Sysdig website screenshot

Sysdig

Sysdig is a cloud and container security platform that provides runtime threat detection, vulnerability management, cloud security posture management (CSPM), compliance automation, and observability for containers, Kubernetes, and cloud environments. Sysdig Monitor offers full-stack monitoring and alerting while Sysdig Secure delivers runtime security, vulnerability scanning, policy enforcement, incident response, and compliance reporting.

Sysdig publishes 13 APIs on the APIs.io network, including Activity Audit API, Alerts API, Compliance API, and 10 more. Tagged areas include Cloud Security, Containers, Kubernetes, Runtime Security, and Security.

The Sysdig catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Sysdig’s developer surface includes authentication, documentation, getting-started guide, engineering blog, pricing, signup flow, CLI, and 30 more developer resources.

🌐 Visit website 📡 Source on GitHub
65.5/100 strong ▬ flat Agent 41/100 agent ready Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessFreemiumSelf serve⚡ Free to try
13 APIs 1 MCP Servers
Cloud SecurityContainersKubernetesRuntime SecuritySecurityVulnerability ManagementMonitoringObservabilityCSPMCompliance

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 65.5/100 · strong
Contract Quality 16.6 / 25
Developer Ergonomics 14.3 / 20
Commercial Clarity 10.0 / 20
Operational Transparency 8.9 / 13
Governance 8.3 / 12
Discoverability 7.4 / 10
Agent readiness — 41/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/sysdig: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 13

Individual APIs this provider publishes, each with its own machine-readable definition.

Sysdig Activity Audit API

Audit trail of user and system activities

Sysdig Alerts API

Manage monitoring alerts and alert notifications

Sysdig Compliance API

Compliance checks and reporting

Sysdig Dashboards API

Create and manage monitoring dashboards

Sysdig Events API

Retrieve and create custom events

Sysdig Image Scanning API

Scan container images for vulnerabilities

Sysdig Metrics API

Query and retrieve metrics data

Sysdig Notification Channels API

Configure notification channels for alerts

Sysdig Policies API

Manage runtime security policies

Sysdig Rules API

Manage Falco security rules

Sysdig SBOM API

Software Bill of Materials management

Sysdig Teams API

Manage teams and team memberships

Sysdig Vulnerabilities API

Manage vulnerability findings and scanning results

Scroll for all 13

Postman Collections 13

Ready-to-run Postman collections for exercising this provider's APIs.

Sysdig Monitor Activity Audit API

POSTMAN

Sysdig Monitor Activity Audit Alerts API

POSTMAN

Sysdig Monitor Activity Audit Compliance API

POSTMAN

Sysdig Monitor Activity Audit Dashboards API

POSTMAN

Sysdig Monitor Activity Audit Events API

POSTMAN

Sysdig Monitor Activity Audit Image Scanning API

POSTMAN

Sysdig Monitor Activity Audit Metrics API

POSTMAN

Sysdig Monitor Activity Audit Notification Channels API

POSTMAN

Sysdig Monitor Activity Audit Policies API

POSTMAN

Sysdig Monitor Activity Audit Rules API

POSTMAN

Sysdig Monitor Activity Audit SBOM API

POSTMAN

Sysdig Monitor Activity Audit Teams API

POSTMAN

Sysdig Monitor Activity Audit Vulnerabilities API

POSTMAN

Scroll for all 13

Open Collections 2

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

Sysdig Monitor API

OPEN COLLECTION

Sysdig Secure API

OPEN COLLECTION

Arazzo Workflows 13

Multi-step API workflows described with the Arazzo specification.

Sysdig Author Falco Rule and Attach to Policy

Create a custom Falco rule, then create a policy that references it.

ARAZZO

Sysdig Build Metric Dashboard

Discover a metric, confirm its descriptor, and create a dashboard for it.

ARAZZO

Sysdig Clone Dashboard

Read a source dashboard and create a copy of it under a new name.

ARAZZO

Sysdig Compliance Task Results

List compliance tasks, pick one, and pull its control results.

ARAZZO

Sysdig Create Alert With Notification Channel

Create a notification channel, then create an alert that routes to it.

ARAZZO

Sysdig Create Policy and Verify

Create a runtime security policy then read it back to confirm it persisted.

ARAZZO

Sysdig Disable Alert

List alerts, find one by name, and disable it via update.

ARAZZO

Sysdig Investigate Secure Event

List secure runtime events, branch on a match, and pull the activity audit.

ARAZZO

Sysdig Provision Team

Create a team, verify it, and scope a notification channel for it.

ARAZZO

Sysdig Publish Event and Confirm

Post a custom event to Monitor, then list events to confirm it landed.

ARAZZO

Sysdig Scan Image and Poll Results

Trigger an image scan, poll until analysis completes, then read findings.

ARAZZO

Sysdig Scanned Image Inventory Review

List scanned images, pick the first, and pull its vulnerabilities and SBOM.

ARAZZO

Sysdig Triage Image Vulnerabilities

List vulnerability results, drill into one image, and pull its SBOM.

ARAZZO

Scroll for all 13

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

MCP Server

MCP SERVER

GraphQL 1

GraphQL schemas published by this provider.

Sysdig GraphQL API

Sysdig provides cloud-native security and observability for Kubernetes, containers, and cloud. The API covers runtime threat detection, compliance posture management, vulnerabil...

GRAPHQL

Pricing Plans 1

Published pricing tiers and plan structures.

Sysdig Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Sysdig Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Sysdig Finops

FINOPS

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Sysdig Context

31 classes · 0 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Sysdig API Rules

5 rules · 3 warnings 2 info

SPECTRAL

Sysdig API Rules

10 rules · 4 errors 5 warnings 1 info

SPECTRAL

JSON Schema 2

Standalone JSON Schema definitions for this provider's data models.

Sysdig Alert

10 properties

JSON SCHEMA

Sysdig Vulnerability

7 properties

JSON SCHEMA

JSON Structure 1

JSON Structure definitions describing this provider's data shapes.

Sysdig Alert Structure

0 properties

JSON STRUCTURE

Examples 2

Example request and response payloads for these APIs.

Sysdig List Alerts Example

2 fields

EXAMPLE

Sysdig List Vulnerability Results Example

2 fields

EXAMPLE

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Sysdig Authentication

http · 1 scheme

SECURITY

Sysdig Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Sysdig Agentic Access

43 operations · 21 acting

43 operations · 21 acting

AGENTIC

Resources

Get Started 3

Portal, sign-up, and the first successful call

DeveloperPortal
DeveloperPortal
 GettingStarted
GettingStarted
 Signup
Signup

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess
AgenticAccess
 MCPServer
MCPServer

Design & Contract 15

Pagination, idempotency, versioning, errors, and events

Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 Arazzo
Arazzo
 SpectralRules
SpectralRules
 Vocabulary
Vocabulary

Scroll for all 15

Build 4

SDKs, sample code, and the tooling you integrate with

PostmanWorkspace
PostmanWorkspace
 GitHubOrganization
GitHubOrganization
 Python SDK
Python SDK
 CLI
CLI

Access & Security 2

Authentication, authorization, and security posture

DomainSecurity
DomainSecurity
 Authentication
Authentication

Operate 3

Status, limits, changes, and where to get help

ChangeLog
ChangeLog
 Support
Support
 StatusPage
StatusPage

Commercial 1

Pricing, plans, and the legal terms of use

Pricing
Pricing

Company 3

The organization behind the API

LinkedIn
LinkedIn
 Website
Website
 Blog
Blog

Other 3

Properties that don't map to a standard resource type

Terraform Provider
Terraform Provider
 Kubernetes Operator
Kubernetes Operator
 Helm Charts
Helm Charts

Source (apis.yml)

apis.yml Raw ↑ 
aid: sysdig
name: Sysdig
description: Sysdig is a cloud and container security platform that provides runtime threat detection, vulnerability management,
  cloud security posture management (CSPM), compliance automation, and observability for containers, Kubernetes, and cloud
  environments. Sysdig Monitor offers full-stack monitoring and alerting while Sysdig Secure delivers runtime security, vulnerability
  scanning, policy enforcement, incident response, and compliance reporting.
type: Index
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/sysdig.png
tags:
- Cloud Security
- Containers
- Kubernetes
- Runtime Security
- Security
- Vulnerability Management
- Monitoring
- Observability
- CSPM
- Compliance
url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/apis.yml
created: '2026-03-26'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
- aid: sysdig:sysdig-activity-audit-api
  name: Sysdig Activity Audit API
  description: Audit trail of user and system activities
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Activity Audit
  properties:
  - type: OpenAPI
    url: openapi/sysdig-activity-audit-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-alerts-api
  name: Sysdig Alerts API
  description: Manage monitoring alerts and alert notifications
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Alerts
  properties:
  - type: OpenAPI
    url: openapi/sysdig-alerts-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-compliance-api
  name: Sysdig Compliance API
  description: Compliance checks and reporting
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Compliance
  properties:
  - type: OpenAPI
    url: openapi/sysdig-compliance-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-dashboards-api
  name: Sysdig Dashboards API
  description: Create and manage monitoring dashboards
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Dashboards
  properties:
  - type: OpenAPI
    url: openapi/sysdig-dashboards-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-events-api
  name: Sysdig Events API
  description: Retrieve and create custom events
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Events
  properties:
  - type: OpenAPI
    url: openapi/sysdig-events-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-image-scanning-api
  name: Sysdig Image Scanning API
  description: Scan container images for vulnerabilities
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Image Scanning
  properties:
  - type: OpenAPI
    url: openapi/sysdig-image-scanning-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-metrics-api
  name: Sysdig Metrics API
  description: Query and retrieve metrics data
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Metrics
  properties:
  - type: OpenAPI
    url: openapi/sysdig-metrics-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-notification-channels-api
  name: Sysdig Notification Channels API
  description: Configure notification channels for alerts
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Notification Channels
  properties:
  - type: OpenAPI
    url: openapi/sysdig-notification-channels-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-policies-api
  name: Sysdig Policies API
  description: Manage runtime security policies
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/sysdig-policies-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-rules-api
  name: Sysdig Rules API
  description: Manage Falco security rules
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Rules
  properties:
  - type: OpenAPI
    url: openapi/sysdig-rules-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-sbom-api
  name: Sysdig SBOM API
  description: Software Bill of Materials management
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - SBOM
  properties:
  - type: OpenAPI
    url: openapi/sysdig-sbom-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-teams-api
  name: Sysdig Teams API
  description: Manage teams and team memberships
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Teams
  properties:
  - type: OpenAPI
    url: openapi/sysdig-teams-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
- aid: sysdig:sysdig-vulnerabilities-api
  name: Sysdig Vulnerabilities API
  description: Manage vulnerability findings and scanning results
  humanURL: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  baseURL: https://api.us1.sysdig.com
  tags:
  - Vulnerabilities
  properties:
  - type: OpenAPI
    url: openapi/sysdig-vulnerabilities-api-openapi.yml
  - type: Documentation
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GettingStarted
    url: https://docs.sysdig.com/en/getting-started/
  - type: Authentication
    url: https://docs.sysdig.com/en/developer-tools/sysdig-api/
  - type: GraphQL
    url: graphql/sysdig-graphql.md
common:
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/sysdig/overview
- type: AgenticAccess
  url: agentic-access/sysdig-agentic-access.yml
- type: DomainSecurity
  url: security/sysdig-domain-security.yml
- type: Authentication
  url: authentication/sysdig-authentication.yml
- type: Arazzo
  url: arazzo/sysdig-author-falco-rule-and-attach-policy-workflow.yml
  name: Sysdig Author Falco Rule and Attach to Policy
- type: Arazzo
  url: arazzo/sysdig-build-metric-dashboard-workflow.yml
  name: Sysdig Build Metric Dashboard
- type: Arazzo
  url: arazzo/sysdig-clone-dashboard-workflow.yml
  name: Sysdig Clone Dashboard
- type: Arazzo
  url: arazzo/sysdig-compliance-task-results-workflow.yml
  name: Sysdig Compliance Task Results
- type: Arazzo
  url: arazzo/sysdig-create-alert-with-channel-workflow.yml
  name: Sysdig Create Alert With Notification Channel
- type: Arazzo
  url: arazzo/sysdig-create-policy-and-verify-workflow.yml
  name: Sysdig Create Policy and Verify
- type: Arazzo
  url: arazzo/sysdig-disable-alert-workflow.yml
  name: Sysdig Disable Alert
- type: Arazzo
  url: arazzo/sysdig-investigate-secure-event-workflow.yml
  name: Sysdig Investigate Secure Event
- type: Arazzo
  url: arazzo/sysdig-provision-team-workflow.yml
  name: Sysdig Provision Team
- type: Arazzo
  url: arazzo/sysdig-publish-event-and-confirm-workflow.yml
  name: Sysdig Publish Event and Confirm
- type: Arazzo
  url: arazzo/sysdig-scan-image-and-poll-workflow.yml
  name: Sysdig Scan Image and Poll Results
- type: Arazzo
  url: arazzo/sysdig-scanned-image-inventory-workflow.yml
  name: Sysdig Scanned Image Inventory Review
- type: Arazzo
  url: arazzo/sysdig-triage-image-vulnerabilities-workflow.yml
  name: Sysdig Triage Image Vulnerabilities
- type: LinkedIn
  url: https://www.linkedin.com/company/sysdig
- type: Website
  url: https://sysdig.com/
- type: Documentation
  url: https://docs.sysdig.com/
- type: DeveloperPortal
  url: https://docs.sysdig.com/en/developer-tools/
- type: GettingStarted
  url: https://docs.sysdig.com/en/getting-started/
- type: GitHubOrganization
  url: https://github.com/sysdiglabs
- type: Blog
  url: https://sysdig.com/blog/
- type: Pricing
  url: https://sysdig.com/pricing/
- type: Signup
  url: https://sysdig.com/company/free-trial/
- type: Terraform Provider
  url: https://registry.terraform.io/providers/sysdiglabs/sysdig/latest
- type: Python SDK
  url: https://github.com/sysdiglabs/sysdig-sdk-python
- type: CLI
  url: https://sysdiglabs.github.io/sysdig-platform-cli/
- type: Kubernetes Operator
  url: https://github.com/sysdiglabs/sysdig-operator
- type: Helm Charts
  url: https://github.com/sysdiglabs/charts
- type: SpectralRules
  url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/rules/sysdig-rules.yml
- type: Vocabulary
  url: https://raw.githubusercontent.com/api-evangelist/sysdig/refs/heads/main/vocabulary/sysdig-vocabulary.yml
- type: ChangeLog
  url: https://docs.sysdig.com/en/release-notes/
- type: Support
  url: https://sysdig.com/support/
- type: StatusPage
  url: https://status.sysdig.com/
- name: MCP Server
  url: https://github.com/sysdiglabs/sysdig-mcp-server
  type: MCPServer
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com