Sign in

v1

latestOpenAPI 3.1.0Apache 2.02026-07-245981,1853.0 MB
Threats

Update Threats

Use this API to update the attributes of threats in the Threat Library.

🗒 Things to Know

put/api/controls/v2/threats

Request body

orgGroupIdstring uuid required

Organization Group Identifier of Threat.

identifierstring required

String Identifier of Threat.

namestring required

Threat Name.

descriptionstring

Description of the Threat.

status'Active' | 'Pending' | 'Archived'

Threat Status.

idstring uuid required

Unique system identifier (UUID) of the threat to update.

attributesobject

Custom attributes associated with this threat, organized as a map of attribute names to their values.

Example request

[
  {
    "orgGroupId": "123e4567-e89b-12d3-a456-426614174000",
    "identifier": "THREAT-2025-001",
    "name": "Data Exfiltration Through Insecure Communication Channels",
    "description": "This threat involves the unauthorized transfer of data from a device or network to an external destination through insecure channels.",
    "framework": {
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "name": "ISO 27001",
      "nameKey": "framework.key.iso"
    },
    "category": {
      "name": "Financial Category",
      "nameKey": "IM.FinancialCategoryName"
    },
    "status": "Active",
    "id": "123e4567-e89b-12d3-a456-426614174000"
  }
]

Response

OK

idstring uuid required

Primary Identifier of Threat.

identifierstring required

String Identifier of Threat.

namestring required

Threat Name.

descriptionstring

Threat Description.

status'Active' | 'Pending' | 'Archived'

Threat Status.

attributesobject

Custom attributes associated with this threat, organized as a map of attribute names to their values.

displayLabelstring

Example response

[
  {
    "id": "123e4567-e89b-12d3-a456-426614174000",
    "identifier": "THREAT-2025-001",
    "name": "Data Exfiltration Through Insecure Communication Channels",
    "description": "This threat involves the unauthorized transfer of data from a device or network to an external destination through insecure channels. Attackers may exploit weak encryption, unpatched vulnerabilities, or misconfigured systems to extract sensitive information.",
    "framework": {
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "name": "ISO 27001",
      "nameKey": "framework.key.iso"
    },
    "category": {
      "name": "Financial Category",
      "nameKey": "IM.FinancialCategoryName"
    },
    "orgGroup": {
      "id": "123e4567-e89b-12d3-a456-426614174000",
      "name": "ABC Corp"
    },
    "status": "Active"
  }
]