Kondukto

Kondukto — now shipped as Invicti ASPM following Invicti Security's acquisition of the company — is an Application Security Posture Management platform that centralizes and automates the AppSec vulnerability management lifecycle. It ingests, deduplicates and correlates findings from more than eighty security scanners across SAST, DAST, SCA, container, infrastructure and pentest testing, enriches them with CWE, CVSS, EPSS, CISA KEV, EUVD threat intelligence and VEX exploitability data, and routes them to owning teams through Jira, GitLab, ServiceNow and webhook issue managers. Kondukto publishes a documented REST API v2 covering projects, products, teams, labels, scans and vulnerabilities, an open-source Go command-line client (KDT) that drives the same API from CI/CD pipelines, and a webhook surface for both outbound platform events and customer-hosted issue managers. The platform is deployed per customer, so the API host is deployment-specific.

Kondukto publishes 11 APIs on the APIs.io network, including Authorization Managers API, Events API, Health API, and 8 more. Tagged areas include Company, Application Security, ASPM, Vulnerability Management, and DevSecOps.

The Kondukto catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Kondukto’s developer surface includes documentation, API reference, getting-started guide, engineering blog, support, pricing, signup flow, and 29 more developer resources.

🌐 Visit website 📡 Source on GitHub
67.7/100 strong ▬ flat Agent 78/100 agent native Full breakdown ↓
scored 2026-07-23 · rubric v0.5
AccessPaidSelf serve
11 APIs 1 MCP Servers
CompanyApplication SecurityASPMVulnerability ManagementDevSecOpsSecurity OrchestrationSASTDASTSCASoftware Composition AnalysisContainer SecuritySBOMSecurity TestingCI/CDSecurity

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-23 · rubric v0.5
Composite quality — 67.7/100 · strong
Contract Quality 18.2 / 25
Developer Ergonomics 16.1 / 20
Commercial Clarity 16.3 / 20
Operational Transparency 7.2 / 13
Governance 0.0 / 12
Discoverability 10.0 / 10
Agent readiness — 78/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 3 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/kondukto: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 11

Individual APIs this provider publishes, each with its own machine-readable definition.

Kondukto Authorization Managers API

The Authorization Managers API from Kondukto — 1 operation(s) for authorization managers.

Kondukto Events API

The Events API from Kondukto — 1 operation(s) for events.

Kondukto Health API

The Health API from Kondukto — 1 operation(s) for health.

Kondukto Labels API

The Labels API from Kondukto — 3 operation(s) for labels.

Kondukto Products API

The Products API from Kondukto — 2 operation(s) for products.

Kondukto Projects API

The Projects API from Kondukto — 7 operation(s) for projects.

Kondukto Scanners API

The Scanners API from Kondukto — 1 operation(s) for scanners.

Kondukto Scans API

The Scans API from Kondukto — 10 operation(s) for scans.

Kondukto Teams API

The Teams API from Kondukto — 5 operation(s) for teams.

Kondukto Users API

The Users API from Kondukto — 2 operation(s) for users.

Kondukto Vulnerabilities API

The Vulnerabilities API from Kondukto — 9 operation(s) for vulnerabilities.

Scroll for all 11

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

kondukto-mcp.yml

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Kondukto Plans

2 plans

PLANS

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Kondukto Webhooks

ASYNCAPI

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Kondukto Authentication

apiKey · 1 scheme

SECURITY

Kondukto Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Kondukto Vulnerability Disclosure

security.txt · contact published

SECURITY

Kondukto Trust Center

SOC 2 Type 2, ISO 27001:2025

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Kondukto Agentic Access

51 operations · 21 acting

51 operations · 21 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 GettingStarted
GettingStarted
 SignUp
SignUp

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

WellKnown
WellKnown
 MCPServer
MCPServer
 AgentSkill
AgentSkill
 LLMsTxt
LLMsTxt
 AgenticAccess
AgenticAccess

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Conventions
Conventions
 ErrorCatalog
ErrorCatalog
 DataModel
DataModel
 Lifecycle
Lifecycle
 Conformance
Conformance
 Webhooks
Webhooks

Build 4

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 Packages
Packages
 SDKs
SDKs
 CLI
CLI

Access & Security 7

Authentication, authorization, and security posture

Security
Security
 Compliance
Compliance
 TrustCenter
TrustCenter
 VulnerabilityDisclosure
VulnerabilityDisclosure
 SecurityTxt
SecurityTxt
 DomainSecurity
DomainSecurity
 Authentication
Authentication

Scroll for all 7

Operate 3

Status, limits, changes, and where to get help

Support
Support
 StatusPage
StatusPage
 ChangeLog
ChangeLog

Commercial 4

Pricing, plans, and the legal terms of use

Pricing
Pricing
 TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy
 Plans
Plans

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Source (apis.yml)

apis.yml Raw ↑ 
aid: kondukto
name: Kondukto
description: Kondukto — now shipped as Invicti ASPM following Invicti Security's acquisition of the company — is an Application
  Security Posture Management platform that centralizes and automates the AppSec vulnerability management lifecycle. It ingests,
  deduplicates and correlates findings from more than eighty security scanners across SAST, DAST, SCA, container, infrastructure
  and pentest testing, enriches them with CWE, CVSS, EPSS, CISA KEV, EUVD threat intelligence and VEX exploitability data,
  and routes them to owning teams through Jira, GitLab, ServiceNow and webhook issue managers. Kondukto publishes a documented
  REST API v2 covering projects, products, teams, labels, scans and vulnerabilities, an open-source Go command-line client
  (KDT) that drives the same API from CI/CD pipelines, and a webhook surface for both outbound platform events and customer-hosted
  issue managers. The platform is deployed per customer, so the API host is deployment-specific.
accessModel:
  pricing: paid
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Paid · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://cdn.kondukto.io/img/logo/a990cbe5-f31f-49a0-a135-2ea0b7abb0ec.png
url: https://raw.githubusercontent.com/api-evangelist/kondukto/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- 500-global
x-status: acquired
x-acquired-by: Invicti Security
x-product-name: Invicti ASPM
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-19'
tags:
- Company
- Application Security
- ASPM
- Vulnerability Management
- DevSecOps
- Security Orchestration
- SAST
- DAST
- SCA
- Software Composition Analysis
- Container Security
- SBOM
- Security Testing
- CI/CD
- Security
apis:
- aid: kondukto:kondukto-authorization-managers-api
  name: Kondukto Authorization Managers API
  description: The Authorization Managers API from Kondukto — 1 operation(s) for authorization managers.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Authorization Managers
  properties:
  - type: OpenAPI
    url: openapi/kondukto-authorization-managers-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-events-api
  name: Kondukto Events API
  description: The Events API from Kondukto — 1 operation(s) for events.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Events
  properties:
  - type: OpenAPI
    url: openapi/kondukto-events-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-health-api
  name: Kondukto Health API
  description: The Health API from Kondukto — 1 operation(s) for health.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Health
  properties:
  - type: OpenAPI
    url: openapi/kondukto-health-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-labels-api
  name: Kondukto Labels API
  description: The Labels API from Kondukto — 3 operation(s) for labels.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Labels
  properties:
  - type: OpenAPI
    url: openapi/kondukto-labels-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-products-api
  name: Kondukto Products API
  description: The Products API from Kondukto — 2 operation(s) for products.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Products
  properties:
  - type: OpenAPI
    url: openapi/kondukto-products-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-projects-api
  name: Kondukto Projects API
  description: The Projects API from Kondukto — 7 operation(s) for projects.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Projects
  properties:
  - type: OpenAPI
    url: openapi/kondukto-projects-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-scanners-api
  name: Kondukto Scanners API
  description: The Scanners API from Kondukto — 1 operation(s) for scanners.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Scanners
  properties:
  - type: OpenAPI
    url: openapi/kondukto-scanners-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-scans-api
  name: Kondukto Scans API
  description: The Scans API from Kondukto — 10 operation(s) for scans.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Scans
  properties:
  - type: OpenAPI
    url: openapi/kondukto-scans-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-teams-api
  name: Kondukto Teams API
  description: The Teams API from Kondukto — 5 operation(s) for teams.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Teams
  properties:
  - type: OpenAPI
    url: openapi/kondukto-teams-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-users-api
  name: Kondukto Users API
  description: The Users API from Kondukto — 2 operation(s) for users.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/kondukto-users-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
- aid: kondukto:kondukto-vulnerabilities-api
  name: Kondukto Vulnerabilities API
  description: The Vulnerabilities API from Kondukto — 9 operation(s) for vulnerabilities.
  humanURL: https://docs.kondukto.io/reference/starting-with-kondukto-api
  baseURL: https://api.kondukto.io/api/v2
  tags:
  - Vulnerabilities
  properties:
  - type: OpenAPI
    url: openapi/kondukto-vulnerabilities-api-openapi.yml
  - type: Documentation
    url: https://docs.kondukto.io/docs
  - type: APIReference
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: GettingStarted
    url: https://docs.kondukto.io/reference/starting-with-kondukto-api
  - type: Authentication
    url: authentication/kondukto-authentication.yml
  - type: ErrorCatalog
    url: errors/kondukto-problem-types.yml
  - type: DataModel
    url: data-model/kondukto-data-model.yml
  - type: Conventions
    url: conventions/kondukto-conventions.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Website
  url: https://kondukto.io
- type: DeveloperPortal
  url: https://docs.kondukto.io/docs
- type: Documentation
  url: https://docs.kondukto.io/docs
- type: APIReference
  url: https://docs.kondukto.io/reference/starting-with-kondukto-api
- type: GettingStarted
  url: https://docs.kondukto.io/reference/starting-with-kondukto-api
- type: GitHubOrganization
  url: https://github.com/kondukto-io
- type: Blog
  url: https://www.invicti.com/blog
- type: Support
  url: https://docs.invicti.com/
- type: Pricing
  url: https://www.invicti.com/pricing
- type: SignUp
  url: https://www.invicti.com/get-demo
- type: TermsOfService
  url: https://www.invicti.com/legal/terms
- type: PrivacyPolicy
  url: https://www.invicti.com/compliance/privacy-policy
- type: StatusPage
  url: https://status.invicti.com
- type: Security
  url: https://www.invicti.com/.well-known/security.txt
- type: Compliance
  url: https://www.invicti.com/compliance
- type: TrustCenter
  url: security/kondukto-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/kondukto-vulnerability-disclosure.yml
- type: SecurityTxt
  url: well-known/kondukto-security.txt
- type: WellKnown
  url: well-known/kondukto-well-known.yml
- type: DomainSecurity
  url: security/kondukto-domain-security.yml
- type: Authentication
  url: authentication/kondukto-authentication.yml
- type: Conventions
  url: conventions/kondukto-conventions.yml
- type: ErrorCatalog
  url: errors/kondukto-problem-types.yml
- type: DataModel
  url: data-model/kondukto-data-model.yml
- type: Lifecycle
  url: lifecycle/kondukto-lifecycle.yml
- type: ChangeLog
  url: changelog/kondukto-changelog.yml
- type: Conformance
  url: conformance/kondukto-conformance.yml
- type: Packages
  url: packages/kondukto-packages.yml
- type: SDKs
  url: packages/kondukto-packages.yml
- type: CLI
  url: cli/kondukto-cli.yml
- type: Plans
  url: plans/kondukto-plans.yml
- type: Webhooks
  url: asyncapi/kondukto-webhooks.yml
- type: MCPServer
  url: mcp/kondukto-mcp.yml
- type: AgentSkill
  url: skills/_index.yml
- type: LLMsTxt
  url: llms/kondukto-llms.txt
- type: AgenticAccess
  url: agentic-access/kondukto-agentic-access.yml
x-enrichment:
  date: '2026-07-19'
  status: backfilled
  pass: local-v1
  note: backfilled from .gitignore signal + verified work evidence