# Balbix REST API

**Canonical:** https://apis.io/apis/safe-security/balbix-rest-api/  
**Provider:** SAFE Security — https://apis.io/providers/safe-security/  
**Base URL:** https://{tenant}.balbix.net/apis/v1  
**Documentation:** https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20

Balbix REST API is one of 2 APIs that [SAFE Security](https://apis.io/providers/safe-security/) publishes on the [APIs.io](https://apis.io/) network. Tagged areas include Security, Continuous Threat Exposure Management, Vulnerability Management, and Attack Surface Management. The published artifact set on APIs.io includes API documentation, an API reference, authentication docs, a changelog, and rate-limit docs.

The Balbix REST API (v1) gives programmatic read access to the asset, vulnerability, misconfiguration, software-inventory and application inventory Balbix discovers - the Continuous Threat Exposure Management half of SAFE's platform since the 2025 acquisition. Assets are addressed by an integer Device ID resolved through /asset_list from any combination of hostname, IP and MAC; applications by an App ID. Responses carry CVSS scores, CVE and CWE identifiers, CPE strings, MITRE ATT&CK tactic/technique pairs and a Balbix exposure score. Authentication is HTTP Basic plus a customer key against /apis/v1/gen_token, which mints a 30-minute session token sent bare in Authorization alongside a Client-API-Key tenant header - a different calling convention from the SAFE One API. The API is explicitly read-only, is served from a per-tenant *.balbix.net host issued by Balbix, and credentials can currently only be created by Balbix engineering or customer success rather than self-service.

## Machine-readable artifacts (8)

- **Documentation** — https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
- **APIReference** — https://docs.safe.security/balbixhelp/docs/balbix-rest-api-guide-v20
- **Authentication** — https://raw.githubusercontent.com/api-evangelist/safe-security/refs/heads/main/authentication/safe-security-authentication.yml
- **Conventions** — https://raw.githubusercontent.com/api-evangelist/safe-security/refs/heads/main/conventions/safe-security-conventions.yml
- **ErrorCatalog** — https://raw.githubusercontent.com/api-evangelist/safe-security/refs/heads/main/errors/safe-security-problem-types.yml
- **DataModel** — https://raw.githubusercontent.com/api-evangelist/safe-security/refs/heads/main/data-model/safe-security-data-model.yml
- **ChangeLog** — https://raw.githubusercontent.com/api-evangelist/safe-security/refs/heads/main/changelog/safe-security-changelog.yml
- **RateLimits** — https://raw.githubusercontent.com/api-evangelist/safe-security/refs/heads/main/rate-limits/safe-security-rate-limits.yml

## Other SAFE Security APIs (1)

- [SAFE REST API](https://apis.io/apis/safe-security/safe-rest-api/)

## Tags

Security, Continuous Threat Exposure Management, Vulnerability Management, Attack Surface Management

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/safe-security/balbix-rest-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/safe-security/.