---
title: "List all the subdomains that are located under the company."
method: GET
path: "/api/v2/companies/{id}/subdomains"
tags: ["Company Digital Footprint"]
---

# List all the subdomains that are located under the company.

`GET /api/v2/companies/{id}/subdomains`

List all the subdomains that are located under this company. Not all domains defined under a company is scanned. For example subdomains with status Inactive are not scanned.

## Path parameters

- `id` integer, required

## Query parameters

- `page_number` integer
- `page_size` 10 | 20 | 30 | 50 | 100 | 250
- `status` 'active' | 'inactive'
- `query` string
- `start_date` string, date-time
- `end_date` string, date-time

## Response `200`

Success

- Subdomain[]
  - `DomainId` integer — The identifier of the domain that this subdomain belongs to.
  - `Domain` string — The domain value that this subdomain belongs to.
  - `Subdomain` string — The subdomain value itself.
  - `IPAddresses` string[], nullable — When null, the subdomain is classified as dormant, that is, it will not be included in the security scans and won't affect the security risk scores.
  - `StatusCode` string, nullable — HTTP status code for the request sent to the subdomain. null or N/A means no response to the HTTP requests.
  - `Title` string, nullable — The title of the web page associated with the subdomain (if any). Parsed from other sources, so output validation might be a good idea when rendering.
  - `HasSslTlsSupport` boolean — True if an SSL/TLS is supported on the subdomain.
  - `SslTlsSecurity` SslTlsSecurity — SSL/TLS security information including cipher suites, protocols, and security features for the subdomain.
    - `PassedCipherSuites` string[] — List of cipher suites that passed security validation and are considered secure
    - `FailedCipherSuites` string[] — List of cipher suites that failed security validation due to known vulnerabilities or weak encryption
    - `PassedProtocols` string[] — List of SSL/TLS protocol versions that passed security checks and are considered safe
    - `FailedProtocols` string[] — List of SSL/TLS protocol versions that failed security checks due to known vulnerabilities
    - `Hsts` boolean — HTTP Strict Transport Security (HSTS) implementation status indicating if the site enforces HTTPS
    - `Pfs` boolean — Perfect Forward Secrecy (PFS) support status indicating if the site uses ephemeral key exchange
  - `IsManuallyAdded` boolean — True if added manually through the API or manually through the portal.
  - `Status` 'Active' | 'Inactive' — Whether the subdomain is active (included) or inactive (excluded) in the security scans' scope. When the subdomain is active, then it is included in the scans. Excluded otherwise. Excluded subdomains won't be scanned, therefore, won't affect the risk scores.
  - `Cpes` string[] — A list of related CPEs.
  - `Products` string[] — A list of product names.
  - `IsSaas` boolean — True if subdomain is associated with a Software-as-Service (SaaS) application.
  - `DiscoveredDate` string, date-time — The date when Black Kite discovered the subdomain.
  - `LastUpdateDate` string, date-time — The date when Black Kite last updated the subdomain.

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `404` — Not Found
- `default` — Failure

---

[API](https://skmtc.net/blackkitetech/apis/black-kite-api.md) · [All operations](https://skmtc.net/blackkitetech/apis/black-kite-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/blackkitetech/black-kite-api/versions/7dadaba760fb/schema)