CloudGuard

CloudGuard Risk Management API

Effective Risk Management - DSPM account registration, custom rulesets, the security graph query surface and toxic-combination evidence paths. 67 operations across 49 paths.

GitHub OpenAPI

Operations 67

POST /v2/erm/businesspriority/add-rule Add Rule #
PUT /v2/erm/businesspriority/update-rule Update Rule #
DELETE /v2/erm/businesspriority/delete-rule Delete Rule #
GET /v2/erm/businesspriority/get-rules Get Rules #
POST /v2/erm/ruleset/set-custom-ruleset Set #
GET /v2/erm/ruleset/get-custom-ruleset Get #
DELETE /v2/erm/ruleset/remove-custom-ruleset Remove #
DELETE /v2/erm/ruleset/remove-all-custom-rulesets Remove All #
GET /v2/erm/dspm/sentra-account Get Sentra Accounts #
POST /v2/erm/dspm/sentra-account Add Sentra Account #
GET /v2/erm/dspm/sentra-account/{id} Get Sentra Account #
PUT /v2/erm/dspm/sentra-account/{id} Update Sentra Account #
DELETE /v2/erm/dspm/sentra-account/{id} Delete Sentra Account #
GET /v2/erm/dspm/cyera-account Get Cyera Accounts #
POST /v2/erm/dspm/cyera-account Add Cyera Account #
GET /v2/erm/dspm/cyera-account/{id} Get Cyera Account #
PUT /v2/erm/dspm/cyera-account/{id} Update Cyera Account #
DELETE /v2/erm/dspm/cyera-account/{id} Delete Cyera Account #
POST /v2/erm/groups/risk-data Get Groups Risk Data #
POST /v2/erm/remediation/top-actions Get Top Remediation Actions #
GET /v2/erm/asset-types/supported-types Get #
POST /v2/erm/waf/stats Get Stats #
GET /v2/security-graph/entity-types Get All #
GET /v2/security-graph/evidence-path Get #
GET /v2/security-graph/exclusions/{id} Get #
DELETE /v2/security-graph/exclusions/{id} Delete #
PUT /v2/security-graph/exclusions/{id} Update #
GET /v2/security-graph/exclusions Get All #
POST /v2/security-graph/exclusions Insert #
GET /v2/security-graph/ignore-cves/{id} Get #
DELETE /v2/security-graph/ignore-cves/{id} Delete #
PUT /v2/security-graph/ignore-cves/{id} Update #
GET /v2/security-graph/ignore-cves Get All #
POST /v2/security-graph/ignore-cves Insert #
GET /v2/security-graph/ignore-malwares/{id} Get #
DELETE /v2/security-graph/ignore-malwares/{id} Delete #
PUT /v2/security-graph/ignore-malwares/{id} Update #
GET /v2/security-graph/ignore-malwares Get All #
POST /v2/security-graph/ignore-malwares Insert #
GET /v2/security-graph/issues/vulnerabilities Get Vulnerabilities #
GET /v2/security-graph/issues/iam-sensitivity Get Iam Sensitivity #
GET /v2/security-graph/issues/main-entities Get Main Entities #
GET /v2/security-graph/issues/security-event Get Security Events #
GET /v2/security-graph/issues/data-sensitivity Get Data Sensitivity #
GET /v2/security-graph/issues/container-images Get Container Images #
GET /v2/security-graph/issues/malware Get Malware #
GET /v2/security-graph/issues/enrichment-categories Get Enrichment Categories #
GET /v2/security-graph/rules/{id} Get #
GET /v2/security-graph/rules/query/{id} Get Query #
GET /v2/security-graph/rules Get All #
POST /v2/security-graph/query Execute Toxic Combination Query #
POST /v2/security-graph/query/evidence-path/{queryRunRequestId} Execute Toxic Combination Evidence Query #
GET /v2/security-graph/query/evidence-path/sync/{queryRunRequestId}/{srl} Get Toxic Combination Evidence Sync #
GET /v2/security-graph/query/evidence-path/{requestId} Get Toxic Combination Evidence #
POST /v2/security-graph/query/sync Execute Toxic Combination Query Sync #
GET /v2/security-graph/query/{requestId} Get Toxic Combination Entity Srls #
GET /v2/security-graph/entity-schema Get Entity Schema #
GET /v2/findings/{id} Get Finding #
POST /v2/findings/search Search #
POST /v2/findings/group Group #
POST /v2/findings/search-adv Search Adv #
POST /v2/findings/group-adv Group Adv #
GET /v2/findings-policies Get All #
POST /v2/findings-policies Create Findings Policy #
GET /v2/findings-policies/{id} Get Single #
PUT /v2/findings-policies/{id} Update Findings Policy #
DELETE /v2/findings-policies/{id} Delete Findings Policy #

Documentation

📖
Documentation
https://docs.cgn.portal.checkpoint.com/reference
📖
APIReference
https://docs.cgn.portal.checkpoint.com/reference/introduction
📖
Authentication
https://docs.cgn.portal.checkpoint.com/reference/authentication

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/openapi/cloudguard-risk-management-openapi.yml

Other Resources

🔗
Overlay
https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/overlays/cloudguard-risk-management-overlay.yaml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/cloudguard-policies-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cloudguard-risk-management-openapi.yml Raw ↑ 
info:
  title: Risk Management
  version: v2
openapi: 3.0.0
servers:
- url: https://api.dome9.com/
  description: US region
- url: https://api.{region}.dome9.com/
  description: Other regions
  variables:
    region:
      enum:
      - eu1
      - ap1
      - ap2
      - ap3
      - cace1
      default: eu1
paths:
  /v2/erm/businesspriority/add-rule:
    post:
      tags:
      - Business Priority Modifier
      summary: Add Rule
      operationId: BusinessPriorityModifier_AddRule_post_/v2/erm/businesspriority/add-rule
      requestBody:
        x-name: addRule
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BusinessPriorityModifierAddRuleRequestViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Create a new Business Priority rule
  /v2/erm/businesspriority/update-rule:
    put:
      tags:
      - Business Priority Modifier
      summary: Update Rule
      operationId: BusinessPriorityModifier_UpdateRule_put_/v2/erm/businesspriority/update-rule
      requestBody:
        x-name: rule
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BusinessPriorityModifierUpdateRuleRequestViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Update an existing Business Priority rule
  /v2/erm/businesspriority/delete-rule:
    delete:
      tags:
      - Business Priority Modifier
      summary: Delete Rule
      operationId: BusinessPriorityModifier_DeleteRule_delete_/v2/erm/businesspriority/delete-rule
      parameters:
      - name: id
        in: query
        description: The rule ID to delete
        schema:
          type: string
          format: guid
        x-position: 1
      responses:
        '200':
          description: ''
      description: Delete an existing Business Priority rule
  /v2/erm/businesspriority/get-rules:
    get:
      tags:
      - Business Priority Modifier
      summary: Get Rules
      operationId: BusinessPriorityModifier_GetRules_get_/v2/erm/businesspriority/get-rules
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Get all configured Business Priority rules
  /v2/erm/ruleset/set-custom-ruleset:
    post:
      tags:
      - Custom Ruleset
      summary: Set
      operationId: CustomRuleset_Set_post_/v2/erm/ruleset/set-custom-ruleset
      requestBody:
        x-name: customRulesetSetRequestViewModel
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CustomRulesetSetRequestViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
      description: Define platform specific ruleset for Risk Managemnet (Currently one ruleset per platform is supported)
  /v2/erm/ruleset/get-custom-ruleset:
    get:
      tags:
      - Custom Ruleset
      summary: Get
      operationId: CustomRuleset_Get_get_/v2/erm/ruleset/get-custom-ruleset
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Get all configured rulesets for Risk Managemnet
  /v2/erm/ruleset/remove-custom-ruleset:
    delete:
      tags:
      - Custom Ruleset
      summary: Remove
      operationId: CustomRuleset_Remove_delete_/v2/erm/ruleset/remove-custom-ruleset
      requestBody:
        x-name: customRulesetRemoveRequestViewModel
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CustomRulesetRemoveRequestViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
      description: Delete platform specific ruleset from Risk Managemnet
  /v2/erm/ruleset/remove-all-custom-rulesets:
    delete:
      tags:
      - Custom Ruleset
      summary: Remove All
      operationId: CustomRuleset_RemoveAll_delete_/v2/erm/ruleset/remove-all-custom-rulesets
      requestBody:
        x-name: customRulesetRemoveRequestViewModel
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CustomRulesetRemoveRequestViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
      description: Delete all platform specific rulesets from Risk Managemnet (Currently one ruleset per platform is supported)
  /v2/erm/dspm/sentra-account:
    get:
      tags:
      - Dspm
      summary: Get Sentra Accounts
      operationId: Dspm_GetSentraAccounts_get_/v2/erm/dspm/sentra-account
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SentraGetAllResponseViewModel'
      description: Retrieves all the Sentra accounts associated with the current account
    post:
      tags:
      - Dspm
      summary: Add Sentra Account
      operationId: Dspm_AddSentraAccount_post_/v2/erm/dspm/sentra-account
      requestBody:
        x-name: sentraCreateRequestViewModel
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SentraCreateRequestViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SentraCreateResponseViewModel'
      description: Adds a new Sentra account
  /v2/erm/dspm/sentra-account/{id}:
    get:
      tags:
      - Dspm
      summary: Get Sentra Account
      operationId: Dspm_GetSentraAccount_get_/v2/erm/dspm/sentra-account/{id}
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          format: guid
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SentraAccountResponseViewModel'
      description: Retrieves a specific Sentra account by id
    put:
      tags:
      - Dspm
      summary: Update Sentra Account
      operationId: Dspm_UpdateSentraAccount_put_/v2/erm/dspm/sentra-account/{id}
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          format: guid
        x-position: 1
      requestBody:
        x-name: sentraUpdateRequestViewModel
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SentraUpdateRequestViewModel'
        required: true
        x-position: 2
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Updates credentials in Sentra account
    delete:
      tags:
      - Dspm
      summary: Delete Sentra Account
      operationId: Dspm_DeleteSentraAccount_delete_/v2/erm/dspm/sentra-account/{id}
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          format: guid
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Deletes a Sentra account by id
  /v2/erm/dspm/cyera-account:
    get:
      tags:
      - Dspm
      summary: Get Cyera Accounts
      operationId: Dspm_GetCyeraAccounts_get_/v2/erm/dspm/cyera-account
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CyeraGetAllResponseViewModel'
      description: Retrieves all the Cyera accounts associated with the current account
    post:
      tags:
      - Dspm
      summary: Add Cyera Account
      operationId: Dspm_AddCyeraAccount_post_/v2/erm/dspm/cyera-account
      requestBody:
        x-name: cyeraCreateRequestViewModel
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CyeraCreateAccountRequestViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CyeraCreateRessponseViewModel'
      description: Adds a new Cyera account
  /v2/erm/dspm/cyera-account/{id}:
    get:
      tags:
      - Dspm
      summary: Get Cyera Account
      operationId: Dspm_GetCyeraAccount_get_/v2/erm/dspm/cyera-account/{id}
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          format: guid
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CyeraAccountResponseViewModel'
      description: Retrieves a specific Cyera account by id
    put:
      tags:
      - Dspm
      summary: Update Cyera Account
      operationId: Dspm_UpdateCyeraAccount_put_/v2/erm/dspm/cyera-account/{id}
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          format: guid
        x-position: 1
      requestBody:
        x-name: cyeraUpdateRequestViewModel
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CyeraUpdateAccountRequestViewModel'
        required: true
        x-position: 2
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Updates credentials in Cyera account
    delete:
      tags:
      - Dspm
      summary: Delete Cyera Account
      operationId: Dspm_DeleteCyeraAccount_delete_/v2/erm/dspm/cyera-account/{id}
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
          format: guid
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Deletes a Cyera account by id
  /v2/erm/groups/risk-data:
    post:
      tags:
      - Group Risk Management
      summary: Get Groups Risk Data
      operationId: GroupRiskManagement_GetGroupsRiskData_post_/v2/erm/groups/risk-data
      requestBody:
        x-name: request
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GetGroupsRiskRequestViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: 'List groups risk data by Group Type. Risk Data includes Risk Score and Level and the distribution of the
        risk level among the group''s assets.

        The list is ordered descending by the group Risk Score'
  /v2/erm/remediation/top-actions:
    post:
      tags:
      - Remediation Actions
      summary: Get Top Remediation Actions
      operationId: RemediationActions_GetTopRemediationActions_post_/v2/erm/remediation/top-actions
      requestBody:
        x-name: requestViewModel
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RemediationActionsRequestViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Get top X remediation actions of an asset ordered by severity and remediation type
  /v2/erm/asset-types/supported-types:
    get:
      tags:
      - Risk Modifiers
      summary: Get
      operationId: RiskModifiers_Get_get_/v2/erm/asset-types/supported-types
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Get all supported assets per risk modifiers
  /v2/erm/waf/stats:
    post:
      tags:
      - Waf
      summary: Get Stats
      operationId: Waf_GetStats_post_/v2/erm/waf/stats
      requestBody:
        x-name: filter
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/StatsFilterViewModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: ''
          content:
            application/octet-stream:
              schema:
                type: string
                format: binary
      description: Get statistics of Cloud Guard WAF coverage and risk distribution of publicly exposed assets
  /v2/security-graph/entity-types:
    get:
      operationId: EntityTypesController_getAll_get_/v2/security-graph/entity-types
      summary: Get All
      parameters: []
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/EntityTypePlatformViewModel'
      tags:
      - Entity Types
      description: Get all supported entity types with the supported platform
  /v2/security-graph/evidence-path:
    get:
      operationId: EvidencePathController_get_get_/v2/security-graph/evidence-path
      summary: Get
      parameters:
      - name: findingId
        required: true
        in: query
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EvidencePathViewModel'
      tags:
      - Evidence Path
      description: Get the evidence path for a given findingId
  /v2/security-graph/exclusions/{id}:
    get:
      operationId: ExclusionController_get_get_/v2/security-graph/exclusions/{id}
      summary: Get
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityGraphExclusionViewModel'
      tags:
      - Exclusions
      description: Get an exclusion by ID
    delete:
      operationId: ExclusionController_delete_delete_/v2/security-graph/exclusions/{id}
      summary: Delete
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        '204':
          description: ''
      tags:
      - Exclusions
      description: Delete an exclusion by ID
    put:
      operationId: ExclusionController_update_put_/v2/security-graph/exclusions/{id}
      summary: Update
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SecurityGraphExclusionRequestModel'
      responses:
        '204':
          description: ''
      tags:
      - Exclusions
      description: Update an exclusion by ID
  /v2/security-graph/exclusions:
    get:
      operationId: ExclusionController_getAll_get_/v2/security-graph/exclusions
      summary: Get All
      parameters: []
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SecurityGraphExclusionViewModel'
      tags:
      - Exclusions
      description: Get all exclusions
    post:
      operationId: ExclusionController_insert_post_/v2/security-graph/exclusions
      summary: Insert
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SecurityGraphExclusionRequestModel'
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IdViewModel'
      tags:
      - Exclusions
      description: Insert a new exclusion by ID
  /v2/security-graph/ignore-cves/{id}:
    get:
      operationId: IgnoreCvesController_get_get_/v2/security-graph/ignore-cves/{id}
      summary: Get
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityGraphIgnoreCveViewModel'
      tags:
      - Ignore Cves
      description: Get an ignored CVE by ID
    delete:
      operationId: IgnoreCvesController_delete_delete_/v2/security-graph/ignore-cves/{id}
      summary: Delete
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        '204':
          description: ''
      tags:
      - Ignore Cves
      description: Delete an ignored CVE by ID
    put:
      operationId: IgnoreCvesController_update_put_/v2/security-graph/ignore-cves/{id}
      summary: Update
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SecurityGraphIgnoreCveRequestModel'
      responses:
        '204':
          description: ''
      tags:
      - Ignore Cves
      description: Update an ignored CVE by ID
  /v2/security-graph/ignore-cves:
    get:
      operationId: IgnoreCvesController_getAll_get_/v2/security-graph/ignore-cves
      summary: Get All
      parameters: []
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SecurityGraphIgnoreCveViewModel'
      tags:
      - Ignore Cves
      description: Get all ignored CVEs
    post:
      operationId: IgnoreCvesController_insert_post_/v2/security-graph/ignore-cves
      summary: Insert
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SecurityGraphIgnoreCveRequestModel'
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IdViewModel'
      tags:
      - Ignore Cves
      description: Insert a new ignored CVE by ID
  /v2/security-graph/ignore-malwares/{id}:
    get:
      operationId: IgnoreMalwaresController_get_get_/v2/security-graph/ignore-malwares/{id}
      summary: Get
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityGraphIgnoreMalwareViewModel'
      tags:
      - Ignore Malwares
      description: Get an ignored malware by ID
    delete:
      operationId: IgnoreMalwaresController_delete_delete_/v2/security-graph/ignore-malwares/{id}
      summary: Delete
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        '204':
          description: ''
      tags:
      - Ignore Malwares
      description: Delete an ignored malware by ID
    put:
      operationId: IgnoreMalwaresController_update_put_/v2/security-graph/ignore-malwares/{id}
      summary: Update
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SecurityGraphIgnoreMalwareRequestModel'
      responses:
        '204':
          description: ''
      tags:
      - Ignore Malwares
      description: Update an ignored malware by ID
  /v2/security-graph/ignore-malwares:
    get:
      operationId: IgnoreMalwaresController_getAll_get_/v2/security-graph/ignore-malwares
      summary: Get All
      parameters: []
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SecurityGraphIgnoreMalwareViewModel'
      tags:
      - Ignore Malwares
      description: Get all ignored malwares
    post:
      operationId: IgnoreMalwaresController_insert_post_/v2/security-graph/ignore-malwares
      summary: Insert
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SecurityGraphIgnoreMalwareRequestModel'
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IdViewModel'
      tags:
      - Ignore Malwares
      description: Insert a new ignored malware by ID
  /v2/security-graph/issues/vulnerabilities:
    get:
      operationId: IssueController_getVulnerabilities_get_/v2/security-graph/issues/vulnerabilities
      summary: Get Vulnerabilities
      parameters:
      - name: issueId
        required: true
        in: query
        schema:
          type: string
      - name: srl
        required: true
        in: query
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CveVulnerabilityResponse'
      tags:
      - Security Graph Issues
      description: Get vulnerabilities of an issue's asset
  /v2/security-graph/issues/iam-sensitivity:
    get:
      operationId: IssueController_getIamSensitivity_get_/v2/security-graph/issues/iam-sensitivity
      summary: Get Iam Sensitivity
      parameters:
      - name: issueId
        required: true
        in: query
        schema:
          type: string
      - name: srl
        required: true
        in: query
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/IamSensitivityResponse'
      tags:
      - Security Graph Issues
      description: Get IAM sensitivity of an issue's asset
  /v2/security-graph/issues/main-entities:
    get:
      operationId: IssueController_getMainEntities_get_/v2/security-graph/issues/main-entities
      summary: Get Main Entities
      parameters:
      - name: issueId
        required: true
        in: query
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ProtectedAssetViewModel'
      tags:
      - Security Graph Issues
      description: Get main entities of an issue
  /v2/security-graph/issues/security-event:
    get:
      operationId: IssueController_getSecurityEvents_get_/v2/security-graph/issues/security-event
      summary: Get Security Events
      parameters:
      - name: issueId
        required: true
        in: query
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SecurityEventPartialViewModel'
      tags:
      - Security Graph Issues
      description: Get security events of an issue's asset
  /v2/security-graph/issues/data-sensitivity:
    get:
      operationId: IssueController_getDataSensitivity_get_/v2/security-graph/issues/data-sensitivity
      summary: Get Data Sensitivity
      parameters:
      - name: issueId
        required: true
        in: query
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/DataSensitivityViewModel'
      tags:
      - Security Graph Issues
      description: Get data sensitivity of an issue's asset
  /v2/security-graph/issues/container-images:
    get:
      operationId: IssueController_getContainerImages_get_/v2/security-graph/issues/container-images
      summary: Get Container Images
      parameters:
      - name: issueId
        required: true
        in: query
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ContainerImageIssueViewModel'
      tags:
      - Security Graph Issues
      description: Get container images of an issue's asset
  /v2/security-graph/issues/malware:
    get:
      operationId: IssueController_getMalware_get_/v2/security-graph/issues/malware
      summary: Get Malware
      parameters:
      - name: issueId
        required: true
        in: query
        schema:
          type: string
      - name: srl
        required: true
        in: query
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/MalwareViewModel'
      tags:
      - Security Graph Issues
      description: Get Malware of an issue's asset
  /v2/security-graph/issues/enrichment-categories:
    get:
      operationId: IssueController_getEnrichmentCategories_get_/v2/security-graph/issues/enrichment-categories
      summary: Get Enrichment Categories
      parameters:
      - name: issueId
        required: true
        in: query
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  type: string
      tags:
      - Security Graph Issues
      description: Get all enrichment categories for an issue
  /v2/security-graph/rules/{id}:
    get:
      operationId: RuleController_get_get_/v2/security-graph/rules/{id}
      summary: Get
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityGraphRuleViewModel'
      tags:
      - Rules
      description: Get a rule by ID
  /v2/security-graph/rules/query/{id}:
    get:
      operationId: RuleController_getQuery_get_/v2/security-graph/rules/query/{id}
      summary: Get Query
      parameters:
      - name: id
        required: true
        in: path
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SecurityGraphQueryDefinition'
      tags:
      - Rules
      description: Get a rule query by ID
  /v2/security-graph/rules:
    get:
      operationId: RuleController_getAll_get_/v2/security-graph/rules
      summary: Get All
      parameters:
      - name: ids
        required: true
        in: query
        schema:
          type: array
          items:
            type: string
      - name: platforms
        required: true
        in: query
        schema:
          type: array
          items:
            type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SecurityGraphRuleViewModel'
      tags:
      - Rules
      description: Get all rules by filter
  /v2/security-graph/query:
    post:
      operationId: QueryController_executeToxicCombinationQuery_post_/v2/security-graph/query
      summary: Execute Toxic Combination Query
      parameters: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SgqlQueryRunRequestModel'
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: string
      tags:
      - Security Graph Query
      description: Execute a query for toxic combination entities preview
  /v2/security-graph/query/evidence-path/{queryRunRequestId}:
    post:
      operationId: QueryController_executeToxicCombinationEvidenceQuery_post_/v2/security-graph/query/evidence-path/{queryRunRequestId}
      summary: Execute Toxic Combination Evidence Query
      parameters:
      - name: queryRunRequestId
        required: true
        in: path
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SgqlQueryRunEvidencePathRequestModel'
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                type: string
      tags:
      - Security Graph Query
      description: Execute a query for toxic combination evidence path preview
  /v2/security-graph/query/evidence-path/sync/{queryRunRequestId}/{srl}:
    get:
      operationId: QueryController_getToxicCombinationEvidenceSync_get_/v2/security-graph/query/evidence-path/sync/{queryRunRequestId}/{srl}
      summary: Get Toxic Combination Evidence Sync
      parameters:
      - name: queryRunRequestId
        required: true
        in: path
        schema:
          type: string
      - name: srl
        required: true
        in: path
        schema:
          type: string
      responses:
        default:
          description: ''
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/QueryExecutionEvidencePathResponseViewModel'
      tags:
      - Security Graph Query
      description: Execute a query for toxic combination issue preview immediately
  /v2/security-graph/query/evidence-path/{requestId}:
    get:
      operationId: QueryController_getToxicCombinationEvidence_get_/v2/security-graph/query/evidence-path/{requestId}
      summary: Get Toxic Combination Evidence
      parameters:
      - name: requestId
        required: true
        in: p

# --- truncated at 32 KB (110 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/openapi/cloudguard-risk-management-openapi.yml