openapi: 3.2.0 info: title: ASI internal service Asset API description: Attack surface intelligence service version: 0.0.1 servers: - url: https://api.securityscorecard.io security: - Token: [] tags: - name: Asset description: asset behind the IP address paths: /asi/details/asset/{asset}/port/{port}: get: tags: - Asset parameters: - in: path name: asset required: true schema: type: string description: '' - in: path name: port required: true schema: type: integer description: '' responses: '200': description: Port Details content: application/json: schema: $ref: '#/components/schemas/getAsiAssetPortResponse' summary: Attack Surface Intelligence API Asset Port Details operationId: getAsiDetailsAssetByAssetPortByPort x-operation-id-source: derived /asi/details/asset/{ip}: get: tags: - Asset parameters: - in: path name: ip required: true example: 123.1.44.21 schema: type: string description: '' responses: '200': description: IP Full Details content: application/json: schema: $ref: '#/components/schemas/getAsiAssetIpResponse' summary: Attack Surface Intelligence API Asset IP Details operationId: getAsiDetailsAssetByIp x-operation-id-source: derived components: schemas: getAsiAssetPortResponse: type: object properties: title: type: string description: UI Title port: type: number description: Port number service: type: string description: Service found on this port product: type: string description: Product detected on this port version: type: string description: Product version detected scripts: type: string description: Output of the scripts scanning this port firstSeen: type: string description: First time this port was detected lastSeen: type: string description: Last time the port seen opened device: type: string description: Device type detected os: type: string description: Operating system detected cpe: type: array description: CPEs strings associated with this port items: type: string getAsiAssetIpResponse: type: object additionalProperties: false properties: location: type: object properties: hostname: type: string country_name: type: string description: Country country_code: type: string description: Country Code city_name: type: string description: City cloud: type: string description: Cloud provider region: type: string description: Cloud region cidr: type: string description: CIDR attribution: type: object properties: companies: type: array description: List of companies attributed to this asset items: type: object properties: company: type: string description: Company name domain: type: string description: domain scorecard: type: string description: Scorecard id score: type: number description: SSC score industry: type: string description: industry libraries: type: number description: Libraries Count malrep: type: object properties: maliciousReputation: type: array items: type: object properties: info: type: string description: Name of malicious reputation last_seen: type: string description: Last time observed ports: type: object properties: ports: type: array description: list of open ports in the asset items: type: object properties: last_seen: type: string description: scan time port: type: string description: port number product: type: string description: product running on the port service: type: string description: service detected on port device_type: type: string description: Device type os_type: type: string description: Os type cep: type: array description: CPEs items: type: string ransomware: type: object properties: ransomwareList: type: array description: Ransomware list items: type: object properties: name: type: string description: Ransomware name victim_name: type: string description: Victim name victim_posted_domain: type: string description: Domain associated to victim last_seen: type: string description: Time when ransomware was detected threat_actors: type: object properties: actors: type: array description: Threat actors associated to this asset items: type: object properties: actor: type: string description: Threat Actor name origin: type: string description: Origin link_type: type: string description: link type (cve, malware... etc) link: type: string description: Vulnerabilities associated to this threat actor last_seen: type: string description: Last detection certs: type: object properties: certificates: type: array items: type: object properties: hash: type: string description: Certificate Hash status: type: string description: Certificate Status domain: type: string description: Domain associated cves: type: object properties: cves: type: array description: List of CVEs items: type: object properties: cvss: type: number description: CVSS score cve: type: string description: CVE id maturity: type: string description: Exploit Maturity actor: type: string description: Threat actors using this CVE port: type: number description: Port associated with the CVE last_seen: type: string description: Last detection time infections: type: object properties: activeInfections: type: array items: type: object properties: family: type: string description: Infection family category: type: string description: Infection category last_seen: type: string description: Last time observed securitySchemes: Token: type: apiKey in: header name: Authorization description: "SecurityScorecard API endpoints require an authentication token to be passed\nin an authorization header in order to return data. If you do not already\nhave a token, you can create one by going to the API Access area in your\n[Settings page](https://platform.securityscorecard.io/#/settings/api) and then\nclicking Generate New Token. Please note this tokens have no expiration\nso they can be used until manually revoked. If you have a token and generate\na new one, the previous token will be revoked and can no longer be used.\n\nAdministrators can also revoke API tokens for any user in their account.\n\nOnce you have your token you can pass it in using the `Authorization` http header like this:\n\n```\ncurl -X GET \\\n https://api.securityscorecard.io/portfolios \\\n -H 'authorization: Token '\n```\n" x-provenance: method: searched source: https://securityscorecard.readme.io/reference harvested: '2026-10-14' tool: harvest-readme-openapi.py note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored. assembled_from: - https://securityscorecard.readme.io/reference/get_asi-details-active-infections-family.md - https://securityscorecard.readme.io/reference/get_asi-details-asset-asset-port-port.md - https://securityscorecard.readme.io/reference/get_asi-details-asset-ip.md - https://securityscorecard.readme.io/reference/get_asi-details-cve-cve.md - https://securityscorecard.readme.io/reference/get_asi-details-cve-domain-domain.md - https://securityscorecard.readme.io/reference/get_asi-details-ransomware-ransomware.md - https://securityscorecard.readme.io/reference/get_asi-details-threat-actor-threatactor.md - https://securityscorecard.readme.io/reference/post_asi-facets.md - https://securityscorecard.readme.io/reference/post_asi-search.md merge: pages: 9 deduped: 8 conflicts_kept_first: 0