# SecurityScorecard active findings API

**Canonical:** https://apis.io/apis/security-scorecard/security-scorecard-active-findings-api/  
**Provider:** SecurityScorecard — https://apis.io/providers/security-scorecard/  
**Base URL:** https://api.securityscorecard.io  
**Documentation:** https://securityscorecard.readme.io/reference/introduction

SecurityScorecard active findings API is one of 32 APIs that [SecurityScorecard](https://apis.io/providers/security-scorecard/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. This API exposes 24 JSON Schema definitions. Tagged areas include active findings. The published artifact set on APIs.io includes an OpenAPI specification and 24 JSON Schemas.

The active findings API from SecurityScorecard — 193 operation(s) for active findings.

## Operations (60 of 193)

| Method | Path | Summary |
|---|---|---|
| GET | `/companies/{domain}/issue-context/{issue_type}` | Get the score context for an issue type |
| GET | `/companies/{scorecard_identifier}/issues/active_cve_exploitation_attempted` | Get "active_cve_exploitation_attempted" issues in |
| GET | `/companies/{scorecard_identifier}/issues/adware_installation` | Get "adware_installation" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/adware_installation_trail` | Get "adware_installation_trail" issues in a scorec |
| GET | `/companies/{scorecard_identifier}/issues/alleged_breach_incident` | Get "alleged_breach_incident" issues in a scorecar |
| GET | `/companies/{scorecard_identifier}/issues/attack_detected` | Get "attack_detected" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/attempted_information_leak` | Get "attempted_information_leak" issues in a score |
| GET | `/companies/{scorecard_identifier}/issues/browser_logs_contain_debug_message` | Get "browser_logs_contain_debug_message" issues in |
| GET | `/companies/{scorecard_identifier}/issues/cdn_hosting` | Get "cdn_hosting" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/cobalt_strike_c2_detected` | Get "cobalt_strike_c2_detected" issues in a scorec |
| GET | `/companies/{scorecard_identifier}/issues/cobalt_strike_c2_service` | Get "cobalt_strike_c2_service" issues in a scoreca |
| GET | `/companies/{scorecard_identifier}/issues/communication_server_with_expired_cert` | Get "communication_server_with_expired_cert" issue |
| GET | `/companies/{scorecard_identifier}/issues/communication_with_server_certificate_issued_by_blacklisted_country` | Get "communication_with_server_certificate_issued_ |
| GET | `/companies/{scorecard_identifier}/issues/compromised_by_information_stealer` | Get "compromised_by_information_stealer" issues in |
| GET | `/companies/{scorecard_identifier}/issues/compromised_credentials_found` | Get "compromised_credentials_found" issues in a sc |
| GET | `/companies/{scorecard_identifier}/issues/contact_information_detected` | Get "contact_information_detected" issues in a sco |
| GET | `/companies/{scorecard_identifier}/issues/cookie_missing_http_only` | Get "cookie_missing_http_only" issues in a scoreca |
| GET | `/companies/{scorecard_identifier}/issues/cookie_missing_secure_attribute` | Get "cookie_missing_secure_attribute" issues in a |
| GET | `/companies/{scorecard_identifier}/issues/csp_no_policy_v2` | Get "csp_no_policy_v2" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/csp_too_broad_v2` | Get "csp_too_broad_v2" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/csp_unsafe_policy_v2` | Get "csp_unsafe_policy_v2" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/cve_in_use_by_threat_actor` | Get "cve_in_use_by_threat_actor" issues in a score |
| GET | `/companies/{scorecard_identifier}/issues/data_leak_detected` | Get "data_leak_detected" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/dmarc_contains_none` | Get "dmarc_contains_none" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/dmarc_record_missing` | Get "dmarc_record_missing" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/domain_missing_https_v2` | Get "domain_missing_https_v2" issues in a scorecar |
| GET | `/companies/{scorecard_identifier}/issues/dos_attack_attempt_detected` | Get "dos_attack_attempt_detected" issues in a scor |
| GET | `/companies/{scorecard_identifier}/issues/exploit_attempt_detected` | Get "exploit_attempt_detected" issues in a scoreca |
| GET | `/companies/{scorecard_identifier}/issues/exploited_product` | Get "exploited_product" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/exposed_cisco_web_ui` | Get "exposed_cisco_web_ui" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/exposed_embedded_iot_web_server` | Get "exposed_embedded_iot_web_server" issues in a |
| GET | `/companies/{scorecard_identifier}/issues/exposed_mac_airport_device` | Get "exposed_mac_airport_device" issues in a score |
| GET | `/companies/{scorecard_identifier}/issues/exposed_network_attached_storage_device` | Get "exposed_network_attached_storage_device" issu |
| GET | `/companies/{scorecard_identifier}/issues/exposed_personal_information_info` | Get "exposed_personal_information_info" issues in |
| GET | `/companies/{scorecard_identifier}/issues/exposed_printer` | Get "exposed_printer" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/fail_to_load_page_components` | Get "fail_to_load_page_components" issues in a sco |
| GET | `/companies/{scorecard_identifier}/issues/general_scan_detected` | Get "general_scan_detected" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/historical_compromised_credentials_found` | Get "historical_compromised_credentials_found" iss |
| GET | `/companies/{scorecard_identifier}/issues/hosted_on_object_storage_v2` | Get "hosted_on_object_storage_v2" issues in a scor |
| GET | `/companies/{scorecard_identifier}/issues/hsts_incorrect_v2` | Get "hsts_incorrect_v2" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/industrial_control_device` | Get "industrial_control_device" issues in a scorec |
| GET | `/companies/{scorecard_identifier}/issues/infected_by_targeted_attack` | Get "infected_by_targeted_attack" issues in a scor |
| GET | `/companies/{scorecard_identifier}/issues/insecure_ftp` | Get "insecure_ftp" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/insecure_https_redirect_pattern_v2` | Get "insecure_https_redirect_pattern_v2" issues in |
| GET | `/companies/{scorecard_identifier}/issues/insecure_server_certificate_key_size` | Get "insecure_server_certificate_key_size" issues |
| GET | `/companies/{scorecard_identifier}/issues/insecure_telnet` | Get "insecure_telnet" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/iot_camera` | Get "iot_camera" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/ip_black_list_due_malicious_activity` | Get "ip_black_list_due_malicious_activity" issues |
| GET | `/companies/{scorecard_identifier}/issues/known_compromised_or_hostile_host` | Get "known_compromised_or_hostile_host" issues in |
| GET | `/companies/{scorecard_identifier}/issues/leaked_credentials_info` | Get "leaked_credentials_info" issues in a scorecar |
| GET | `/companies/{scorecard_identifier}/issues/links_to_insecure_website` | Get "links_to_insecure_website" issues in a scorec |
| GET | `/companies/{scorecard_identifier}/issues/local_file_path_exposed_via_url_scheme` | Get "local_file_path_exposed_via_url_scheme" issue |
| GET | `/companies/{scorecard_identifier}/issues/mail_server_unusual_port` | Get "mail_server_unusual_port" issues in a scoreca |
| GET | `/companies/{scorecard_identifier}/issues/malicious_botnet_c_and_c_server_detected` | Get "malicious_botnet_c_and_c_server_detected" iss |
| GET | `/companies/{scorecard_identifier}/issues/malicious_scan_detected` | Get "malicious_scan_detected" issues in a scorecar |
| GET | `/companies/{scorecard_identifier}/issues/malicious_tor_exit_node_detected` | Get "malicious_tor_exit_node_detected" issues in a |
| GET | `/companies/{scorecard_identifier}/issues/malicious_tor_relay_router_node_detected` | Get "malicious_tor_relay_router_node_detected" iss |
| GET | `/companies/{scorecard_identifier}/issues/malicious_user_agent_detected` | Get "malicious_user_agent_detected" issues in a sc |
| GET | `/companies/{scorecard_identifier}/issues/malware_detected` | Get "malware_detected" issues in a scorecard |
| GET | `/companies/{scorecard_identifier}/issues/malware_infection` | Get "malware_infection" issues in a scorecard |

…and 133 more operations. They are listed in full on the page.

## Machine-readable artifacts (25)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/openapi/security-scorecard-active-findings-api-openapi.yml
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-all-companies-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-company-by-domain-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-update-company-fields-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-note-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-update-company-fields-by-domain-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-all-companies-bulk-update-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-asi-search-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-asi-asset-ip-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-asi-search-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-asi-threat-actors-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-asi-asset-port-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-cve-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-custom-scorecard-schema-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-action-plan-by-id-schema-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-action-plan-list-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-create-custom-scorecard-request-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-company-summary-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-delete-custom-scorecard-filters-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-findings-list-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-action-plans-list-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-likelihood-assessment-v2-get-response-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-add-vendor-domains-result-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-breaches-list-schema.json
- **JSONSchema** — https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-reports-schema-schema.json

## Other SecurityScorecard APIs (12)

- [SecurityScorecard API](https://apis.io/apis/security-scorecard/securityscorecard-api/)
- [SecurityScorecard Scorecard Multiscores API](https://apis.io/apis/security-scorecard/security-scorecard-multiscores-api/)
- [SecurityScorecard action plans API](https://apis.io/apis/security-scorecard/security-scorecard-action-plans-api/)
- [SecurityScorecard Active Infections API](https://apis.io/apis/security-scorecard/security-scorecard-active-infections-api/)
- [SecurityScorecard Alerts API](https://apis.io/apis/security-scorecard/security-scorecard-alerts-api/)
- [SecurityScorecard All Companies API](https://apis.io/apis/security-scorecard/security-scorecard-all-companies-api/)
- [SecurityScorecard Apps API](https://apis.io/apis/security-scorecard/security-scorecard-apps-api/)
- [SecurityScorecard Asset API](https://apis.io/apis/security-scorecard/security-scorecard-asset-api/)
- [SecurityScorecard Compliance API](https://apis.io/apis/security-scorecard/security-scorecard-compliance-api/)
- [SecurityScorecard custom scorecards API](https://apis.io/apis/security-scorecard/security-scorecard-custom-scorecards-api/)
- [SecurityScorecard Customer API](https://apis.io/apis/security-scorecard/security-scorecard-customer-api/)
- [SecurityScorecard Cve API](https://apis.io/apis/security-scorecard/security-scorecard-cve-api/)

## Tags

active findings

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/security-scorecard/security-scorecard-active-findings-api/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/security-scorecard/.