStop sharing a report/app/assessments/{id}/share
Audit log
Every change in the workspace, by whom and through what.