Kenna Security
Kenna Security is the risk-based vulnerability management platform now part of Cisco as Cisco Vulnerability Management. Founded in Chicago and acquired by Cisco in 2021, the platform ingests scanner, asset, and threat-intelligence data to prioritize vulnerabilities by real-world exploitability and business risk. It exposes a REST API (the Kenna / Cisco Vulnerability Management API) at api.kennasecurity.com covering assets, asset groups, applications, findings, fixes, vulnerabilities, vulnerability intelligence, connectors, data exports, dashboards, metrics, roles, and users. The API uses an X-Risk-Token API-key header over HTTPS, page-number pagination, and JSON payloads. Kenna also publishes a first-party open-source Scripting Toolkit on GitHub for building connectors and integrations. Sector: cybersecurity / vulnerability management.
Kenna Security publishes 29 API contracts indexed on the APIs.io network, including APPLICATION REPORTING API, APPLICATIONS API, ASSET GROUP REPORTING API, and 26 more. Tagged areas include Company, Cybersecurity, Vulnerability Management, Risk-Based Prioritization, and Threat Intelligence.
The Kenna Security catalog on APIs.io includes 1 JSON-LD context and 1 Spectral governance ruleset.
Kenna Security’s developer surface includes documentation, API reference, getting-started guide, changelog, engineering blog, support, authentication, and 24 more developer resources.
Kin Score
Markets this provider is in provisional
The Kin Score Market layer reads a provider inside its market: its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted: not part of the Kin Score or agent readiness.
| Market | Position | Depth | Registered MCP server | Declares compatibility |
|---|---|---|---|---|
| Cisco DevNet Ecosystem (builders on Meraki, Catalyst, ISE, ThousandEyes, Splunk) | builds-on | 17.2 (thin) | - | - |
| ServiceNow Store (partner apps + ServiceNow Certified App) | builds-on | 17.2 (thin) | - | - |
Registered MCP server and declares compatibility are report only — not weighted. Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
APIs 29
Individual APIs this provider publishes, each with its own machine-readable definition.
Cisco Vulnerability Management API (Kenna)
REST API for the Kenna / Cisco Vulnerability Management platform: manage assets, asset groups, applications, findings, fixes, vulnerabilities, vulnerability intelligence, connec...
Kenna Security APPLICATION REPORTING API
The APPLICATION REPORTING API from Kenna Security — 3 operation(s) for application reporting.
Kenna Security APPLICATIONS API
The APPLICATIONS API from Kenna Security — 2 operation(s) for applications.
Kenna Security ASSET GROUP REPORTING API
The ASSET GROUP REPORTING API from Kenna Security — 12 operation(s) for asset group reporting.
Kenna Security ASSET GROUPS API
The ASSET GROUPS API from Kenna Security — 6 operation(s) for asset groups.
Kenna Security ASSET TAGGING API
The ASSET TAGGING API from Kenna Security — 1 operation(s) for asset tagging.
Kenna Security ASSETS API
The ASSETS API from Kenna Security — 7 operation(s) for assets.
Kenna Security AUDIT LOGS API
The AUDIT LOGS API from Kenna Security — 1 operation(s) for audit logs.
Kenna Security CONNECTOR RUNS API
The CONNECTOR RUNS API from Kenna Security — 4 operation(s) for connector runs.
Kenna Security CONNECTORS API
The CONNECTORS API from Kenna Security — 2 operation(s) for connectors.
Kenna Security CVES API
The CVES API from Kenna Security — 1 operation(s) for cves.
Kenna Security DASHBOARD GROUPS API
The DASHBOARD GROUPS API from Kenna Security — 2 operation(s) for dashboard groups.
Kenna Security DATA EXPORT API
The DATA EXPORT API from Kenna Security — 3 operation(s) for data export.
Kenna Security ENTITLEMENTS API
The ENTITLEMENTS API from Kenna Security — 1 operation(s) for entitlements.
Kenna Security FINDINGS API
The FINDINGS API from Kenna Security — 3 operation(s) for findings.
Kenna Security FIXES API
The FIXES API from Kenna Security — 4 operation(s) for fixes.
Kenna Security HIGH RISK VULNERABILITY DENSITIES API
The HIGH RISK VULNERABILITY DENSITIES API from Kenna Security — 1 operation(s) for high risk vulnerability densities.
Kenna Security INFERENCE V1 (Legacy) API
The INFERENCE V1 (Legacy) API from Kenna Security — 2 operation(s) for inference v1 (legacy).
Kenna Security INFERENCE V2 (Legacy) API
The INFERENCE V2 (Legacy) API from Kenna Security — 1 operation(s) for inference v2 (legacy).
Kenna Security INFERENCE V3 - Cves API
The INFERENCE V3 - Cves API from Kenna Security — 1 operation(s) for inference v3 - cves.
Kenna Security INFERENCE V3 - Osquery API
The INFERENCE V3 - Osquery API from Kenna Security — 1 operation(s) for inference v3 - osquery.
Kenna Security INTEGRATIONS API
The INTEGRATIONS API from Kenna Security — 2 operation(s) for integrations.
Kenna Security REMEDIATION SCORE API
The REMEDIATION SCORE API from Kenna Security — 1 operation(s) for remediation score.
Kenna Security ROLES API
The ROLES API from Kenna Security — 7 operation(s) for roles.
Kenna Security SLA ADHERENCE API
The SLA ADHERENCE API from Kenna Security — 1 operation(s) for sla adherence.
Kenna Security STACKS API
The STACKS API from Kenna Security — 4 operation(s) for stacks.
Kenna Security USERS API
The USERS API from Kenna Security — 3 operation(s) for users.
Kenna Security VULNERABILITIES API
The VULNERABILITIES API from Kenna Security — 8 operation(s) for vulnerabilities.
Kenna Security VULNERABILITY INTELLIGENCE+ API
The VULNERABILITY INTELLIGENCE+ API from Kenna Security — 9 operation(s) for vulnerability intelligence+.
Scroll for all 29
Semantic Vocabularies 1
JSON-LD contexts and semantic vocabularies used across these APIs.
Kenna Security Context
JSON-LDSpectral Rules 1
Spectral governance rulesets for linting and validating these APIs.
Kenna Security API Rules
SPECTRALJSON Schema 12
Standalone JSON Schema definitions for this provider's data models.
create_vulnerability_request_body_schema
JSON SCHEMAexported_finding
JSON SCHEMAexported_vulnerability
JSON SCHEMAexport_settings_request_body_schema
JSON SCHEMAodata_cve_response_schema
JSON SCHEMAos_inference_response_schema
JSON SCHEMAv3_os_inference_response_schema
JSON SCHEMAvulnerability_definition_schema
JSON SCHEMAwindows_os_inference_request_body_schema
JSON SCHEMAScroll for all 12
Security Posture 2
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Agentic Access 1
Recommended x-agentic-access execution contracts for AI agents.
Resources
Get Started 2
Portal, sign-up, and the first successful call
Documentation 2
Reference material describing how the API behaves
Agent Surfaces 2
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 8
Pagination, idempotency, versioning, errors, and events
Scroll for all 8
Build 4
SDKs, sample code, and the tooling you integrate with
Access & Security 2
Authentication, authorization, and security posture
Operate 5
Status, limits, changes, and where to get help
Company 2
The organization behind the API
Other 4
Properties that don't map to a standard resource type
Source (apis.yml)
Kenna Security API — frequently asked questions
Does Kenna Security have an API?
Yes. APIs.io lists 29 APIs from Kenna Security, including Cisco Vulnerability Management API (Kenna), Kenna Security APPLICATION REPORTING API and Kenna Security APPLICATIONS API, and 26 more.
Is there an OpenAPI specification for the Kenna Security API?
Yes. APIs.io indexes 28 OpenAPI specifications for Kenna Security, each linked for download from this page.
How do I authenticate with the Kenna Security API?
Kenna Security uses bearer-token authentication (apiKey · 1 scheme). The details are profiled on APIs.io as Kenna Security Authentication.
Is the Kenna Security API ready for AI agents?
Kenna Security has a Kin Score of 44.8 out of 100 (developing) and an Agent Readiness score of 28.6 (agent-ready), scored by API Evangelist on 2026-10-31.
Work with this as data
Every provider here is available over the APIs.io API and to AI agents over MCP.