# CyCognito

**Canonical:** https://apis.io/providers/cycognito/  
**Website:** https://www.cycognito.com/  
**APIs profiled:** 1

CyCognito is a cybersecurity company providing an external attack surface management (EASM) and exposure management platform. Its cloud-native platform continuously discovers, maps, and tests an organization's internet-exposed assets—domains, IPs, web apps, APIs, and cloud environments—to surface and validate critical exposures before attackers exploit them. The CyCognito API V1 is a REST API (API-key authenticated) that lets you query assets and issues, manage attack-surface scope, attribute assets to organizations, manage users and cloud connectors, run exports and executive reports, and verify the identity of scanner IPs. CyCognito is backed by Accel and Lightspeed Venture Partners.

## Kin Score — 45.9 / 100 (developing)

Scored 2026-08-30 under rubric 0.17.2. Trend: flat (-0.6 from 46.5).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 51.4 |
| Governance | 18.2 |
| Contract Governance | 18.2 |
| Operational Transparency | 21.1 |
| Developer Ergonomics | 42.3 |
| Commercial Clarity | 60.5 |
| Access Clarity | 60.5 |

## Agent readiness — 38.7 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | served |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | verified |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | served |
| Protected Resource Metadata | no |
| Dynamic Client Registration | yes |
| Agentic Commerce | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (12)

- **CyCognito Assets API** — The Assets API from CyCognito — 6 operation(s) for assets.
- **CyCognito Audit Logs API** — The Audit Logs API from CyCognito — 1 operation(s) for audit logs.
- **CyCognito Cloud Connectors API** — The Cloud Connectors API from CyCognito — 4 operation(s) for cloud connectors.
- **CyCognito Export Data API** — The Export Data API from CyCognito — 6 operation(s) for export data.
- **CyCognito Issues API** — The Issues API from CyCognito — 9 operation(s) for issues.
- **CyCognito Organizations API** — The Organizations API from CyCognito — 2 operation(s) for organizations.
- **CyCognito Realm API** — The Realm API from CyCognito — 2 operation(s) for realm.
- **CyCognito Reports API** — The Reports API from CyCognito — 2 operation(s) for reports.
- **CyCognito Revalidation API** — The Revalidation API from CyCognito — 1 operation(s) for revalidation.
- **CyCognito Scope Management API** — The Scope Management API from CyCognito — 1 operation(s) for scope management.
- **CyCognito Users API** — The Users API from CyCognito — 2 operation(s) for users.
- **CyCognito Verify IPs API** — The Verify IPs API from CyCognito — 1 operation(s) for verify ips.

## MCP servers (1)

- **CyCognito MCP Server**

## Agentic access (1)

- **Cycognito Agentic Access** — 43 operations · 31 acting

## Security (4)

- **Cycognito Authentication** — apiKey · 1 scheme
- **Cycognito Domain Security** — TLSv1.3 · HSTS · DNSSEC · DMARC
- **Cycognito Vulnerability Disclosure** — Hackerone · contact published
- **Cycognito Trust Center** — SOC 2 Type II, ISO/IEC 27001, GDPR

## Tags

Company, Cybersecurity, Attack Surface Management, Exposure Management, Security, Vulnerability Management, Cloud Security, API Security

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/cycognito/). Scores are computed from the provider's own public artifacts under a published rubric.