aid: resilience-cyber url: https://raw.githubusercontent.com/api-evangelist/resilience-cyber/refs/heads/main/apis.yml name: Resilience kind: company description: >- Resilience is a United States cyber-risk company that underwrites cyber insurance and technology errors-and-omissions coverage while running the security analytics and claims service around it. Founded in 2016 by operators out of US military and intelligence backgrounds and headquartered in San Francisco, it distributes through brokers rather than direct-to-consumer, and positions itself as a specialty cyber carrier whose underwriting is fed by its own risk model — the Threatonomics Risk Graph — plus a 24/7 in-house Risk Operations Center and claims/incident-response team. Product lines are cyber insurance, technology E&O, claims and incident response, security investment prioritization, and multi-entity/portfolio risk, sold in the US and in UK, Canadian, German, French, Italian and Spanish locales. Its API posture is partner-gated and honest to record as such: there is no developer portal, no public API reference, no downloadable OpenAPI, and no public Postman collection anywhere on cyberresilience.com. The only machine-facing surface is portal.cyberresilience.com, a client and broker application that 302-redirects to an Auth0 tenant at auth.cyberresilience.com requesting an access token for the private audience https://api.prod.resilienceinsurance.app — an internal product API, not a published one. No ACORD, AL3, ACORD XML, NGDS, IVANS, Applied Epic or Vertafore reference appears anywhere on the public site, which is itself a finding for a US specialty carrier: this is a direct-underwriting, broker-relationship distribution model rather than an agency-download one. image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg tags: - Insurance - United States - Cyber Insurance - Property and Casualty - Insurtech - Underwriting - Claims - Risk Data - Technology Errors and Omissions - Broker - Specialty Insurance created: '2026-07-25' modified: '2026-07-25' specificationVersion: '0.19' apis: - name: Resilience Identity (Auth0 Authorization Server) description: >- The only publicly documented, machine-readable surface Resilience operates. portal.cyberresilience.com — the gated client and broker application — redirects through /v2/api/auth/login to an Auth0 tenant at auth.cyberresilience.com, which serves OpenID Connect Discovery 1.0 and RFC 8414 OAuth 2.0 Authorization Server Metadata anonymously, along with a JWKS. The tenant issues authorization-code + PKCE (S256) tokens for the private audience https://api.prod.resilienceinsurance.app and advertises client_credentials, device code, token exchange, JWT bearer, CIBA backchannel authentication, backchannel logout and DPoP (ES256). This is an identity surface, not a product API: the audience it names is an internal product API that 404s every discovery path anonymously, there is no self-serve client registration, and access requires an appointed-broker or policyholder relationship. It is catalogued because it is real, anonymous and machine-readable — and because it marks the honest boundary of what Resilience publishes. humanURL: https://portal.cyberresilience.com/ baseURL: https://auth.cyberresilience.com tags: - Authentication - OpenID Connect - OAuth 2.0 - Identity - Insurance properties: - type: OpenIDConnect url: https://auth.cyberresilience.com/.well-known/openid-configuration - type: WellKnown url: well-known/resilience-cyber-well-known.yml - type: Authentication url: authentication/resilience-cyber-authentication.yml - type: OAuthScopes url: scopes/resilience-cyber-scopes.yml common: - type: DomainSecurity url: security/resilience-cyber-domain-security.yml - type: Website url: https://cyberresilience.com/ - type: Blog url: https://cyberresilience.com/blog/ - type: BlogRSS url: https://cyberresilience.com/?feed=rss2 - type: TrustCenter url: https://trust.cyberresilience.com/ - type: TrustCenter url: security/resilience-cyber-trust-center.yml - type: Compliance url: https://trust.cyberresilience.com/ - type: SignUp url: https://portal.cyberresilience.com/ - type: Authentication url: https://auth.cyberresilience.com/.well-known/openid-configuration - type: Authentication url: authentication/resilience-cyber-authentication.yml - type: OAuthScopes url: scopes/resilience-cyber-scopes.yml - type: WellKnown url: well-known/resilience-cyber-well-known.yml - type: Conformance url: conformance/resilience-cyber-conformance.yml - type: LLMsTxt url: llms/resilience-cyber-llms.txt - type: Support url: https://cyberresilience.com/contact-us/ - type: TermsOfService url: https://cyberresilience.com/terms-and-conditions/ - type: PrivacyPolicy url: https://cyberresilience.com/privacy-policy/ - type: Demo url: https://cyberresilience.com/request-demo - type: Press url: https://cyberresilience.com/newsroom/press-releases/ - type: CaseStudies url: https://cyberresilience.com/resources/case-studies/ - type: Research url: https://cyberresilience.com/resources/industry-reports/ - type: About url: https://cyberresilience.com/about-us/ - type: Leadership url: https://cyberresilience.com/leadership/ - type: LinkedIn url: https://www.linkedin.com/company/resilience-cyber/ - type: Twitter url: https://x.com/ResilienceSays - type: YouTube url: https://www.youtube.com/@Cyber.Resilience - type: ContactForm url: https://cyberresilience.com/contact-us/ - type: Careers url: https://job-boards.greenhouse.io/resilience - type: Partners url: https://cyberresilience.com/brokers/ maintainers: - FN: Kin Lane email: kin@apievangelist.com