Armor
Armor (legal name Armor Defense Inc.) is a cybersecurity company headquartered in Plano, Texas, founded as FireHost in 2009 by Chris Drake and rebranded as Armor as its portfolio expanded from secure cloud hosting into managed security. Armor sells vendor-agnostic, cloud-native managed detection and response (Armor MDR), compliant managed private cloud (Armor Enterprise Cloud), the Armor Agent workload protection agent (formerly Armor Anywhere), and compliance and offensive-security professional services, to more than 1,700 organizations across 40 countries with a 24/7 follow-the-sun SOC operating from Plano, London, Singapore and Pune. Armor publishes a public developer portal at developer.armor.com that serves sixteen machine-readable contracts through ReDoc: four Swagger 2.0 documents for the original v1 Armor Services API on api.armor.com (account management, infrastructure, security and support, 254 operations) and twelve OpenAPI 3.0.3 documents for the v2 platform on *.api.secure-prod.services (accounts, agent management, compliance and CSPM, container security, incident management, infrastructure management, log management, notifications, webhooks, the unified MDR public API, and the ARMOR-PSK and FH-AUTH authentication contracts). Armor also publishes a detailed first-party llms.txt at armor.com/llms.txt and holds SOC 2 Type II, HITRUST CSF, PCI DSS Level 1 Service Provider, ISO 27001, TX-RAMP Level 2, HIPAA and Data Privacy Framework attestations.
Armor publishes 70 APIs on the APIs.io network, including Access Control Lists API, Account API, Account Management API, and 67 more. Tagged areas include Company, Cybersecurity, Managed Detection and Response, Cloud Security, and Compliance.
The Armor catalog on APIs.io includes 1 event-driven AsyncAPI specification.
Armor’s developer surface includes documentation, API reference, engineering blog, support, pricing, signup flow, authentication, and 22 more developer resources.
Kin Score
APIs 70
Individual APIs this provider publishes, each with its own machine-readable definition.
Armor Access Control Lists API
Operations for managing ACLs (deprecated)
Armor Account API
Account management operations
Armor Account Management API
The Account Management API from Armor — 47 operation(s) for account management.
Armor Account Primary Billing API
The AccountPrimaryBilling API from Armor — 1 operation(s) for accountprimarybilling.
Armor Active Response API
The ActiveResponse API from Armor — 1 operation(s) for activeresponse.
Armor Advanced Backup API
The Advanced Backup API from Armor — 38 operation(s) for advanced backup.
Armor AIP - Entity Intelligence API
Threat intelligence data for security entities
Armor AIP - Incident Data API
AI-processed incident data and analytics
Armor Assessments API
Assessment account management
Armor Authentication API
FH-AUTH authentication flow endpoints. ## Flow Overview 1. POST `/auth/authorize` with credentials → receive authorization code 2. POST `/auth/token` with code → receive access ...
Armor Cloud Connections API
Cloud connection management operations
Armor Connector API
Connector management operations
Armor CSPM Connector API
Cloud Security Posture Management cloud connectors
Armor CSPM Control Remediation API
CSPM control remediation information
Armor CSPM Policies API
CSPM policy management
Armor CSPM Policy Controls API
CSPM policy controls management
Armor CSPM Report API
CSPM report operations
Armor CSPM Report Configuration API
CSPM report configuration management
Armor CSPM Resources API
CSPM resource management
Armor CSPM Summary API
CSPM cloud connector summary
Armor CSPM Usage API
CSPM cloud connector usage
Armor Defender - Investigation API
Investigation package and live response operations
Armor Defender - Machine Actions API
Execute and manage actions on Microsoft Defender machines
Armor Defender - Machines API
Microsoft Defender machine/device management
Armor Detection Rules API
Operations for retrieving and managing detection rules
Armor Detections API
The detection resource enables an API customer to build a webhook detection configuration.
Armor EDR API
Endpoint Detection and Response operations
Armor Events API
The event-type resource enables an API user to maintain the event types.
Armor Flow Sources API
Operations for managing flow sources
Armor Health API
Service health and monitoring endpoints
Armor Health Monitoring Status API
Health monitoring status operations
Armor Image API
Image management operations
Armor Infrastructure API
The Infrastructure API from Armor — 35 operation(s) for infrastructure.
Armor JSM - Incidents API
Security incident management
Armor JSM - Metrics API
Metrics aggregation and reporting
Armor JSM - Organizations API
JSM organization management
Armor JSM - Service Requests API
Service request management
Armor Keys API
The Keys API from Armor — 2 operation(s) for keys.
Armor Log Endpoints API
Operations for managing log endpoints
Armor Log Groups API
Operations for managing log groups
Armor Log Sources API
Operations for managing log sources
Armor Malware Configuration API
Malware configuration APIs. These APIs are only available for specific partners.
Armor Meta API
Meta resources and utility operations
Armor Network Services API
The Network Services API from Armor — 23 operation(s) for network services.
Armor Notifications API
The notification resource enables an API customer to build a webhook notification configuration.
Armor Preferences API
The Preferences resource describes a list of user-level preferences.
Armor Registry API
Registry management operations
Armor Reports - MSR API
Monthly Security Report file management and retrieval
Armor Scheduled Tasks API
The tasks resource enables an API customer to schedule, cancel and view agent CLI operations.
Armor Secure Notes API
The secure notes resource allows users to securely store and manage sensitive information such as passwords, credentials, and other confidential data.
Armor Security Analytics API
The Security Analytics API from Armor — 2 operation(s) for security analytics.
Armor Security API
The Security API from Armor — 29 operation(s) for security.
Armor Security Detection Events API
Security detection event operations
Armor Security Detections API
Security detection operations
Armor Security Detections Overview API
Security detections overview operations
Armor Security Incidents API
The Security Incidents API from Armor — 2 operation(s) for security incidents.
Armor Sensor API
Sensor management operations
Armor Support API
The Support API from Armor — 16 operation(s) for support.
Armor Tags API
Tag management operations
Armor TI - Customer Intelligence API
Customer-specific threat intelligence
Armor TI - GraphQL API
Proxy endpoint for OpenCTI GraphQL queries
Armor TI - Threat Actors API
Retrieve threat actor intelligence data
Armor Toolbox API
Infrastructure management toolbox operations
Armor Tours API
The tours resource describes a list of UI tours that help users learn about features in the ARMOR Management Portal. The preferences stored in this resource aid the portal in de...
Armor Trend API
Trend AV report operations
Armor User API
User profile and account information
Armor Utilization API
The Utilization API from Armor — 2 operation(s) for utilization.
Armor VS Exclusions API
Vulnerability scan exclusions management
Armor VS Reports API
Vulnerability scan reports
Armor Vulnerability Scanning API
Vulnerability scanning operations
Scroll for all 70
MCP Servers 1
Model Context Protocol servers that expose these APIs to AI agents.
armor-mcp.yml
MCP SERVEREvent Specifications 1
AsyncAPI definitions for this provider's event-driven and streaming APIs.
Armor Webhooks Events
ASYNCAPISecurity Posture 2
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Scopes 1
OAuth scopes governing access to this provider's APIs.
Agentic Access 1
Recommended x-agentic-access execution contracts for AI agents.
Resources
Get Started 2
Portal, sign-up, and the first successful call
Documentation 2
Reference material describing how the API behaves
Agent Surfaces 4
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 6
Pagination, idempotency, versioning, errors, and events
Build 3
SDKs, sample code, and the tooling you integrate with
Access & Security 4
Authentication, authorization, and security posture
Operate 2
Status, limits, changes, and where to get help
Commercial 3
Pricing, plans, and the legal terms of use
Company 2
The organization behind the API
Other 1
Properties that don't map to a standard resource type