How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

CloudGuard Risk Management API

Effective Risk Management - DSPM account registration, custom rulesets, the security graph query surface and toxic-combination evidence paths. 67 operations across 49 paths.

CloudGuard Risk Management API is one of 25 APIs that CloudGuard publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Risk Management, DSPM, Security Graph, and Rulesets. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and authentication docs.

This API exposes 67 operations across 49 paths, organized into 17 resource areas, and defines 90 schemas. It is described by OpenAPI 3.0.0, at version v2.

Requests are made against 2 base URLs: https://api.dome9.com/, https://api.{region}.dome9.com/.

67 operations 49 paths 90 schemas 9 DELETE33 GET18 POST7 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.0
API Version
v2
Base URL
https://api.dome9.com
Authentication
HTTP Basic
Resource Areas
17

Authentication & Security 1

CloudGuard Risk Management API declares 1 security scheme for authenticating requests. It accepts HTTP basic authentication (basic). By default, every request must be authenticated.

Paths & Operations 67

Across 49 paths, the API surfaces 67 operations — 9 DELETE, 33 GET, 18 POST, 7 PUT. They span 17 resource areas, including Business Priority Modifier, Custom Ruleset, Dspm, Group Risk Management, Remediation Actions, Risk Modifiers, Waf, Entity Types, and 9 more. Each is listed below with its method, path, parameters, and response codes.

Business Priority Modifier 4
POST
/v2/erm/businesspriority/add-rule
Add Rule
BusinessPriorityModifier_AddRule_post_/v2/erm/businesspriority/add-rule body → 200
PUT
/v2/erm/businesspriority/update-rule
Update Rule
BusinessPriorityModifier_UpdateRule_put_/v2/erm/businesspriority/update-rule body → 200
DELETE
/v2/erm/businesspriority/delete-rule
Delete Rule
BusinessPriorityModifier_DeleteRule_delete_/v2/erm/businesspriority/delete-rule 1 param → 200
GET
/v2/erm/businesspriority/get-rules
Get Rules
BusinessPriorityModifier_GetRules_get_/v2/erm/businesspriority/get-rules → 200
Custom Ruleset 4
POST
/v2/erm/ruleset/set-custom-ruleset
Set
CustomRuleset_Set_post_/v2/erm/ruleset/set-custom-ruleset body → 200
GET
/v2/erm/ruleset/get-custom-ruleset
Get
CustomRuleset_Get_get_/v2/erm/ruleset/get-custom-ruleset → 200
DELETE
/v2/erm/ruleset/remove-custom-ruleset
Remove
CustomRuleset_Remove_delete_/v2/erm/ruleset/remove-custom-ruleset body → 200
DELETE
/v2/erm/ruleset/remove-all-custom-rulesets
Remove All
CustomRuleset_RemoveAll_delete_/v2/erm/ruleset/remove-all-custom-rulesets body → 200
Dspm 10

DSPM Controller

GET
/v2/erm/dspm/sentra-account
Get Sentra Accounts
Dspm_GetSentraAccounts_get_/v2/erm/dspm/sentra-account → 200
POST
/v2/erm/dspm/sentra-account
Add Sentra Account
Dspm_AddSentraAccount_post_/v2/erm/dspm/sentra-account body → 200
GET
/v2/erm/dspm/sentra-account/{id}
Get Sentra Account
Dspm_GetSentraAccount_get_/v2/erm/dspm/sentra-account/{id} 1 param → 200
PUT
/v2/erm/dspm/sentra-account/{id}
Update Sentra Account
Dspm_UpdateSentraAccount_put_/v2/erm/dspm/sentra-account/{id} 1 param body → 200
DELETE
/v2/erm/dspm/sentra-account/{id}
Delete Sentra Account
Dspm_DeleteSentraAccount_delete_/v2/erm/dspm/sentra-account/{id} 1 param → 200
GET
/v2/erm/dspm/cyera-account
Get Cyera Accounts
Dspm_GetCyeraAccounts_get_/v2/erm/dspm/cyera-account → 200
POST
/v2/erm/dspm/cyera-account
Add Cyera Account
Dspm_AddCyeraAccount_post_/v2/erm/dspm/cyera-account body → 200
GET
/v2/erm/dspm/cyera-account/{id}
Get Cyera Account
Dspm_GetCyeraAccount_get_/v2/erm/dspm/cyera-account/{id} 1 param → 200
PUT
/v2/erm/dspm/cyera-account/{id}
Update Cyera Account
Dspm_UpdateCyeraAccount_put_/v2/erm/dspm/cyera-account/{id} 1 param body → 200
DELETE
/v2/erm/dspm/cyera-account/{id}
Delete Cyera Account
Dspm_DeleteCyeraAccount_delete_/v2/erm/dspm/cyera-account/{id} 1 param → 200
Group Risk Management 1
POST
/v2/erm/groups/risk-data
Get Groups Risk Data
GroupRiskManagement_GetGroupsRiskData_post_/v2/erm/groups/risk-data body → 200
Remediation Actions 1
POST
/v2/erm/remediation/top-actions
Get Top Remediation Actions
RemediationActions_GetTopRemediationActions_post_/v2/erm/remediation/top-actions body → 200
Risk Modifiers 1
GET
/v2/erm/asset-types/supported-types
Get
RiskModifiers_Get_get_/v2/erm/asset-types/supported-types → 200
Waf 1

WAF Protection

POST
/v2/erm/waf/stats
Get Stats
Waf_GetStats_post_/v2/erm/waf/stats body → 200
Entity Types 1
GET
/v2/security-graph/entity-types
Get All
EntityTypesController_getAll_get_/v2/security-graph/entity-types → default
Evidence Path 1
GET
/v2/security-graph/evidence-path
Get
EvidencePathController_get_get_/v2/security-graph/evidence-path 1 param → default
Exclusions 5

The exclusion endpoint provides API to perform CRUD operations on the resource.

GET
/v2/security-graph/exclusions/{id}
Get
ExclusionController_get_get_/v2/security-graph/exclusions/{id} 1 param → default
DELETE
/v2/security-graph/exclusions/{id}
Delete
ExclusionController_delete_delete_/v2/security-graph/exclusions/{id} 1 param → 204
PUT
/v2/security-graph/exclusions/{id}
Update
ExclusionController_update_put_/v2/security-graph/exclusions/{id} 1 param body → 204
GET
/v2/security-graph/exclusions
Get All
ExclusionController_getAll_get_/v2/security-graph/exclusions → default
POST
/v2/security-graph/exclusions
Insert
ExclusionController_insert_post_/v2/security-graph/exclusions body → default
Ignore Cves 5
GET
/v2/security-graph/ignore-cves/{id}
Get
IgnoreCvesController_get_get_/v2/security-graph/ignore-cves/{id} 1 param → default
DELETE
/v2/security-graph/ignore-cves/{id}
Delete
IgnoreCvesController_delete_delete_/v2/security-graph/ignore-cves/{id} 1 param → 204
PUT
/v2/security-graph/ignore-cves/{id}
Update
IgnoreCvesController_update_put_/v2/security-graph/ignore-cves/{id} 1 param body → 204
GET
/v2/security-graph/ignore-cves
Get All
IgnoreCvesController_getAll_get_/v2/security-graph/ignore-cves → default
POST
/v2/security-graph/ignore-cves
Insert
IgnoreCvesController_insert_post_/v2/security-graph/ignore-cves body → default
Ignore Malwares 5
GET
/v2/security-graph/ignore-malwares/{id}
Get
IgnoreMalwaresController_get_get_/v2/security-graph/ignore-malwares/{id} 1 param → default
DELETE
/v2/security-graph/ignore-malwares/{id}
Delete
IgnoreMalwaresController_delete_delete_/v2/security-graph/ignore-malwares/{id} 1 param → 204
PUT
/v2/security-graph/ignore-malwares/{id}
Update
IgnoreMalwaresController_update_put_/v2/security-graph/ignore-malwares/{id} 1 param body → 204
GET
/v2/security-graph/ignore-malwares
Get All
IgnoreMalwaresController_getAll_get_/v2/security-graph/ignore-malwares → default
POST
/v2/security-graph/ignore-malwares
Insert
IgnoreMalwaresController_insert_post_/v2/security-graph/ignore-malwares body → default
Security Graph Issues 8
GET
/v2/security-graph/issues/vulnerabilities
Get Vulnerabilities
IssueController_getVulnerabilities_get_/v2/security-graph/issues/vulnerabilities 2 params → default
GET
/v2/security-graph/issues/iam-sensitivity
Get Iam Sensitivity
IssueController_getIamSensitivity_get_/v2/security-graph/issues/iam-sensitivity 2 params → default
GET
/v2/security-graph/issues/main-entities
Get Main Entities
IssueController_getMainEntities_get_/v2/security-graph/issues/main-entities 1 param → default
GET
/v2/security-graph/issues/security-event
Get Security Events
IssueController_getSecurityEvents_get_/v2/security-graph/issues/security-event 1 param → default
GET
/v2/security-graph/issues/data-sensitivity
Get Data Sensitivity
IssueController_getDataSensitivity_get_/v2/security-graph/issues/data-sensitivity 1 param → default
GET
/v2/security-graph/issues/container-images
Get Container Images
IssueController_getContainerImages_get_/v2/security-graph/issues/container-images 1 param → default
GET
/v2/security-graph/issues/malware
Get Malware
IssueController_getMalware_get_/v2/security-graph/issues/malware 2 params → default
GET
/v2/security-graph/issues/enrichment-categories
Get Enrichment Categories
IssueController_getEnrichmentCategories_get_/v2/security-graph/issues/enrichment-categories 1 param → default
Rules 3

The rules endpoint provides APIs to get the security rules data

GET
/v2/security-graph/rules/{id}
Get
RuleController_get_get_/v2/security-graph/rules/{id} 1 param → default
GET
/v2/security-graph/rules/query/{id}
Get Query
RuleController_getQuery_get_/v2/security-graph/rules/query/{id} 1 param → default
GET
/v2/security-graph/rules
Get All
RuleController_getAll_get_/v2/security-graph/rules 2 params → default
Security Graph Query 7
POST
/v2/security-graph/query
Execute Toxic Combination Query
QueryController_executeToxicCombinationQuery_post_/v2/security-graph/query body → default
POST
/v2/security-graph/query/evidence-path/{queryRunRequestId}
Execute Toxic Combination Evidence Query
QueryController_executeToxicCombinationEvidenceQuery_post_/v2/security-graph/query/evidence-path/{queryRunRequestId} 1 param body → default
GET
/v2/security-graph/query/evidence-path/sync/{queryRunRequestId}/{srl}
Get Toxic Combination Evidence Sync
QueryController_getToxicCombinationEvidenceSync_get_/v2/security-graph/query/evidence-path/sync/{queryRunRequestId}/{srl} 2 params → default
GET
/v2/security-graph/query/evidence-path/{requestId}
Get Toxic Combination Evidence
QueryController_getToxicCombinationEvidence_get_/v2/security-graph/query/evidence-path/{requestId} 1 param → default
POST
/v2/security-graph/query/sync
Execute Toxic Combination Query Sync
QueryController_executeToxicCombinationQuerySync_post_/v2/security-graph/query/sync body → default
GET
/v2/security-graph/query/{requestId}
Get Toxic Combination Entity Srls
QueryController_getToxicCombinationEntitySrls_get_/v2/security-graph/query/{requestId} 1 param → default
GET
/v2/security-graph/entity-schema
Get Entity Schema
EntitySchemaController_getEntitySchema_get_/v2/security-graph/entity-schema → default
Security Issues 5
GET
/v2/findings/{id}
Get Finding
FindingsController_getFinding_get_/v2/findings/{id} 1 param → 200
POST
/v2/findings/search
Search
FindingsController_search_post_/v2/findings/search body → 200
POST
/v2/findings/group
Group
FindingsController_group_post_/v2/findings/group body → 200
POST
/v2/findings/search-adv
Search Adv
FindingsController_searchAdv_post_/v2/findings/search-adv body → 200
POST
/v2/findings/group-adv
Group Adv
FindingsController_groupAdv_post_/v2/findings/group-adv body → 200
Automated Actions 5
GET
/v2/findings-policies
Get All
FindingsPoliciesController_getAll_get_/v2/findings-policies → default
POST
/v2/findings-policies
Create Findings Policy
FindingsPoliciesController_createFindingsPolicy_post_/v2/findings-policies body → default
GET
/v2/findings-policies/{id}
Get Single
FindingsPoliciesController_getSingle_get_/v2/findings-policies/{id} 1 param → default
PUT
/v2/findings-policies/{id}
Update Findings Policy
FindingsPoliciesController_updateFindingsPolicy_put_/v2/findings-policies/{id} 1 param body → 204
DELETE
/v2/findings-policies/{id}
Delete Findings Policy
FindingsPoliciesController_deleteFindingsPolicy_delete_/v2/findings-policies/{id} 1 param → default

Schemas 90

The contract defines 90 schemas that model the data the API accepts and returns. The most detailed are FindingViewModel (31 properties), ProtectedAssetViewModel (24 properties), SecurityEventPartialViewModel (14 properties), SecurityGraphRuleViewModel (12 properties). Each schema is shown below with its type and property counts.

AssessmentCloudAccountType
string
CloudVendor
string
BusinessPriorityModifierAddRuleRequestViewModel
BusinessPriorityModifierRuleViewModel
object
3 properties 3 required
BusinessPriorityModifierRuleDefinitionViewModel
object
4 properties 4 required
BusinessPriorityModifierRuleEnvironmentViewModel
object
2 properties 2 required
BusinessPriorityModifierRuleOrganizationalUnitViewModel
object
1 property 1 required
BusinessPriorityModifierTagViewModel
object
2 properties 2 required
BusinessPriorityModifierUpdateRuleRequestViewModel
BusinessPriorityModifierRuleWithIdViewModel
CustomRulesetSetRequestViewModel
object
2 properties 2 required
PlatformViewModel
string
CustomRulesetRemoveRequestViewModel
object
1 property 1 required
SentraGetAllResponseViewModel
object
1 property 1 required
SentraAccountResponseViewModel
object
8 properties 8 required
SentraCredentialsViewModel
object
3 properties 3 required
SentraAccountErrorViewModel
object
2 properties 2 required
SentraCreateResponseViewModel
object
1 property 1 required
SentraCreateRequestViewModel
object
2 properties 2 required
SentraUpdateRequestViewModel
object
2 properties 2 required
CyeraGetAllResponseViewModel
object
1 property 1 required
CyeraAccountResponseViewModel
object
7 properties 7 required
CyeraCredentialsViewModel
object
1 property 1 required
CyeraAccountErrorViewModel
object
2 properties 2 required
CyeraCreateRessponseViewModel
object
1 property 1 required
CyeraCreateAccountRequestViewModel
object
3 properties 3 required
CyeraUpdateAccountRequestViewModel
object
3 properties 3 required
GetGroupsRiskRequestViewModel
object
3 properties 3 required
RemediationActionsRequestViewModel
object
7 properties 7 required
StatsFilterViewModel
object
2 properties 2 required
EntityTypePlatformViewModel
object
2 properties 2 required
NodeViewModel
object
4 properties 3 required
RelationshipViewModel
object
3 properties 3 required
EvidencePathViewModel
object
2 properties 2 required
ExclusionFilterOperator
string
eq: equal, in: equal to one of the values, between: between values, hasany: field has any of the values, likeany: like any
ExclusionSearchFieldFilterViewModel
object
3 properties 3 required
ExclusionSearchAdvFilterViewModel
object
2 properties 2 required
SecurityGraphExclusionViewModel
object
5 properties 2 required
SecurityGraphExclusionRequestModel
object
4 properties 1 required
IdViewModel
object
1 property 1 required
IgnoreCveFilterOperator
string
lt: less than, in: equal to one of the values, likeany: like any
IgnoreCveSearchFieldFilterViewModel
object
3 properties 3 required
IgnoreCveSearchAdvFilterViewModel
object
2 properties 2 required
SecurityGraphIgnoreCveViewModel
object
5 properties 2 required
SecurityGraphIgnoreCveRequestModel
object
4 properties 1 required
IgnoreMalwareFilterOperator
string
lt: less than, in: equal to one of the values, likeany: like any
IgnoreMalwareSearchFieldFilterViewModel
object
3 properties 3 required
IgnoreMalwareSearchAdvFilterViewModel
object
2 properties 2 required
SecurityGraphIgnoreMalwareViewModel
object
5 properties 2 required
SecurityGraphIgnoreMalwareRequestModel
object
4 properties 1 required
PackageDetailsResponse
object
4 properties
CveVulnerabilityResponse
object
9 properties 4 required
IamSensitivityResponse
object
2 properties 2 required
ProtectedAssetViewModel
object
24 properties 15 required
SecurityEventPartialViewModel
object
14 properties 13 required
DataSensitivityViewModel
object
6 properties 6 required
ContainerImageIssueViewModel
object
5 properties 5 required
MalwareScanEnrichment
object
1 property 1 required
MalwareViewModel
object
5 properties 5 required
SecurityGraphRuleViewModel
object
12 properties 8 required
SecurityGraphQueryDefinition
object
4 properties 4 required
SgqlQueryRunRequestModel
object
SgqlQueryRunEvidencePathRequestModel
object
GraphDataViewModel
object
QueryExecutionEvidencePathResponseViewModel
object
2 properties
SgqlQueryRunEvidenceResponseViewModel
object
2 properties
SgqlQueryRunSrlsEnhancedResponseViewModel
object
3 properties 1 required
SgqlQueryRunSrlsResponseViewModel
object
2 properties
EntitySchemaViewModel
object
2 properties 2 required
SeverityLevel
number
0: Unknown, 1: Informational, 2: Low, 3: Medium, 4: High, 5: Critical, 6: Fatal, 99: Other
FindingViewModel
object
31 properties 29 required
FindingsFilterOperator
string
eq: equal, !eq: not equal, gt: greater than, gte: greater than equal, lt: less than, lte: less than equal, has: field contains the value as a word, !has: not h…
SearchFieldFilterViewModel
object
3 properties 3 required
SearchFreeTextViewModel
object
2 properties 2 required
SearchSortViewModel
object
2 properties 2 required
FindingSearchRequestModel
object
9 properties
FacetResultDataViewModel
object
2 properties 2 required
FacetsResultsViewModel
object
2 properties 2 required
FindingSearchResultsViewModel
object
3 properties 2 required
SearchGroupSortViewModel
object
2 properties 2 required
FindingSearchGroupRequestModel
object
6 properties 1 required
SearchAdvFilterViewModel
object
2 properties 2 required
FindingSearchAdvRequestModel
object
8 properties
FindingSearchAdvGroupRequestModel
object
5 properties
FindingsPoliciesFilterOperator
string
eq: equal, !eq: not equal, has: field contains the value as a word, !has: not has, hasprefix: field contains the value as prefix, !hasprefix: not hasprefix, in…
FindingsPolicySearchFieldFilterViewModel
object
3 properties 3 required
FindingsPolicySearchAdvFilterViewModel
object
2 properties 2 required
FindingsPolicyViewModel
object
9 properties 5 required
FindingsPolicyRequestModel
object
6 properties 3 required
FindingsPolicyCreationViewModel
object
1 property 1 required

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

cloudguard-risk-management-openapi.yml Raw ↑

Other APIs CloudGuard publishes across the network.

CloudGuard Onboarding API
CloudGuard Posture Management API
CloudGuard Events API
CloudGuard Administration API
CloudGuard Workload Protection (CWPP) API
CloudGuard Network Security API
CloudGuard Identity API
CloudGuard Intelligence API
CloudGuard Inventory API
CloudGuard Inventory - AWS Global API
CloudGuard Inventory - AWS IAM API
CloudGuard Inventory - AWS Compute and Containers API
Where this information came from

This is an independent, third-party profile of CloudGuard Risk Management API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.