Picus Security
Picus Security is a cybersecurity company that pioneered Breach and Attack Simulation (BAS) in 2013 and now ships the Picus Security Validation Platform for Adversarial Exposure Validation (AEV) and Continuous Threat Exposure Management (CTEM). The platform continuously simulates real-world adversary techniques against network, endpoint, email and cloud controls, scores prevention and detection effectiveness, maps results to MITRE ATT&CK and the Unified Kill Chain, and returns vendor-specific mitigation signatures and validated detection rules from the Picus Mitigation Library. The Picus Customer API is a public REST API documented at apidocs.picussecurity.com and served from api.picussecurity.com, exposing simulations, simulation run results, the threat library, threat templates, agents, integrations, mitigation and detection content, exposure instance scores, users and roles, and activity logs, authorized with OAuth2-issued refresh and access tokens.
Picus Security publishes 14 APIs on the APIs.io network, including Activity Logs API, Agents API, Authentication API, and 11 more. Tagged areas include cybersecurity, security-validation, breach-and-attack-simulation, adversarial-exposure-validation, and continuous-threat-exposure-management.
Picus Security’s developer surface includes authentication, documentation, API reference, getting-started guide, support, engineering blog, signup flow, and 27 more developer resources.
Kin Score
APIs 14
Individual APIs this provider publishes, each with its own machine-readable definition.
Picus Security Activity Logs API
The Activity-Logs API from Picus Security — 1 operation(s) for activity-logs.
Picus Security Agents API
The Agents API from Picus Security — 6 operation(s) for agents.
Picus Security Authentication API
The Authentication API from Picus Security — 2 operation(s) for authentication.
Picus Security Instances API
The Instances API from Picus Security — 1 operation(s) for instances.
Picus Security Integrations API
The Integrations API from Picus Security — 2 operation(s) for integrations.
Picus Security Mitigation API
The Mitigation API from Picus Security — 15 operation(s) for mitigation.
Picus Security Simulation Latest Result API
The Simulation-Latest-Result API from Picus Security — 7 operation(s) for simulation-latest-result.
Picus Security Simulation Result API
The Simulation-Result API from Picus Security — 8 operation(s) for simulation-result.
Picus Security Simulation Result Reports API
The Simulation-Result-Reports API from Picus Security — 4 operation(s) for simulation-result-reports.
Picus Security Simulations API
The Simulations API from Picus Security — 4 operation(s) for simulations.
Picus Security Summary API
The Summary API from Picus Security — 1 operation(s) for summary.
Picus Security Templates API
The Templates API from Picus Security — 2 operation(s) for templates.
Picus Security Threats API
The Threats API from Picus Security — 13 operation(s) for threats.
Picus Security Users API
The Users API from Picus Security — 5 operation(s) for users.
Scroll for all 14
MCP Servers 1
Model Context Protocol servers that expose these APIs to AI agents.
picus-security-mcp.yml
MCP SERVERRate Limits 1
Documented rate limits and quota policies.
Picus Security Rate Limits
RATE LIMITSSecurity Posture 4
Authentication, domain security, vulnerability disclosure, and trust-center signals.
Picus Security Trust Center
ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 22301, ISO/IEC 20000-1, SOC 2 Type 2, CSA STAR Level One
SECURITYAgentic Access 1
Recommended x-agentic-access execution contracts for AI agents.
Resources
Get Started 4
Portal, sign-up, and the first successful call
Documentation 2
Reference material describing how the API behaves
Agent Surfaces 5
MCP servers, agent skills, and machine-readable catalogs
Design & Contract 5
Pagination, idempotency, versioning, errors, and events
Build 1
SDKs, sample code, and the tooling you integrate with
Access & Security 6
Authentication, authorization, and security posture
Operate 6
Status, limits, changes, and where to get help
Commercial 2
Pricing, plans, and the legal terms of use
Company 2
The organization behind the API
Other 1
Properties that don't map to a standard resource type