openapi: 3.2.0
info:
  title: ASI internal service Active Infections API
  description: Attack surface intelligence service
  version: 0.0.1
servers:
- url: https://api.securityscorecard.io
security:
- Token: []
tags:
- name: active-infections
  description: Active Infections
paths:
  /asi/details/active-infections/{family}:
    get:
      tags:
      - active-infections
      parameters:
      - in: path
        name: family
        required: true
        schema:
          type: string
        description: ''
      responses:
        '200':
          description: Active Infections Details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/getAsiActiveInfectionFamilyResponse'
      summary: Attack Surface Intelligence API Active Infection Family Details
      operationId: getAsiDetailsActiveInfectionsByFamily
      x-operation-id-source: derived
components:
  schemas:
    getAsiActiveInfectionFamilyResponse:
      type: object
      properties:
        domains:
          type: array
          items:
            type: object
            properties:
              name:
                type: string
              quantityOfIps:
                type: number
        quantityOfRequests:
          type: number
        family:
          type: string
        title:
          type: string
        category:
          type: string
        observed:
          type: string
  securitySchemes:
    Token:
      type: apiKey
      in: header
      name: Authorization
      description: "SecurityScorecard API endpoints require an authentication token to be passed\nin an authorization header in order to return data. If you do not already\nhave a token, you can create one by going to the API Access area in your\n[Settings page](https://platform.securityscorecard.io/#/settings/api) and then\nclicking Generate New Token. Please note this tokens have no expiration\nso they can be used until manually revoked. If you have a token and generate\na new one, the previous token will be revoked and can no longer be used.\n\nAdministrators can also revoke API tokens for any user in their account.\n\nOnce you have your token you can pass it in using the `Authorization` http header like this:\n\n```\ncurl -X GET \\\n  https://api.securityscorecard.io/portfolios \\\n  -H 'authorization: Token <your token>'\n```\n"
x-provenance:
  method: searched
  source: https://securityscorecard.readme.io/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://securityscorecard.readme.io/reference/get_asi-details-active-infections-family.md
  - https://securityscorecard.readme.io/reference/get_asi-details-asset-asset-port-port.md
  - https://securityscorecard.readme.io/reference/get_asi-details-asset-ip.md
  - https://securityscorecard.readme.io/reference/get_asi-details-cve-cve.md
  - https://securityscorecard.readme.io/reference/get_asi-details-cve-domain-domain.md
  - https://securityscorecard.readme.io/reference/get_asi-details-ransomware-ransomware.md
  - https://securityscorecard.readme.io/reference/get_asi-details-threat-actor-threatactor.md
  - https://securityscorecard.readme.io/reference/post_asi-facets.md
  - https://securityscorecard.readme.io/reference/post_asi-search.md
  merge:
    pages: 9
    deduped: 8
    conflicts_kept_first: 0