Sign in

v1

latestOpenAPI 3.0.0Proprietary - Commercial Use Only2026-08-06172139621.6 KB
Security Controls

Get the list of security controls.

Get the list of security controls listed on the Black Kite system.

get/api/v2/securitycontrols

Query parameters

page_numberinteger
Example:1

The number of the page requested.

page_size10 | 20 | 30
Example:10

The number of result items in a single response.

Response

Success

Idstring required

The unique identifier of this security control.

Namestring

The name of the security control.

Categorystring

The long name of the security control's category.

Titlestring

The title of the security control.

Severity'Info' | 'Low' | 'Medium' | 'High' | 'Critical'

The severity of a finding of this security control.

Descriptionstring

The description of the security control.

Mitigationstring

The remediation of the security control.

CwssScorenumber float

The Common Weakness Scoring System score of each finding in the category.

ReferencesFindingReference[]
Mitrestring[]

Example response

[
  {
    "Id": "APPSEC-016",
    "Name": "SMTP IMAP/IMAP(SSL) Connection Test",
    "Category": "Application Security",
    "Title": "Weak Cipher Suite Support",
    "Severity": "Medium",
    "Description": "The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols have a birthday bound of approximately four billion blocks. This makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session. Not only DES, but Blowfish ( having a block size of 64 bits ) in SSH is also vulnerable to a practical collision attack when used in CBC mode.",
    "Mitigation": "Follow the advice from Mozilla, and their Configuration generator given below. \n https://wiki.mozilla.org/Security/Server_Side_TLS \n Disable block ciphers smaller than 64 bits in SSH such as DES, 3DES, Blowfish.",
    "References": [
      "https://capec.mitre.org/data/definitions/44.html"
    ],
    "Mitre": [
      "ATT&CK T1102.001"
    ],
    "Fips199": {
      "Confidentiality": "Low (1)",
      "Integrity": "Low (1)",
      "Availability": "Low (1)"
    },
    "Fisma": {
      "Area": "Protect",
      "MinMaturityModel": "Level 3: Consistently Implemented"
    },
    "Nist80053": {
      "Control": "CP-11 ALTERNATE COMMUNICATIONS PROTOCOLS",
      "Control Family": "CP - Contingency Planning",
      "Priority": "P1",
      "Baseline Allocation": "Moderate"
    }
  }
]