Silverfort

aid: silverfort
name: Silverfort
description: Silverfort is an identity security platform that protects human and non-human identities across hybrid environments
  — on-premises, cloud, and legacy — without agents, proxies, or changes to existing infrastructure. Its Runtime Access Protection
  (RAP) technology integrates inline with existing IAM infrastructure (Active Directory, Entra ID, Okta, Ping, AWS) and evaluates
  every authentication attempt in real time before access is granted, extending MFA, identity threat detection and response
  (ITDR), identity security posture management (ISPM), privileged access security, service-account and non-human-identity
  governance, and AI agent security to resources that traditional identity tooling cannot reach. Founded in 2016 and headquartered
  in Dallas, Texas, Silverfort exposes a REST API (the "Raven" service at raven.silverfort.io, with EU and Singapore regional
  hosts) covering user and resource risk, service-account inventory and insights, policies and enrollment — but the REST API
  reference is published only inside a customer-authenticated knowledge base, so no public machine-readable contract is available.
image: https://www.silverfort.com/wp-content/uploads/2025/02/cropped-Silverfort-Symbol-Pos-RGB.png?w=192
url: https://raw.githubusercontent.com/api-evangelist/silverfort/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-05'
modified: '2026-08-05'
tags:
- Company
- Identity
- Security
- Authentication
- Multi-Factor Authentication
- Identity Security
- Active Directory
- Zero Trust
- Non-Human Identity
- Cybersecurity
- ITDR
- Service Accounts
apis:
- aid: silverfort:silverfort-rest-api
  name: Silverfort REST API
  description: The Silverfort REST API (internally the "Raven" service) exposes user and resource risk read and write, service-account
    inventory and insights, policy control, and enrollment. Access is controlled by category-scoped API keys issued from the
    Silverfort Admin Console under Settings > Silverfort API (an External API Key, plus App User ID / App User Secret pairs
    for the Enrollment, Operations and Risk API key categories). The reference is published only inside the customer-only
    Document360 knowledge base; no OpenAPI, Swagger, GraphQL SDL or public Postman collection is published.
  humanURL: https://docs.silverfort.com/product-documentation/docs/en/silverfort-rest-api-reference50-1
  baseURL: https://raven.silverfort.io
  tags:
  - Identity
  - Security
  - Risk
  - Authentication
  - Service Accounts
  properties:
  - type: Documentation
    url: https://docs.silverfort.com/
  x-evidence:
    checked: '2026-08-05'
    probes:
    - url: https://raven.silverfort.io/
      status: 200
      note: Live API host; responds "Silverfort Raven is UP :-)". Serves no spec.
    - url: https://raven.silverfort.io/openapi.json
      status: 404
    - url: https://raven.silverfort.io/swagger.json
      status: 404
    - url: https://docs.silverfort.com/product-documentation/docs/en/silverfort-rest-api-reference50-1
      status: 302
      note: Redirects to identity.document360.io OIDC login.
    regional_hosts:
    - https://raven.silverfort.io
    - https://eu.raven.silverfort.io
    - https://sg.raven.silverfort.io
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: Lifecycle
  url: lifecycle/silverfort-lifecycle.yml
- type: StatusPage
  url: https://status.silverfort.com/
- type: Conformance
  url: conformance/silverfort-conformance.yml
- type: Compliance
  url: conformance/silverfort-conformance.yml
- type: TrustCenter
  url: security/silverfort-trust-center.yml
- type: DomainSecurity
  url: security/silverfort-domain-security.yml
- type: Website
  url: https://www.silverfort.com/
- type: Documentation
  url: https://docs.silverfort.com/
- type: APIReference
  url: https://docs.silverfort.com/product-documentation/docs/en/silverfort-rest-api-reference50-1
- type: Support
  url: https://support.silverfort.com/hc/en-us
- type: Blog
  url: https://www.silverfort.com/blog/
- type: GitHubOrganization
  url: https://github.com/silverfort-open-source
- type: Pricing
  url: https://www.silverfort.com/pricing/
- type: SignUp
  url: https://www.silverfort.com/request-a-demo/
- type: TermsOfService
  url: https://www.silverfort.com/terms-of-use/
- type: PrivacyPolicy
  url: https://www.silverfort.com/privacy-policy/
- type: LLMsTxt
  url: llms/silverfort-llms.txt
x-enrichment:
  date: '2026-08-05'
  status: minimal
  artifacts_added: 6
  pass: local-v1
x-coverage:
  state: gated
  reason: customer-only-docs
  detail: The Silverfort REST API Reference at docs.silverfort.com 302s to a Document360 OIDC login at identity.document360.io,
    and that docs host then answers HTTP 200 with the identical ~10.7KB login shell for every path — /openapi.json, /swagger.json
    and /llms.txt included — while the live API host raven.silverfort.io serves "Silverfort Raven is UP :-)" and a real 404
    for every spec location.
  evidence:
  - url: https://docs.silverfort.com/product-documentation/docs/en/silverfort-rest-api-reference50-1
    status: 302
  - url: https://raven.silverfort.io/openapi.json
    status: 404
  - url: https://raven.silverfort.io/
    status: 200
  checked: '2026-08-05'