Balbix REST API

name: Balbix REST API
description: The Balbix REST API (v1) gives programmatic read access to the asset, vulnerability, misconfiguration,
  software-inventory and application inventory Balbix discovers - the Continuous Threat Exposure Management
  half of SAFE's platform since the 2025 acquisition. Assets are addressed by an integer Device ID resolved
  through /asset_list from any combination of hostname, IP and MAC; applications by an App ID. Responses
  carry CVSS scores, CVE and CWE identifiers, CPE strings, MITRE ATT&CK tactic/technique pairs and a Balbix
  exposure score. Authentication is HTTP Basic plus a customer key against /apis/v1/gen_token, which mints
  a 30-minute session token sent bare in Authorization alongside a Client-API-Key tenant header - a different
  calling convention from the SAFE One API. The API is explicitly read-only, is served from a per-tenant
  *.balbix.net host issued by Balbix, and credentials can currently only be created by Balbix engineering
  or customer success rather than self-service.
humanURL: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
baseURL: https://{tenant}.balbix.net/apis/v1
tags:
- Security
- Continuous Threat Exposure Management
- Vulnerability Management
- Attack Surface Management
properties:
- type: Documentation
  url: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
- type: APIReference
  url: https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
- type: Authentication
  url: authentication/safe-security-authentication.yml
- type: Conventions
  url: conventions/safe-security-conventions.yml
- type: ErrorCatalog
  url: errors/safe-security-problem-types.yml
- type: DataModel
  url: data-model/safe-security-data-model.yml
- type: ChangeLog
  url: changelog/safe-security-changelog.yml
- type: RateLimits
  url: rate-limits/safe-security-rate-limits.yml