SecurityScorecard Threat Actors API

openapi: 3.2.0
info:
  title: ASI internal service Threat Actors API
  description: Attack surface intelligence service
  version: 0.0.1
servers:
- url: https://api.securityscorecard.io
security:
- Token: []
tags:
- name: threat-actors
  description: Threat-actors
paths:
  /asi/details/threat-actor/{threatActor}:
    get:
      tags:
      - threat-actors
      parameters:
      - in: path
        name: threatActor
        required: true
        schema:
          type: string
        description: ''
      responses:
        '200':
          description: Threat Actors Details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/getAsiThreatActorsResponse'
      summary: Attack Surface Intelligence API Threat Actors Details
      operationId: getAsiDetailsThreatActorByThreatActor
      x-operation-id-source: derived
components:
  schemas:
    getAsiThreatActorsResponse:
      type: object
      properties:
        title:
          type: string
          description: Threat Actor Name
        origin:
          type: string
        description:
          type: string
        aka:
          type: array
          description: Also known as
          items:
            type: string
        insights:
          type: array
          description: Insights
          items:
            type: string
        industries:
          type: array
          description: Commonly targeted industries
          items:
            type: string
        entities:
          type: array
          description: Commonly targeted entities
          items:
            type: string
        iocs:
          type: array
          description: Indicators of Compromise
          items:
            type: object
            properties:
              description:
                type: string
                description: IoC Description
              type:
                type: string
                description: IoC Type
              source:
                type: string
                description: IoC source link
              lastUpdate:
                type: string
                description: Last update
  securitySchemes:
    Token:
      type: apiKey
      in: header
      name: Authorization
      description: "SecurityScorecard API endpoints require an authentication token to be passed\nin an authorization header in order to return data. If you do not already\nhave a token, you can create one by going to the API Access area in your\n[Settings page](https://platform.securityscorecard.io/#/settings/api) and then\nclicking Generate New Token. Please note this tokens have no expiration\nso they can be used until manually revoked. If you have a token and generate\na new one, the previous token will be revoked and can no longer be used.\n\nAdministrators can also revoke API tokens for any user in their account.\n\nOnce you have your token you can pass it in using the `Authorization` http header like this:\n\n```\ncurl -X GET \\\n  https://api.securityscorecard.io/portfolios \\\n  -H 'authorization: Token <your token>'\n```\n"
x-provenance:
  method: searched
  source: https://securityscorecard.readme.io/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://securityscorecard.readme.io/reference/get_asi-details-active-infections-family.md
  - https://securityscorecard.readme.io/reference/get_asi-details-asset-asset-port-port.md
  - https://securityscorecard.readme.io/reference/get_asi-details-asset-ip.md
  - https://securityscorecard.readme.io/reference/get_asi-details-cve-cve.md
  - https://securityscorecard.readme.io/reference/get_asi-details-cve-domain-domain.md
  - https://securityscorecard.readme.io/reference/get_asi-details-ransomware-ransomware.md
  - https://securityscorecard.readme.io/reference/get_asi-details-threat-actor-threatactor.md
  - https://securityscorecard.readme.io/reference/post_asi-facets.md
  - https://securityscorecard.readme.io/reference/post_asi-search.md
  merge:
    pages: 9
    deduped: 8
    conflicts_kept_first: 0