Sysdig

aid: sysdig
name: Sysdig
description: >-
  Sysdig is a cloud and container security platform that provides runtime threat detection, vulnerability management,
  cloud security posture management (CSPM), compliance automation, and observability for containers, Kubernetes, and
  cloud environments. Sysdig Monitor offers full-stack monitoring and alerting while Sysdig Secure delivers runtime
  security, vulnerability scanning, policy enforcement, incident response, and compliance reporting.
type: Index
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/apis-json-logo.jpg
tags:
  - Cloud Security
  - Containers
  - Kubernetes
  - Runtime Security
  - Security
  - Vulnerability Management
  - Monitoring
  - Observability
  - CSPM
  - Compliance
url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/apis.yml
created: '2026-03-26'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
  - aid: sysdig:sysdig-monitor
    name: Sysdig Monitor
    description: >-
      The Sysdig Monitor API provides programmatic access to monitoring and observability capabilities including
      dashboards, alerts, events, metrics, teams, notification channels, and scanning results for cloud-native
      environments.
    humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
    baseURL: https://api.us1.sysdig.com
    tags:
      - Monitoring
      - Observability
      - Alerts
      - Dashboards
      - Metrics
      - Events
    properties:
      - type: Documentation
        url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
      - type: OpenAPI
        url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/openapi/sysdig-monitor-openapi.yml
      - type: GettingStarted
        url: https://docs.sysdig.com/en/getting-started/
      - type: Authentication
        url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
    contact:
      - FN: Sysdig Support
        url: https://sysdig.com/support/
  - aid: sysdig:sysdig-secure
    name: Sysdig Secure
    description: >-
      The Sysdig Secure API provides programmatic access to cloud and container security capabilities including
      vulnerability management, runtime policies, compliance checks, activity audit, incident response, image scanning,
      SBOM retrieval, and Falco rules management.
    humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
    baseURL: https://api.us1.sysdig.com
    tags:
      - Security
      - Vulnerability Management
      - Compliance
      - Runtime Security
      - Falco
      - Scanning
      - CSPM
    properties:
      - type: Documentation
        url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
      - type: OpenAPI
        url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/openapi/sysdig-secure-openapi.yml
      - type: GettingStarted
        url: https://docs.sysdig.com/en/getting-started/
    contact:
      - FN: Sysdig Support
        url: https://sysdig.com/support/
common:
  - type: ArazzoWorkflows
    url: arazzo/
    workflows:
      - url: arazzo/sysdig-author-falco-rule-and-attach-policy-workflow.yml
        name: Sysdig Author Falco Rule and Attach to Policy
        summary: Create a custom Falco rule, then create a policy that references it.
      - url: arazzo/sysdig-build-metric-dashboard-workflow.yml
        name: Sysdig Build Metric Dashboard
        summary: Discover a metric, confirm its descriptor, and create a dashboard for it.
      - url: arazzo/sysdig-clone-dashboard-workflow.yml
        name: Sysdig Clone Dashboard
        summary: Read a source dashboard and create a copy of it under a new name.
      - url: arazzo/sysdig-compliance-task-results-workflow.yml
        name: Sysdig Compliance Task Results
        summary: List compliance tasks, pick one, and pull its control results.
      - url: arazzo/sysdig-create-alert-with-channel-workflow.yml
        name: Sysdig Create Alert With Notification Channel
        summary: Create a notification channel, then create an alert that routes to it.
      - url: arazzo/sysdig-create-policy-and-verify-workflow.yml
        name: Sysdig Create Policy and Verify
        summary: Create a runtime security policy then read it back to confirm it persisted.
      - url: arazzo/sysdig-disable-alert-workflow.yml
        name: Sysdig Disable Alert
        summary: List alerts, find one by name, and disable it via update.
      - url: arazzo/sysdig-investigate-secure-event-workflow.yml
        name: Sysdig Investigate Secure Event
        summary: List secure runtime events, branch on a match, and pull the activity audit.
      - url: arazzo/sysdig-provision-team-workflow.yml
        name: Sysdig Provision Team
        summary: Create a team, verify it, and scope a notification channel for it.
      - url: arazzo/sysdig-publish-event-and-confirm-workflow.yml
        name: Sysdig Publish Event and Confirm
        summary: Post a custom event to Monitor, then list events to confirm it landed.
      - url: arazzo/sysdig-scan-image-and-poll-workflow.yml
        name: Sysdig Scan Image and Poll Results
        summary: Trigger an image scan, poll until analysis completes, then read findings.
      - url: arazzo/sysdig-scanned-image-inventory-workflow.yml
        name: Sysdig Scanned Image Inventory Review
        summary: List scanned images, pick the first, and pull its vulnerabilities and SBOM.
      - url: arazzo/sysdig-triage-image-vulnerabilities-workflow.yml
        name: Sysdig Triage Image Vulnerabilities
        summary: List vulnerability results, drill into one image, and pull its SBOM.
  - type: LinkedIn
    url: https://www.linkedin.com/company/sysdig
  - type: Website
    url: https://sysdig.com/
  - type: Documentation
    url: https://docs.sysdig.com/
  - type: Developer Portal
    url: https://docs.sysdig.com/en/developer-tools/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: GitHubOrganization
    url: https://github.com/sysdiglabs
  - type: Blog
    url: https://sysdig.com/blog/
  - type: Pricing
    url: https://sysdig.com/pricing/
  - type: SignUp
    url: https://sysdig.com/company/free-trial/
  - type: Terraform Provider
    url: https://registry.terraform.io/providers/sysdiglabs/sysdig/latest
  - type: Python SDK
    url: https://github.com/sysdiglabs/sysdig-sdk-python
  - type: CLI
    url: https://sysdiglabs.github.io/sysdig-platform-cli/
  - type: Kubernetes Operator
    url: https://github.com/sysdiglabs/sysdig-operator
  - type: Helm Charts
    url: https://github.com/sysdiglabs/charts
  - type: Spectral Rules
    url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/rules/sysdig-rules.yml
  - type: Vocabulary
    url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/vocabulary/sysdig-vocabulary.yml
  - type: ChangeLog
    url: https://docs.sysdig.com/en/release-notes/
  - type: Support
    url: https://sysdig.com/support/
  - type: StatusPage
    url: https://status.sysdig.com/
  - name: MCP Server
    url: https://github.com/sysdiglabs/sysdig-mcp-server
    type: MCPServer
maintainers:
  - FN: Kin Lane
    email: kin@apievangelist.com