# BitSight

**Canonical:** https://apis.io/providers/bitsight/  
**Website:** http://www.bitsight.com/  
**APIs profiled:** 1

Bitsight is a global cyber risk intelligence platform that combines security ratings, external attack surface management (EASM), third-party risk management (TPRM), and cyber threat intelligence (CTI) in a single data model. Its outside-in, agentless monitoring produces continuously updated security ratings validated against real-world breach likelihood, powering vendor risk workflows, insurance underwriting, and capital-markets portfolio oversight for more than 3,500 organizations across 60+ countries. Bitsight exposes a RESTful HTTP API at api.bitsighttech.com (companies, portfolios, ratings, findings, alerts, and CTI) authenticated with an API token over HTTP Basic, documented in the Bitsight Knowledge Base and an interactive Stoplight reference.

## Kin Score — 29.1 / 100 (thin)

Scored 2026-08-30 under rubric 0.17.2. Trend: flat (+0.0 from 29.1).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 10.5 |
| Developer Ergonomics | 57.1 |
| Commercial Clarity | 43.4 |
| Access Clarity | 43.4 |

## Agent readiness — 2.5 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **Bitsight API** — RESTful API for Bitsight security ratings, portfolio and company data, findings, alerts, and cyber threat intelligence. Authenticated with an API token via HTTP Basic over HTTPS...

## Security (4)

- **Bitsight Authentication** — http · 1 scheme
- **Bitsight Domain Security** — TLSv1.3 · HSTS · DMARC
- **Bitsight Vulnerability Disclosure** — Bugcrowd · security.txt · contact published
- **Bitsight Trust Center** — SOC 2 Type 2, ISO 27001, HIPAA

## Tags

Company, Security, Cyber Risk, Security Ratings, Third-Party Risk Management, Attack Surface Management, Threat Intelligence, Vendor Risk

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/bitsight/). Scores are computed from the provider's own public artifacts under a published rubric.