slug: tessian
provider: Tessian
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 1
edges:
- tag: Endpoints
  spec_file: tessian-endpoints-api-openapi.yml
  capability_id: BC-620.30
  capability_id_l1: BC-620
  capability_name: Threat Detection & Response Management
  confidence: 0.85
  evidence: GET /api/v1/events 'Security Events'; GET /reporting/anomalies/v1 'Anomalies'; GET /api/v1/risk/company
    'Company Risks'; schemas DefenderEvent, GuardianTrigger, EnforcerTrigger
  reason: The surface exports email-security event, anomaly, trigger and risk data for integration 'with
    SIEMs and other data management tools', which is threat detection and response tooling. Group CRUD
    operations are supporting cohort management rather than a separate capability.