Armis Security website screenshot

Armis Security

Armis Security is an enterprise cyber exposure management and asset intelligence company whose cloud platform discovers, identifies, and secures every asset across IT, IoT, OT/ICS, IoMT, cloud, and cellular-IoT environments. Armis exposes a tenant-based REST API (served under /api/v1 on each customer's .armis.com host) using an OAuth2 client-credentials model that exchanges a Client ID and Client Secret for a short-lived JWT bearer token. It publishes a first-party Python SDK (armis-sdk), a Go CLI (armis-cli) for CI/CD application security scanning, and official Model Context Protocol servers (armis-appsec-mcp and armis-knowledge-mcp) for agent-native security scanning and knowledge access. Armis maintains a public Trust Center documenting SOC 2, ISO 27001/27017/27018, FedRAMP, and CSA STAR posture. Surfaced originally as a bain-capital-ventures portfolio company and enriched by the API Evangelist pipeline.

Armis Security is profiled on the APIs.io network. Tagged areas include Company, Security, Cybersecurity, Asset Intelligence, and Cyber Exposure Management.

Armis Security’s developer surface includes documentation, engineering blog, CLI, authentication, and 10 more developer resources.

19.3/100 emerging ▬ flat Agent 21/100 agent aware Full breakdown ↓
scored 2026-07-27 · rubric v0.5
AccessSelf serve
0 APIs 1 MCP Servers
CompanySecurityCybersecurityAsset IntelligenceCyber Exposure ManagementIoT SecurityOT SecurityApplication Security

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 19.3/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 8.7 / 20
Commercial Clarity 3.2 / 20
Operational Transparency 0.7 / 13
Governance 0.0 / 12
Discoverability 6.8 / 10
Agent readiness — 21/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/armis-security: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Armis Security Authentication

oauth2 · 2 schemes

SECURITY

Armis Security Domain Security

TLSv1.3 · DMARC

SECURITY

Armis Security Trust Center

SOC 2, ISO 27001, ISO 27017, ISO 27018, FedRAMP, CSA STAR

SECURITY

Resources

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 2

Pagination, idempotency, versioning, errors, and events

Build 4

SDKs, sample code, and the tooling you integrate with

Access & Security 4

Authentication, authorization, and security posture

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: armis-security
name: Armis Security
description: Armis Security is an enterprise cyber exposure management and asset intelligence company whose cloud platform
  discovers, identifies, and secures every asset across IT, IoT, OT/ICS, IoMT, cloud, and cellular-IoT environments. Armis
  exposes a tenant-based REST API (served under /api/v1 on each customer's <tenant>.armis.com host) using an OAuth2 client-credentials
  model that exchanges a Client ID and Client Secret for a short-lived JWT bearer token. It publishes a first-party Python
  SDK (armis-sdk), a Go CLI (armis-cli) for CI/CD application security scanning, and official Model Context Protocol servers
  (armis-appsec-mcp and armis-knowledge-mcp) for agent-native security scanning and knowledge access. Armis maintains a public
  Trust Center documenting SOC 2, ISO 27001/27017/27018, FedRAMP, and CSA STAR posture. Surfaced originally as a bain-capital-ventures
  portfolio company and enriched by the API Evangelist pipeline.
url: https://raw.githubusercontent.com/api-evangelist/armis-security/refs/heads/main/apis.yml
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://avatars.githubusercontent.com/u/32813597?v=4
x-type: company
x-source: vc-portfolio
x-backed-by:
- bain-capital-ventures
x-tier: stub
x-tier-reason: portfolio-lead
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-18'
tags:
- Company
- Security
- Cybersecurity
- Asset Intelligence
- Cyber Exposure Management
- IoT Security
- OT Security
- Application Security
apis: []
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://www.armis.com/
- type: Documentation
  url: https://armis-python-sdk.readthedocs.io
- type: Blog
  url: https://www.armis.com/blog/
- type: GitHubOrganization
  url: https://github.com/ArmisSecurity
- type: TrustCenter
  url: security/armis-security-trust-center.yml
- type: Compliance
  url: https://trust.armis.com/
- type: Packages
  url: packages/armis-security-packages.yml
- type: SDKs
  url: packages/armis-security-packages.yml
- type: CLI
  url: cli/armis-security-cli.yml
- type: MCPServer
  url: mcp/armis-security-mcp.yml
- type: Authentication
  url: authentication/armis-security-authentication.yml
- type: Conformance
  url: conformance/armis-security-conformance.yml
- type: Conventions
  url: conventions/armis-security-conventions.yml
- type: DomainSecurity
  url: security/armis-security-domain-security.yml
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence