v1

latestOpenAPI 3.1.12026-07-242899061.7 MB
Target Of Evaluation TOE

This resource returns a collection of `TOE` objects mapped to a customer.

This API retrieves a collection of TOE objects mapped to a customer. This include overall ratings and some domain rating information for the current analysis of the provided TOE id. As a TOE can have multiple internal IDs, this API filters if the internal ID is one among the multiple internal IDs.

get/v1/toes

Query parameters

internal_id[]string[]

This parameter filters results by internal_id. A TOE can actually have multiple internal_ids so it will filter if the given internal_id is one of them (if there are multiple).

[
  "12345"
]
last_retrievedstring
Example:2020-11-20

Filter results published or updated after the provided date string in format YYYY-MM-DD. An example request would like like ?last_retrieved=2020-11-20 and this would grab results updated on or after 2020-11-20.

Response

OK

web_encryption_ratingnumber

The numeric rating for given security_domain.

web_app_security_ratingnumber

The numeric rating for given security_domain.

toe_short_namestring

The Company or entity name.

toe_idstring uuid

The unique identifier for the Target Of Evaluation (TOE).

threat_intell_ratingnumber

The numeric rating for given security_domain.

system_hosting_ratingnumber

The numeric rating for given security_domain.

subscription_levelstring

The subscription level for the TOE.

software_patching_ratingnumber

The numeric rating for given security_domain.

seed_hostnamesstring[]

The seed hostnames are the hostnames used to start the scan. This doesn't include all hostnames from the scan results

rating_v2string

The overall rating for the most recent analysis for the TOE.

rating_numericnumber

The overall numeric rating for the most recent analysis for the TOE.

ratingstring

The legacy overall rating for the most recent analysis for the TOE.

network_filtering_ratingnumber

The numeric rating for given security_domain.

internal_namestring[] nullable

The user defined names for the TOE.

internal_idstring[] nullable

The user defined identifiers for the TOE. These can be used to query the TOE.

governance_ratingnumber

The numeric rating for given security_domain.

email_security_ratingnumber

The numeric rating for given security_domain.

duns_numbersstring[]

The DUNS number for the TOE. This may or may not be populated.

dns_security_ratingnumber

The numeric rating for given security_domain.

defensibility_ratingnumber

The numeric rating for given security_domain.

data_loss_ratingnumber

The numeric rating for given security_domain.

analysis_typestring

Is this TOE setup for a one_time or continuous scan?

analysis_tsstring

The date the analysis was updated.

analysis_idstring

The unique identifier for analysis.

Example response

[
  {
    "web_encryption_rating": 1,
    "web_app_security_rating": 1,
    "toe_short_name": "Riskrecon, CO.",
    "toe_id": "5976423a-ee35-11e3-8569-14109ff1a304",
    "ticker_symbols": [
      {
        "ticker_symbol": "0023.HK",
        "exchange_name": "NYSE"
      }
    ],
    "threat_intell_rating": 1,
    "system_hosting_rating": 1,
    "subscription_level": "3",
    "software_patching_rating": 1,
    "seed_hostnames": [
      "riskrecon.com"
    ],
    "risk_configurations": [
      {
        "risk_relationship": "Own Enterprise",
        "inherent_risk": "Critical"
      }
    ],
    "rating_v2": "b",
    "rating_numeric": 1,
    "rating": "fix",
    "network_filtering_rating": 1,
    "internal_name": [
      "Riskrecon"
    ],
    "internal_id": [
      "1234"
    ],
    "governance_rating": 1,
    "email_security_rating": 1,
    "duns_numbers": [
      "12345"
    ],
    "dns_security_rating": 1,
    "defensibility_rating": 1,
    "data_loss_rating": 1,
    "analysis_type": "continuous",
    "analysis_ts": "2021-10-01T22:18:57+00:00",
    "analysis_id": "12345"
  }
]