Method Security

Method Security is a cybersecurity company delivering cyber resilience to the U.S. Government and critical enterprises through an AI-native, full-spectrum security platform. The Method Platform blends offensive and defensive operations across cloud, on-premise, and internet-denied environments, and ships two flagship products: Bastion (digital-twin driven exposure and attack-surface management that maps, validates, and controls resources and attack paths) and Reaper/Operations (software-defined offensive operations and red-team execution). The platform is built around an Ontology object model, AI Agents governed by granular Policies, Jackal C2 agents, Overwatch terminal session recording, and an Explorer/Automator workspace. Method exposes a public REST API (OpenAPI 3.1) through the method-api-gateway, a published Python SDK (methodsdk), a docs MCP server, and OAuth 2.0 client-credentials authentication backed by Keycloak. Backed by OpenAI, Palantir, Andreessen Horowitz, General Catalyst, and Blackstone.

Method Security publishes 10 APIs on the APIs.io network, including audit API, auth API, blueprints API, and 7 more. Tagged areas include Company, Security, Cybersecurity, Offensive Security, and Exposure Management.

The Method Security catalog on APIs.io includes 1 event-driven AsyncAPI specification.

Method Security’s developer surface includes documentation, API reference, getting-started guide, engineering blog, authentication, CLI, changelog, and 24 more developer resources.

🌐 Visit website 📡 Source on GitHub
56.2/100 developing ▬ flat Agent 75/100 agent native Full breakdown ↓
scored 2026-07-27 · rubric v0.5
AccessSelf serve
10 APIs 1 MCP Servers
CompanySecurityCybersecurityOffensive SecurityExposure ManagementAttack Surface ManagementVulnerability ManagementRed TeamAI AgentsGovernment

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-27 · rubric v0.5
Composite quality — 56.2/100 · developing
Contract Quality 14.6 / 25
Developer Ergonomics 15.2 / 20
Commercial Clarity 7.4 / 20
Operational Transparency 5.1 / 13
Governance 0.0 / 12
Discoverability 10.0 / 10
Agent readiness — 75/100 · agent native
Machine-Readable Contract 18 / 18
Agentic Access Contract 15 / 15
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 6 / 6
Agent Skills 5 / 5
Well-Known Catalog 4 / 4
Consent & Bot Identity 0 / 3
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/method-security: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 10

Individual APIs this provider publishes, each with its own machine-readable definition.

Method Security audit API

The audit API from Method Security — 1 operation(s) for audit.

Method Security auth API

The auth API from Method Security — 1 operation(s) for auth.

Method Security blueprints API

The blueprints API from Method Security — 2 operation(s) for blueprints.

Method Security environments API

The environments API from Method Security — 2 operation(s) for environments.

Method Security issues API

The issues API from Method Security — 2 operation(s) for issues.

Method Security reports API

The reports API from Method Security — 1 operation(s) for reports.

Method Security signals API

The signals API from Method Security — 1 operation(s) for signals.

Method Security skills API

The skills API from Method Security — 3 operation(s) for skills.

Method Security system API

The system API from Method Security — 1 operation(s) for system.

Method Security targets API

The targets API from Method Security — 3 operation(s) for targets.

Scroll for all 10

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

method-security-mcp.yml

MCP SERVER

Event Specifications 1

AsyncAPI definitions for this provider's event-driven and streaming APIs.

Method Security Webhooks

ASYNCAPI

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Method Security Authentication

http · 1 scheme

SECURITY

Method Security Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Method Security Vulnerability Disclosure

contact published

SECURITY

Method Security Trust Center

SOC 2

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Method Security Agentic Access

18 operations · 10 acting · 3 human-in-the-loop

18 operations · 10 acting

AGENTIC

Resources

Get Started 2

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 GettingStarted
GettingStarted

Documentation 2

Reference material describing how the API behaves

Documentation
Documentation
 APIReference
APIReference

Agent Surfaces 5

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess
 MCPServer
MCPServer
 LLMsTxt
LLMsTxt
 WellKnown
WellKnown
 AgentSkill
AgentSkill

Design & Contract 6

Pagination, idempotency, versioning, errors, and events

Conventions
Conventions
 ErrorCatalog
ErrorCatalog
 Lifecycle
Lifecycle
 DataModel
DataModel
 Conformance
Conformance
 Webhooks
Webhooks

Build 4

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization
 Packages
Packages
 SDKs
SDKs
 CLI
CLI

Access & Security 6

Authentication, authorization, and security posture

Authentication
Authentication
 DomainSecurity
DomainSecurity
 VulnerabilityDisclosure
VulnerabilityDisclosure
 Security
Security
 TrustCenter
TrustCenter
 Compliance
Compliance

Operate 1

Status, limits, changes, and where to get help

ChangeLog
ChangeLog

Commercial 2

Pricing, plans, and the legal terms of use

TermsOfService
TermsOfService
 PrivacyPolicy
PrivacyPolicy

Company 2

The organization behind the API

Website
Website
 Blog
Blog

Other 1

Properties that don't map to a standard resource type

APICatalog
APICatalog

Source (apis.yml)

apis.yml Raw ↑ 
aid: method-security
name: Method Security
description: 'Method Security is a cybersecurity company delivering cyber resilience to the U.S. Government and critical enterprises
  through an AI-native, full-spectrum security platform. The Method Platform blends offensive and defensive operations across
  cloud, on-premise, and internet-denied environments, and ships two flagship products: Bastion (digital-twin driven exposure
  and attack-surface management that maps, validates, and controls resources and attack paths) and Reaper/Operations (software-defined
  offensive operations and red-team execution). The platform is built around an Ontology object model, AI Agents governed
  by granular Policies, Jackal C2 agents, Overwatch terminal session recording, and an Explorer/Automator workspace. Method
  exposes a public REST API (OpenAPI 3.1) through the method-api-gateway, a published Python SDK (methodsdk), a docs MCP server,
  and OAuth 2.0 client-credentials authentication backed by Keycloak. Backed by OpenAI, Palantir, Andreessen Horowitz, General
  Catalyst, and Blackstone.'
url: https://raw.githubusercontent.com/api-evangelist/method-security/refs/heads/main/apis.yml
x-type: company
x-source: vc-portfolio
x-backed-by:
- general-catalyst
x-tier: stub
x-tier-reason: portfolio-lead
accessModel:
  pricing: unknown
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Self-serve signup
  confidence: medium
  source:
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://www.method.security/content/seo/method-graphic-social-1200x628.png
specificationVersion: '0.20'
created: '2026-07-17'
modified: '2026-07-20'
tags:
- Company
- Security
- Cybersecurity
- Offensive Security
- Exposure Management
- Attack Surface Management
- Vulnerability Management
- Red Team
- AI Agents
- Government
apis:
- aid: method-security:method-security-audit-api
  name: Method Security audit API
  description: The audit API from Method Security — 1 operation(s) for audit.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - audit
  properties:
  - type: OpenAPI
    url: openapi/method-security-audit-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
- aid: method-security:method-security-auth-api
  name: Method Security auth API
  description: The auth API from Method Security — 1 operation(s) for auth.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - auth
  properties:
  - type: OpenAPI
    url: openapi/method-security-auth-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
- aid: method-security:method-security-blueprints-api
  name: Method Security blueprints API
  description: The blueprints API from Method Security — 2 operation(s) for blueprints.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - blueprints
  properties:
  - type: OpenAPI
    url: openapi/method-security-blueprints-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
- aid: method-security:method-security-environments-api
  name: Method Security environments API
  description: The environments API from Method Security — 2 operation(s) for environments.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - environments
  properties:
  - type: OpenAPI
    url: openapi/method-security-environments-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
- aid: method-security:method-security-issues-api
  name: Method Security issues API
  description: The issues API from Method Security — 2 operation(s) for issues.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - issues
  properties:
  - type: OpenAPI
    url: openapi/method-security-issues-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
- aid: method-security:method-security-reports-api
  name: Method Security reports API
  description: The reports API from Method Security — 1 operation(s) for reports.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - reports
  properties:
  - type: OpenAPI
    url: openapi/method-security-reports-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
- aid: method-security:method-security-signals-api
  name: Method Security signals API
  description: The signals API from Method Security — 1 operation(s) for signals.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - signals
  properties:
  - type: OpenAPI
    url: openapi/method-security-signals-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
- aid: method-security:method-security-skills-api
  name: Method Security skills API
  description: The skills API from Method Security — 3 operation(s) for skills.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - skills
  properties:
  - type: OpenAPI
    url: openapi/method-security-skills-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
- aid: method-security:method-security-system-api
  name: Method Security system API
  description: The system API from Method Security — 1 operation(s) for system.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - system
  properties:
  - type: OpenAPI
    url: openapi/method-security-system-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
- aid: method-security:method-security-targets-api
  name: Method Security targets API
  description: The targets API from Method Security — 3 operation(s) for targets.
  humanURL: https://docs.method.security/developer/api-reference/api-reference
  baseURL: https://your-instance.method.delivery/method-api-gateway/api
  tags:
  - targets
  properties:
  - type: OpenAPI
    url: openapi/method-security-targets-api-openapi.yml
  - type: x-openapi-original
    url: openapi/method-security-openapi-original.yml
common:
- type: Website
  url: https://method.security
- type: DeveloperPortal
  url: https://docs.method.security
- type: Documentation
  url: https://docs.method.security
- type: APIReference
  url: https://docs.method.security/developer/api-reference/api-reference
- type: GettingStarted
  url: https://docs.method.security/guides/overview/get-started
- type: Blog
  url: https://method.security/blog
- type: GitHubOrganization
  url: https://github.com/method-security
- type: TermsOfService
  url: https://method.security/legal/terms-and-conditions
- type: PrivacyPolicy
  url: https://method.security/legal/privacy-policy
- type: Authentication
  url: authentication/method-security-authentication.yml
- type: AgenticAccess
  url: agentic-access/method-security-agentic-access.yml
- type: MCPServer
  url: mcp/method-security-mcp.yml
- type: LLMsTxt
  url: llms/method-security-llms.txt
- type: WellKnown
  url: well-known/method-security-well-known.yml
- type: APICatalog
  url: well-known/method-security-api-catalog.json
- type: Packages
  url: packages/method-security-packages.yml
- type: SDKs
  url: packages/method-security-packages.yml
- type: CLI
  url: cli/method-security-cli.yml
- type: Conventions
  url: conventions/method-security-conventions.yml
- type: ErrorCatalog
  url: errors/method-security-problem-types.yml
- type: Lifecycle
  url: lifecycle/method-security-lifecycle.yml
- type: ChangeLog
  url: changelog/method-security-changelog.yml
- type: DataModel
  url: data-model/method-security-data-model.yml
- type: Conformance
  url: conformance/method-security-conformance.yml
- type: Webhooks
  url: asyncapi/method-security-webhooks.yml
- type: AgentSkill
  url: skills/_index.yml
- type: DomainSecurity
  url: security/method-security-domain-security.yml
- type: VulnerabilityDisclosure
  url: security/method-security-vulnerability-disclosure.yml
- type: Security
  url: https://docs.method.security/platform/security-governance/reporting-security-concerns
- type: TrustCenter
  url: security/method-security-trust-center.yml
- type: Compliance
  url: security/method-security-trust-center.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
x-enrichment:
  date: '2026-07-20'
  status: enriched
  artifacts_added: 25
  pass: local-v1