Sign in

v1

latestOpenAPI 3.0.0Proprietary - Commercial Use Only2026-08-06172139621.6 KB
Findings

List all web security data of a company.

This is a special analysis of the company’s main website. The findings are collected from the SSL/TLS Strength, Patch Management, Application Security, Web Ranking and Brand Monitoring sub-categories. This category has 6% effect on total scan score.<br/><br/> For storage optimization, the system <b>permanently</b> deletes all findings that haven't been detected by the Black Kite scanner for over a year. Findings with manually changed statuses or associated tickets are excluded.

get/api/v2/companies/{id}/findings/websitesecurity

Path parameters

idinteger required

The id of the target company.

Query parameters

page_numberinteger
Example:1

The number of the page requested.

page_size10 | 20 | 30 | 50 | 100 | 250
Example:10

The number of result items in a single response.

Response

Success

Domainstring

The domain which this finding is related.

Performancenumber nullable

Score representing the performance of the web site. Individual findings can be fetched by accessing WebRanking endpoint's GooglePageSpeedInsightsPerformanceFindings property.

SecurityHeadersnumber nullable

Score representing the security HTTP headers of the web site. Individual findings can be fetched by accessing the SecurityHeaderRelatedControlIds list.

SecurityHeaderRelatedControlIdsstring[]

ApplicationSecurity security control ids related to Security Headers.

PossibleVulnerabilitiesRelatedControlIdsstring[]

ApplicationSecurity security control ids related to Possible Vulnerabilities.

PatchLevelnumber nullable

Score representing the patch level of the web site. Individual findings can be fetched by accessing PatchManagement endpoint.

CodeQualitynumber nullable

Score representing the code quality of the web site. Individual findings can be fetched by accessing CodeQualityFindings list.

SslTlsStrengthnumber nullable

Score representing the SSL/TLS strength of the web site. Individual findings can be fetched by accessing SSL/TLS Strength endpoint.

LatestScreenshotUrlstring

The latest screenshot of the website.

CodeQualityControlIdstring

The unique identifier of the control that this finding relates to.

Example response

[
  {
    "Domain": "acmeinc.com",
    "SecurityHeaderRelatedControlIds": [
      "APPSEC-001"
    ],
    "PossibleVulnerabilitiesRelatedControlIds": [
      "APPSEC-026"
    ],
    "LatestScreenshotUrl": "https://image.normshield.com/api/v1/ss?f=2021_08_07_d3773a9111df11202380b7663594.png",
    "CodeQualityControlId": "FRADOM-001",
    "CodeQualityFindings": [
      {
        "Title": "Error : The character encoding was not declared. Proceeding using windows-1252.",
        "Location": "At line 16, column 76",
        "Code": "type=c\"text/css<b>\"</b> /&gt;<span class=\"lf\" title=\"Line break\">↩</span>&lt;link href"
      }
    ]
  }
]