Cybersecurity Management
Security strategy, controls, identity, and threat response.
Cybersecurity Management (BC-620) is a level-1 business capability in the Cross-Industry model. The catalog holds 2726 API surface(s) from 344 provider(s) that can perform some part of it, 120 of them rated strong or better. Reach is the vendor surface that lands on this capability — it is not a claim about what any particular organisation has deployed.
Sub-capabilities
Security Strategy & Governance Management BC-620.10
Security strategy, policies, frameworks, GRC.
Identity & Access Management BC-620.20
IAM, PAM, federation, joiners-movers-leavers.
Threat Detection & Response Management BC-620.30
SOC, SIEM, incident response.
Vulnerability Management BC-620.40
Vulnerability scanning, patching, remediation.
Security Architecture Management BC-620.50
Secure design, security patterns, zero trust.
Security Awareness Management BC-620.60
Awareness training, phishing simulations, culture.
Providers that reach this capability
Ordered by rating band. Reach means a provider publishes an API surface that can perform some part of this capability — it is not a claim that any particular organisation has deployed it.
- Brevo exemplar 87.0
- Salesforce exemplar 84.3
- OpenAI exemplar 80.4
- The Things Network / The Things Stack exemplar 80.3
- SendGrid exemplar 77.0
- Treasure Data exemplar 75.5
- iOS exemplar 75.3
- Mapp Marketing Cloud exemplar 75.3
- Twilio exemplar 73.8
- Zoom Phone exemplar 73.2
- Adobe Suite exemplar 73.1
- LinkedIn exemplar 73.0
- Commerce Layer exemplar 72.5
- Dynatrace exemplar 71.8
- Talon.One exemplar 71.1
- ThousandEyes exemplar 70.2
- Benchling exemplar 70.0
- SignalWire exemplar 69.9
- Amazon S3 exemplar 69.1
- Matomo exemplar 69.1
- Impact Radius exemplar 68.5
- NexGen Cloud exemplar 68.1
- Cisco Identity Services Engine exemplar 67.8
- Factset exemplar 67.4
- Impact exemplar 67.3
- Confluent exemplar 67.0
- Snyk exemplar 66.9
- KPN strong 65.9
- Elastic Stack (ELK Stack) strong 65.8
- Palo Alto Networks strong 65.3
- AppsFlyer strong 64.8
- Cisco Catalyst SD-WAN strong 64.5
- DoiT strong 64.5
- IBM strong 64.5
- Coda Project strong 64.2
- Bentley Systems strong 64.1
- ControlUp strong 63.7
- Avalara strong 63.6
- GoFundMe strong 63.5
- Payabli strong 63.5
- Cloudflare strong 63.4
- Cumulocity strong 63.2
- Medusa strong 63.1
- Nexla strong 63.1
- Lytics strong 63.0
- Clerk strong 62.5
- Laravel strong 62.5
- Frontegg strong 62.3
- Rhombus Systems strong 62.1
- Amigo strong 62.0
- Tricentis strong 62.0
- Conga strong 61.9
- Docusign strong 61.8
- OutSystems strong 61.2
- Amazon WorkMail strong 61.0
- Amazon EC2 Image Builder strong 60.9
- CoreStack strong 60.9
- GitHub strong 60.7
- Cisco Umbrella strong 60.6
- Crusoe strong 60.6
- Fastly strong 60.6
- Kiteworks strong 60.6
- Cisco XDR strong 60.5
- Amazon Kinesis strong 60.3
- Bynder strong 59.8
- Amazon Cognito strong 59.7
- Microsoft strong 59.7
- AEMO strong 59.6
- Sift Stack strong 59.5
- Microsoft Azure strong 58.8
- LiveRamp strong 58.6
- WSO2 strong 58.6
- Datadog strong 58.5
- Oracle GoldenGate strong 58.4
- Omni strong 58.3
- Visier strong 58.3
- Microsoft Graph strong 58.2
- MOLOCO strong 58.2
- RingCentral strong 58.2
- Cisco Intersight strong 58.1
- Zendesk strong 58.1
- Cisco Secure Firewall strong 57.8
- Tyk strong 57.8
- Atlassian strong 57.7
- ThingsBoard strong 57.6
- Temporal strong 57.3
- EVEDEX strong 57.2
- Microsoft Office 365 strong 57.0
- Grafana strong 56.9
- Red Hat strong 56.7
- Vic.ai strong 56.7
- JFrog strong 56.6
- ALTR strong 56.3
- Oracle strong 56.3
- TetraScience strong 56.2
- Genesys strong 56.0
- Microsoft Dynamics NAV strong 56.0
- Platform.sh strong 56.0
- Openwork strong 55.9
- Soracom strong 55.8
- IBM WebSphere strong 55.7
- C1 strong 55.4
- Google Cloud Storage strong 55.4
- Amazon IoT Core strong 55.3
- Auth0 strong 55.3
- Malwarebytes strong 55.3
- Netcracker strong 55.3
- AppDirect strong 55.1
- Deel strong 55.0
- InfluxData strong 55.0
- Microsoft Active Directory strong 55.0
- Tradeshift strong 55.0
- Box strong 54.9
- Tenable strong 54.7
- Amazon IoT Device Management strong 54.6
- Amazon Network Firewall strong 54.5
- Paxos strong 54.4
- Snowflake strong 54.4
- Solvimon strong 54.3
- Upsun strong 54.3
- Amazon IoT Device Defender developing 54.2
- Flipdish developing 54.0
- Microsoft Entra developing 54.0
- MTN Group developing 54.0
- Marketo developing 53.9
- Phasio developing 53.9
- Amazon Cognito developing 53.7
- Gravitee developing 53.7
- Wherobots developing 53.5
- Windmill developing 53.5
- Fortify developing 53.3
- Agicap developing 53.2
- Kaseya developing 53.2
- Aptible developing 52.6
- Azure Synapse Analytics developing 52.6
- Cube developing 52.5
- Uniform developing 52.4
- SpecterOps developing 52.3
- Tableau developing 52.2
- Cisco Crosswork developing 52.1
- Graphiant developing 52.1
- Kong developing 52.1
- Amazon WorkSpaces developing 52.0
- Certifyos developing 52.0
- Oracle Eloqua developing 51.9
- Amazon IAM Identity Center developing 51.8
- SonarSource developing 51.8
- TUI Group developing 51.8
- Couchbase developing 51.7
- VirusTotal developing 51.6
- PostHog developing 51.4
- Stytch developing 51.4
- Zoho developing 51.3
- JFrog Artifactory developing 51.2
- Spectro Cloud developing 51.1
- Vanilla Forums developing 51.0
- Webex developing 51.0
- SpotDraft developing 50.7
- WorkOS developing 50.6
- ConductorOne developing 50.3
- Oracle Essbase developing 50.3
- Dokploy developing 50.2
- Route Mobile developing 50.2
- Delinea developing 50.1
- Scaleway developing 50.0
- Soldo developing 50.0
- Erply developing 49.9
- Mend developing 49.9
- Skedulo developing 49.9
- ArthurAI developing 49.8
- Microsoft Defender developing 49.8
- AWS Redshift developing 49.7
- Mist developing 49.7
- Altimate AI developing 49.6
- Zoom developing 49.5
- Cube Planning developing 49.3
- Lokki developing 49.2
- Bigeye developing 49.1
- Amazon Directory Service developing 48.9
- Dream Sports developing 48.9
- Weka developing 48.7
- Siemens PLM developing 48.6
- Toqio developing 48.5
- Zoho Inventory developing 48.4
- Decisiv developing 48.3
- Habu developing 48.3
- Charthop developing 48.2
- Validere developing 48.1
- Google developing 48.0
- tread.io developing 48.0
- ForgeRock developing 47.9
- Lightdash developing 47.9
- Baserow developing 47.5
- Armor developing 47.4
- KISI developing 47.3
- PlanRadar developing 47.3
- Pure Storage developing 47.3
- tessl.io developing 47.3
- Harvard University developing 47.2
- Oracle Fusion Cloud Applications developing 47.2
- Relativity developing 47.1
- Tufin developing 47.0
- Britive developing 46.9
- Posit developing 46.9
- DealHub developing 46.8
- MongoDB developing 46.7
- Coveo developing 46.3
- Looker developing 46.2
- Ready2order developing 46.2
- University of Amsterdam developing 46.2
- Gremlin developing 46.0
- Pipedrive developing 45.7
- Aiven developing 45.6
- Spotnana developing 45.6
- BentoML developing 45.5
- Golioth developing 45.5
- ServiceChannel developing 45.5
- NVIDIA Run:ai developing 45.4
- OneRail developing 45.4
- Sumo Logic developing 45.3
- Sybase developing 45.1
- Galileo Technologies developing 44.7
- Kaltura developing 44.7
- Flowable developing 44.6
- Juniper Mist AI developing 44.5
- Prefect developing 44.4
- TIBCO developing 44.3
- FusionAuth developing 44.1
- Laurel developing 43.9
- Newstore developing 43.9
- Amazon Verified Permissions developing 43.8
- Amazon VPC Lattice developing 43.8
- TeamCity developing 43.7
- Fortanix developing 43.6
- Packet Host developing 43.5
- Lytx developing 43.4
- Macrometa developing 43.2
- DNSFilter developing 43.0
- Pulumi developing 43.0
- Tessell developing 42.9
- King Fahd University of Petroleum & Minerals developing 42.8
- OpenMetadata developing 42.8
- VTEX developing 42.8
- Pinterest developing 42.5
- Rapid7 developing 42.5
- Outdoorsy developing 42.4
- Citrix developing 42.2
- Microsoft Sentinel developing 42.2
- Flatfile developing 42.1
- Permit.io developing 42.1
- Spree Commerce developing 42.0
- OpenObserve developing 41.9
- Oracle WebLogic Server developing 41.9
- Keboola developing 41.8
- Unleash developing 41.5
- Infisical developing 41.3
- Activiti developing 40.8
- Jupyter Notebook developing 40.8
- Mealie developing 40.6
- Exoscale developing 40.2
- Zededa developing 40.2
- Elastic Path developing 40.1
- StackRox developing 40.1
- Akamai API Security developing 39.7
- Extreme Networks developing 39.7
- Incentivio developing 39.7
- Smokeball developing 39.3
- VAST Data thin 39.0
- Infoworks thin 38.9
- Hong Kong Baptist University thin 38.6
- City University of Hong Kong thin 38.5
- Juniper Networks thin 38.5
- nCino thin 38.5
- Istio thin 38.4
- LangChain thin 38.4
- Norwegian University of Science and Technology thin 38.3
- Aarhus University thin 38.2
- OWASP ZAP thin 38.0
- Calyptia thin 37.9
- Eindhoven University of Technology thin 37.8
- Netter thin 37.8
- Events.com thin 37.7
- Label Studio thin 37.7
- Microsoft 365 thin 37.7
- Invendor thin 37.3
- M3ter thin 37.1
- GitLab CI/CD thin 37.0
- Sonatype thin 37.0
- Veeam thin 36.7
- Yonsei University thin 36.6
- Purplebricks thin 36.5
- Spot by Flexera thin 36.5
- QuantCDN thin 36.4
- Queen's University Belfast thin 36.3
- Intralinks thin 36.2
- Wise thin 35.9
- Oper thin 35.8
- Securonix thin 35.6
- Inductive Automation thin 35.5
- University of Groningen thin 35.5
- Maia-analytics thin 35.4
- AdReady (CPXi) thin 35.3
- Cognite thin 35.1
- Kibana thin 34.9
- Chaitin Tech thin 34.8
- Miro thin 34.1
- Qovery thin 34.1
- Telnyx thin 34.1
- Nuclei thin 33.9
- Crusoe thin 33.7
- Rundeck thin 33.5
- XSKY thin 33.3
- Queen's University at Kingston thin 33.2
- JetBrains thin 33.1
- University of North Carolina at Chapel Hill thin 33.1
- InfluxDB thin 32.6
- NetBird thin 32.6
- Samsara thin 32.6
- Akamai thin 32.5
- Alianza thin 32.5
- Sonatype Nexus thin 32.4
- Pavoot thin 32.2
- Equinix thin 31.6
- Logto thin 31.4
- IXON thin 31.2
- UCLouvain thin 31.2
- Indian Institute of Technology Kanpur thin 31.1
- APIs.io Engineering Platform thin 31.0
- LangSmith thin 31.0
- NetBox thin 31.0
- Maastricht University thin 30.9
- Aha.io thin 30.4
- Cacheflow thin 30.3
- Shyft thin 30.2
- Dynamic thin 30.0
- Openpath thin 29.2
- Université de Montréal thin 29.1
- HYPERLABS thin 29.0
- Enviance thin 28.8
- Bridgit thin 28.0
- Deutsche Telekom thin 27.8
- Instana thin 27.2
- WinCL emerging 25.6
- Amazon Web Services emerging 16.7
Workflows that realise this capability
Arazzo workflows whose own sourceDescriptions call APIs that carry this
capability. The link is derived, not asserted: each workflow declares
x-realizes-capability-ids with the spec and confidence behind it.
-
Active Directory Audit User Group Memberships
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Create Group And Add Two Members
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Create Microsoft 365 Group With Owner
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Decommission Application
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Find User And Update Profile
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Offboard User From Group
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Onboard User To Existing Group
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Provision Application With Service Principal
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Provision User Into New Group
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Rename Group And List Members
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Self-Service Profile Review
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Transfer User Between Groups
— active-directory
· Identity & Access Management
BC-620.20 -
Active Directory Update Application Redirect URIs
— active-directory
· Identity & Access Management
BC-620.20 -
Amazon S3 Apply and Verify a Bucket ACL
— amazon-s3
· Identity & Access Management
BC-620.20 -
Artifactory Create Group-Scoped Access Token
— artifactory
· Identity & Access Management
BC-620.20 -
Artifactory Create User and Verify Membership
— artifactory
· Identity & Access Management
BC-620.20 -
Artifactory Onboard User with Group and Permission
— artifactory
· Identity & Access Management
BC-620.20 -
Dynatrace Audit Account Access
— dynatrace
· Identity & Access Management
BC-620.20 -
Dynatrace Onboard a User into a New Group
— dynatrace
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Audit API Key Activity and History
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Re-enable and Re-scope a Disabled API Key
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Rotate an API Key
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Authenticate and Inspect the Calling API Key
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Update a Trusted Profile Claim Rule
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Grant an Identity Access with a Policy
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Review and Deactivate an Access Policy
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Change the Roles on an Existing Policy
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Deprovision a Service ID
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Provision a Service ID with a Working API Key
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Decommission a Trusted Profile
— ibm
· Identity & Access Management
BC-620.20 -
IBM Cloud IAM Set Up a Trusted Profile for Federated Access
— ibm
· Identity & Access Management
BC-620.20 -
JFrog Access Create User With Group
— jfrog
· Identity & Access Management
BC-620.20 -
JFrog Grant Repository Permission
— jfrog
· Identity & Access Management
BC-620.20 -
JFrog Platform Rotate Access Token
— jfrog
· Identity & Access Management
BC-620.20 -
JFrog Secure Publish Artifact
— jfrog
· Vulnerability Management
BC-620.40 -
JFrog Xray Scan Artifact
— jfrog
· Vulnerability Management
BC-620.40 -
JFrog Xray Scan Build
— jfrog
· Vulnerability Management
BC-620.40 -
JFrog Xray Vulnerability Report
— jfrog
· Vulnerability Management
BC-620.40 -
Microsoft Entra Audit User Memberships
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Create Group With Member
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Create Microsoft 365 Group With Member
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Decommission Application
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Deprovision User
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Find And Update Application
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Find And Update Group
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Find And Update User
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Grant App Role Assignment
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Offboard User From Group
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Onboard User To Group
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Provision User
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Register Application With Service Principal
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Entra Rotate Application Secret
— microsoft-entra
· Identity & Access Management
BC-620.20 -
Microsoft Office 365 Deprovision User
— microsoft-office-365
· Identity & Access Management
BC-620.20 -
Microsoft Office 365 Notify New User
— microsoft-office-365
· Identity & Access Management
BC-620.20 -
Microsoft Office 365 Onboard User to Group
— microsoft-office-365
· Identity & Access Management
BC-620.20 -
Microsoft Office 365 Provision User
— microsoft-office-365
· Identity & Access Management
BC-620.20 -
Microsoft Office 365 Update User Profile
— microsoft-office-365
· Identity & Access Management
BC-620.20 -
Red Hat Keycloak Provision Realm Role and User
— red-hat
· Identity & Access Management
BC-620.20 -
Red Hat Keycloak Upsert a Realm User
— red-hat
· Identity & Access Management
BC-620.20 -
Red Hat OpenShift Configure Cluster Identity Provider
— red-hat
· Identity & Access Management
BC-620.20 -
Red Hat Quay Audit Repository Tags
— red-hat
· Vulnerability Management
BC-620.40 -
Red Hat Quay Create Repository, Tag Image, and Scan
— red-hat
· Vulnerability Management
BC-620.40 -
Red Hat Quay Provision Organization Robot and Repository
— red-hat
· Identity & Access Management
BC-620.20 -
Red Hat Satellite Host Errata Remediation
— red-hat
· Vulnerability Management
BC-620.40 -
Snowflake Create Role and Grant Privileges
— snowflake
· Identity & Access Management
BC-620.20 -
Snowflake Create User and Grant Role
— snowflake
· Identity & Access Management
BC-620.20 -
Temporal Deprovision a User and Confirm Removal
— temporal
· Identity & Access Management
BC-620.20 -
Temporal Issue an API Key for a New Service Account
— temporal
· Identity & Access Management
BC-620.20 -
Temporal Provision a User and Verify Membership
— temporal
· Identity & Access Management
BC-620.20 -
WebSphere Automation Vulnerability Remediation
— websphere
· Vulnerability Management
BC-620.40 -
Zoom Provision and Confirm a User
— zoom
· Identity & Access Management
BC-620.20 -
Zoom Onboard a User With a First Meeting
— zoom
· Identity & Access Management
BC-620.20 -
Zoom Resolve a User by Email
— zoom
· Identity & Access Management
BC-620.20