SecurityScorecard Vendor Detection API

The vendor-detection API from SecurityScorecard — 5 operation(s) for vendor-detection.

Operations 5

GET /vendor-detection/portfolios/{portfolioId} Get third party vendors by portfolio ID #
GET /vendor-detection/{domain}/fourth-party Get fourth party vendors by domain #
GET /vendor-detection/{domain}/products Get products by domain #
GET /vendor-detection/{domain}/risk Get risk score by domain #
GET /vendor-detection/{domain}/third-party Get third party vendors by domain #

Specifications

Schemas & Data

📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-all-companies-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-company-by-domain-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-update-company-fields-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-note-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-update-company-fields-by-domain-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-all-companies-bulk-update-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-asi-search-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-asi-asset-ip-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-asi-search-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-asi-threat-actors-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-asi-asset-port-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-cve-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-custom-scorecard-schema-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-get-action-plan-by-id-schema-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-action-plan-list-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-create-custom-scorecard-request-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-company-summary-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-delete-custom-scorecard-filters-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-findings-list-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-action-plans-list-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-likelihood-assessment-v2-get-response-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-add-vendor-domains-result-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-breaches-list-schema.json
📊
JSONSchema
https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/json-schema/security-scorecard-reports-schema-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/security-scorecard:security-scorecard-vendor-detection-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

security-scorecard-vendor-detection-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: SecurityScorecard Vendor Detection API
  version: 1.9.73
  contact:
    name: SecurityScorecard Support
    email: support@securityscorecard.io
  description: 'SecurityScorecard enables users to instantly rate and understand the security

    risk of any company.'
  x-logo:
    url: https://platform.securityscorecard.io/images/ssc-logo-white-stacked.svg
    backgroundColor: '#222830'
servers:
- url: https://api.securityscorecard.io
security:
- Token: []
tags:
- name: vendor-detection
paths:
  /vendor-detection/portfolios/{portfolioId}:
    get:
      description: Returns a list of third-party vendors used by the companies in a given portfolio
      tags:
      - vendor-detection
      parameters:
      - description: Portfolio id to use
        in: path
        name: portfolioId
        required: true
        example: c2f0cbc8-844a-424f-8f75-1bf219aab9ff
        schema:
          type: string
      - description: 'Name of domain to filter by

          (Not compatible with `product` query, filter by one or the other)'
        in: query
        name: domain
        example: example.com
        schema:
          type: string
      - description: 'Name of product to filter by

          (Not compatible with `domain` query, filter by one or the other)'
        in: query
        name: product
        example: Example
        schema:
          type: string
      - description: Which page of results to return
        in: query
        name: page
        example: 1
        schema:
          type: integer
          minimum: 1
      - description: How many results to return
        in: query
        name: limit
        example: 100
        schema:
          type: integer
          minimum: 1
          maximum: 5000
          default: 100
      responses:
        '200':
          description: OK
          headers:
            Link:
              description: URL to be used to used to fetch additional pages of results
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PortfolioVendors'
            text/html:
              schema:
                $ref: '#/components/schemas/PortfolioVendors'
        '400':
          description: Bad Request
        '401':
          description: Unauthorized
        '403':
          description: Company must be added to a portfolio first
        '404':
          description: Company not found
        default:
          description: Error Payload
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
            text/html:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      summary: Get third party vendors by portfolio ID
      operationId: getVendorDetectionPortfoliosByPortfolioId
      x-operation-id-source: derived
  /vendor-detection/{domain}/fourth-party:
    get:
      description: 'Returns a list of fourth party vendors connected to the given domain


        **Note: Requires access to AVD with Enhanced Illumination**'
      tags:
      - vendor-detection
      parameters:
      - in: path
        name: domain
        required: true
        example: example.com
        schema:
          type: string
        description: primary domain identifying a company
      - in: query
        name: page
        required: false
        example: 1
        schema:
          type: integer
          minimum: 1
        description: optionally specify which page of results to return
      - in: query
        name: limit
        required: false
        example: 100
        schema:
          type: integer
          minimum: 1
          maximum: 5000
        description: optionally specify how many results to return
      responses:
        '200':
          description: Vendors used by a company
          headers:
            Link:
              description: URL to be used to used to fetch additional pages of results
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorsResponseSchema'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorBadRequest'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorUnauthorized'
        '403':
          description: Company must be added to a portfolio first
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorLevelData'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorNotFound'
        '429':
          description: Too Many Requests
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorRateLimit'
      summary: Get fourth party vendors by domain
      operationId: getVendorDetectionByDomainFourthParty
      x-operation-id-source: derived
  /vendor-detection/{domain}/products:
    get:
      description: Returns a list of products used by the given domain
      tags:
      - vendor-detection
      parameters:
      - in: path
        name: domain
        required: true
        example: example.com
        schema:
          type: string
        description: primary domain identifying a company
      - in: query
        name: page
        required: false
        example: 1
        schema:
          type: integer
          minimum: 1
        description: optionally specify which page of results to return
      - in: query
        name: limit
        required: false
        example: 100
        schema:
          type: integer
          minimum: 1
          maximum: 5000
        description: optionally specify how many results to return
      responses:
        '200':
          description: Products used by a company
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ProductsResponseSchema'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorBadRequest'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorUnauthorized'
        '403':
          description: Company must be added to a portfolio first
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorLevelData'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorNotFound'
        '429':
          description: Too Many Requests
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorRateLimit'
      summary: Get products by domain
      operationId: getVendorDetectionByDomainProducts
      x-operation-id-source: derived
  /vendor-detection/{domain}/risk:
    get:
      description: 'Returns the supply chain risk score for a given domain


        **Note: Requires access to AVD with Enhanced Illumination**'
      tags:
      - vendor-detection
      parameters:
      - in: path
        name: domain
        required: true
        example: example.com
        schema:
          type: string
        description: primary domain identifying a company
      responses:
        '200':
          description: Supply chain risk
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SupplyChainRiskResponseSchema'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorBadRequest'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorUnauthorized'
        '403':
          description: Company must be added to a portfolio first
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorLevelData'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorNotFound'
        '429':
          description: Too Many Requests
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorRateLimit'
      summary: Get risk score by domain
      operationId: getVendorDetectionByDomainRisk
      x-operation-id-source: derived
  /vendor-detection/{domain}/third-party:
    get:
      description: 'Returns a list of third party vendors connected to the given domain


        **Note: Requires access to AVD with Enhanced Illumination**'
      tags:
      - vendor-detection
      parameters:
      - in: path
        name: domain
        required: true
        example: example.com
        schema:
          type: string
        description: primary domain identifying a company
      - in: query
        name: page
        required: false
        example: 1
        schema:
          type: integer
          minimum: 1
        description: optionally specify which page of results to return
      - in: query
        name: limit
        required: false
        example: 100
        schema:
          type: integer
          minimum: 1
          maximum: 5000
        description: optionally specify how many results to return
      responses:
        '200':
          description: Vendors used by a company
          headers:
            Link:
              description: URL to be used to used to fetch additional pages of results
              schema:
                type: string
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/VendorsResponseSchema'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorBadRequest'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorUnauthorized'
        '403':
          description: Company must be added to a portfolio first
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorLevelData'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorNotFound'
        '429':
          description: Too Many Requests
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorRateLimit'
      summary: Get third party vendors by domain
      operationId: getVendorDetectionByDomainThirdParty
      x-operation-id-source: derived
components:
  schemas:
    Error:
      properties:
        message:
          description: Human readable message, suitable for showing in some UI
          example: 'company must be added to a portfolio first: example.com'
          type: string
        statusCode:
          example: 403
          type: integer
        data:
          description: The field that is causing the error
          type: object
          additionalProperties: true
          example:
            domain: example.com
        key:
          description: Some string to be used for further lookup
          example: company_not_in_a_portfolio
          type: string
      required:
      - message
      - statusCode
    VendorsResponseSchema:
      type: object
      additionalProperties: false
      properties:
        entries:
          type: array
          items:
            description: A party in the supply chain that makes goods and services available to a company
            properties:
              company:
                example: Example Ltd.
                type: string
              connection_detail:
                example: GET - static.image.example.com OK/200
                type: string
              domain:
                example: example.com
                type: string
                description: primary domain of the company
              industry:
                type: string
                description: industry (unique identifier). 'unknown' if this wasn't yet determined.
                example: technology
              observed:
                format: date-time
                type: string
              score:
                type: integer
                description: security score from 0 to 100
                example: 95
              source:
                enum:
                - HTTP requests
                - Detected libraries
                - Mail exchange
                - Enhanced illumination
                type: string
            type: object
        size:
          description: The number of records to be returned per page
          example: 100
          type: integer
        page:
          description: The page number to be returned
          example: 1
          type: integer
        total:
          description: The total number of records matching the given query
          example: 999
          type: integer
      required:
      - entries
      - size
      - page
      - total
    SupplyChainRiskResponseSchema:
      type: object
      additionalProperties: false
      properties:
        risk_score:
          type: number
          format: integer
          example: 83
          description: The aggregate score of all 1st and 2nd connections detected for a company.
    ErrorResponse:
      properties:
        error:
          $ref: '#/components/schemas/Error'
      required:
      - error
    CollectionResponse:
      properties:
        page:
          description: The current page of results
          minimum: 1
          type: integer
        size:
          description: The number of records to be returned per page
          example: 100
          type: integer
        total:
          description: The total number of records matching the given query
          example: 999
          type: integer
    ErrorBadRequest:
      type: object
      properties:
        error:
          type: object
          properties:
            message:
              description: Human readable message, suitable for showing in some UI
              type: string
            statusCode:
              type: integer
              default: 400
          required:
          - message
          - statusCode
    PortfolioVendors:
      type: object
      description: Vendors used by companies in a portfolio
      properties:
        entries:
          type: array
          items:
            $ref: '#/components/schemas/PortfolioVendor'
      allOf:
      - $ref: '#/components/schemas/CollectionResponse'
    ErrorLevelData:
      type: object
      properties:
        error:
          type: object
          properties:
            message:
              description: Human readable message, suitable for showing in some UI
              type: string
            statusCode:
              type: integer
            data:
              description: The field that is causing the error
              type: object
              additionalProperties: true
            key:
              description: Some string to be used for further lookup
              type: string
          required:
          - message
          - statusCode
    ErrorUnauthorized:
      type: object
      properties:
        error:
          type: object
          properties:
            message:
              description: Human readable message, suitable for showing in some UI
              type: string
            statusCode:
              type: integer
              default: 401
          required:
          - message
          - statusCode
    ProductsResponseSchema:
      type: object
      additionalProperties: false
      properties:
        entries:
          type: array
          items:
            properties:
              name:
                example: The Product Name
                type: string
            type: object
        size:
          description: The number of records to be returned per page
          example: 100
          type: integer
        page:
          description: The page number to be returned
          example: 1
          type: integer
        total:
          description: The total number of records matching the given query
          example: 999
          type: integer
      required:
      - entries
      - size
      - page
      - total
    PortfolioVendor:
      type: object
      description: A party in the supply chain that makes goods and services available to a company in a portfolio
      properties:
        domain:
          type: string
          example: example.com
        company:
          type: string
          example: Example Ltd
        score:
          type: integer
          example: 75
        thirty_day_change:
          type: integer
          format: float
          example: -4
        products_used:
          type: integer
          example: 1815
        connections_count:
          type: integer
          example: 184
        connections_percent:
          type: integer
          minimum: 1
          maximum: 100
    ErrorNotFound:
      type: object
      properties:
        error:
          type: object
          properties:
            message:
              description: Human readable message, suitable for showing in some UI
              type: string
            statusCode:
              type: integer
              default: 404
          required:
          - message
          - statusCode
    ErrorRateLimit:
      type: object
      properties:
        error:
          type: object
          properties:
            message:
              description: Human readable message, suitable for showing in some UI
              type: string
            statusCode:
              type: integer
              default: 429
          required:
          - message
          - statusCode
  securitySchemes:
    Token:
      type: apiKey
      in: header
      name: Authorization
      description: "SecurityScorecard API endpoints require an authentication token to be passed\nin an authorization header in order to return data. If you do not already\nhave a token, you can create one by going to the API Access area in your\n[Settings page](https://platform.securityscorecard.io/#/settings/api) and then\nclicking Generate New Token. Please note this tokens have no expiration\nso they can be used until manually revoked. If you have a token and generate\na new one, the previous token will be revoked and can no longer be used.\n\nAdministrators can also revoke API tokens for any user in their account.\n\nOnce you have your token you can pass it in using the `Authorization` http header like this:\n\n```\ncurl -X GET \\\n  https://api.securityscorecard.io/portfolios \\\n  -H 'authorization: Token <your token>'\n```\n"
x-provenance:
  method: searched
  source: https://securityscorecard.readme.io/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://securityscorecard.readme.io/reference/delete_custom-scorecards-id-filters.md
  - https://securityscorecard.readme.io/reference/delete_custom-scorecards-id-sources.md
  - https://securityscorecard.readme.io/reference/delete_custom-scorecards-id.md
  - https://securityscorecard.readme.io/reference/delete_portfolios-portfolio-id-companies-all.md
  - https://securityscorecard.readme.io/reference/delete_portfolios-portfolio-id-companies-domain.md
  - https://securityscorecard.readme.io/reference/delete_portfolios-portfolio-id.md
  - https://securityscorecard.readme.io/reference/delete_scorecard-tags-groups-id.md
  - https://securityscorecard.readme.io/reference/delete_scorecard-tags-id-companies-domain.md
  - https://securityscorecard.readme.io/reference/delete_scorecard-tags-id.md
  - https://securityscorecard.readme.io/reference/delete_scorecard-tags-tag-id-groups-tag-group-id.md
  - https://securityscorecard.readme.io/reference/deleteapibyparentdomaindomainbydomainassociatetagsbytagid.md
  - https://securityscorecard.readme.io/reference/deleteapibyparentdomainipbyipassociatetagsbytagid.md
  - https://securityscorecard.readme.io/reference/deleteapibytagid.md
  - https://securityscorecard.readme.io/reference/deleteapigroupsbytaggroupidassociationbytagid.md
  - https://securityscorecard.readme.io/reference/deleteapitaggroupsbyid.md
  - https://securityscorecard.readme.io/reference/deleteplansbyid.md
  - https://securityscorecard.readme.io/reference/deleteplansbyidguests.md
  - https://securityscorecard.readme.io/reference/deleteplansbyiditems.md
  - https://securityscorecard.readme.io/reference/get_companies-domain-history-events-breaches.md
  - https://securityscorecard.readme.io/reference/get_companies-domain-issue-context-issue-type.md
  - https://securityscorecard.readme.io/reference/get_companies-domain-score-plans-by-target-score.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-active-issues.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-expanded-risk.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-factors.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-active-cve-exploitation-attempted-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-adware-installation-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-adware-installation-trail-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-alleged-breach-incident-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-attack-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-attempted-information-leak-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-browser-logs-contain-debug-message-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-cdn-hosting-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-cobalt-strike-c2-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-cobalt-strike-c2-service-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-communication-server-with-expired-cert-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-communication-with-server-certificate-issued-by-blacklisted-country-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-compromised-by-information-stealer.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-compromised-credentials-found.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-contact-information-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-cookie-missing-http-only-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-cookie-missing-secure-attribute-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-csp-no-policy-v2-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-csp-too-broad-v2-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-csp-unsafe-policy-v2-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-cve-in-use-by-threat-actor-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-data-leak-detected.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-dmarc-contains-none.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-dmarc-record-missing.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-domain-missing-https-v2-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-dos-attack-attempt-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-exploit-attempt-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-exploited-product-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-exposed-cisco-web-ui.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-exposed-embedded-iot-web-server-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-exposed-mac-airport-device-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-exposed-network-attached-storage-device-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-exposed-personal-information-info-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-exposed-printer-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-fail-to-load-page-components-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-general-scan-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-historical-compromised-credentials-found.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-hosted-on-object-storage-v2-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-hsts-incorrect-v2-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-industrial-control-device-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-infected-by-targeted-attack.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-insecure-ftp-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-insecure-https-redirect-pattern-v2-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-insecure-server-certificate-key-size-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-insecure-telnet-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-iot-camera-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-ip-black-list-due-malicious-activity-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-known-compromised-or-hostile-host-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-leaked-credentials-info-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-links-to-insecure-website-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-local-file-path-exposed-via-url-scheme-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-mail-server-unusual-port-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-malicious-botnet-c-and-c-server-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-malicious-scan-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-malicious-tor-exit-node-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-malicious-tor-relay-router-node-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-malicious-user-agent-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-malware-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-malware-infection-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-malware-infection-trail-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-microsoft-exchange-0-day-vulnerability-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-microsoft-exchange-http-api-vulnerability-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-minecraft-server-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-mirai-botnet-traffic-detected-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-mysql-server-empty-password-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-open-port.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-openssl-critical-vulnerability-1.md
  - https://securityscorecard.readme.io/reference/get_companies-scorecard-identifier-history-events-effective-date-issues-outdated-browser-1.md


# --- truncated at 32 KB (80 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/security-scorecard/refs/heads/main/openapi/security-scorecard-vendor-detection-api-openapi.yml