Ranked by the provider's API Evangelist rating — the Kin Score is scored per provider, not per API, so every API of a provider shares its band. How the rating works →

Exemplar 4 Complete, well-documented, and agent-ready

Datadog Agentless Scanning APIThe Agentless Scanning API provides visibility into risks and vulnerabilities within your hosts, running co...79.1 Datadog CSM Agents APIThe CSM Agents API allows you to get the list of all Cloud Security Management agents running on your hosts...79.1 Datadog CSM Threats APIThe CSM Threats API provides endpoints for managing Cloud Security Management Workload Protection agent rul...79.1 Datadog Entity Risk Scores APIThe Entity Risk Scores API provides security risk assessments for entities like cloud resources, identities...79.1

Strong 1 Solid coverage with minor gaps

Securify Scan Public APIPublic API for Securify Scan, 3-shake's automated vulnerability-diagnosis and ASM platform. A tenant create...57.0

Developing 7 Usable, with meaningful gaps to close

Microsoft Defender for Cloud Apps APICloud Access Security Broker (CASB) API for discovering, investigating, and governing cloud apps.51.4 Microsoft Defender for Cloud REST APIREST API for unified security management and advanced threat protection across hybrid cloud workloads in Az...51.4 AccuKnox SaaS Platform APIToken-authenticated REST API behind the AccuKnox SaaS console, serving asset inventory, security findings, ...49.7 Tufin SecureCloud APIREST API for Tufin SecureCloud, the cloud-native security policy management platform. Provides endpoints fo...44.0 Trellix Detection as a Service APIAPI-driven malware detection service that leverages the Trellix Multi-Vector Virtual Execution (MVX) engine...43.3 Trellix Email Security Cloud APIRESTful API for Trellix Email Security Cloud (formerly FireEye ETP) providing custom integration capabiliti...43.3 Symantec Endpoint Security APIThe Symantec Endpoint Security (SES) REST API provides access to cloud-based endpoint security management i...40.5

Thin 8 Limited public surface area

Cloud CustodianCloud Custodian provides rules-engine capabilities for managing cloud resources with security, compliance, ...36.7 Cloud Custodian AWS ProviderThe Cloud Custodian AWS provider enables policy-as-code management of Amazon Web Services resources includi...36.7 Cloud Custodian Azure ProviderThe Cloud Custodian Azure provider enables policy-as-code management of Microsoft Azure resources including...36.7 Cloud Custodian C7n-Orgc7n-org is a Cloud Custodian tool for running policies across multiple cloud accounts, projects, or subscri...36.7 Cloud Custodian GCP ProviderThe Cloud Custodian GCP provider enables policy-as-code management of Google Cloud Platform resources inclu...36.7 Prisma CloudPrisma Cloud by Palo Alto Networks provides comprehensive cloud native security across the full application...31.0 Microsoft Defender for Cloud REST APIAzure Resource Manager REST API for managing Defender for Cloud assessments, alerts, recommendations, secur...29.3 Kestrel PlatformKestrel AI provides an AI-native cloud incident response platform that uses autonomous agents to detect, in...26.3

Emerging 7 Early or largely undocumented

NIST SP 800-207A ZTA for Cloud-Native ApplicationsNIST SP 800-207A extends the original ZTA guidance to cover cloud-native applications in multi-cloud enviro...23.2 Lacework FortiCNAPP API v2REST API for managing alerts, events, policies, queries, resources, datasources, integrations, and complian...22.6 EdgeNext CDN APIREST API for the ChinaCache/EdgeNext CDN and edge platform — manage CDN domains, cache purge and prefetch, ...17.2 Orca Security REST APIOrca Security's REST API provides programmatic access to the Orca Cloud Security Platform for querying clou...16.8 CartographyPython tool that ingests infrastructure data from 30+ providers into a Neo4j graph for cross-provider secur...16.5 CloudConnexa Public APIREST API for managing CloudConnexa Zero Trust networks, users, networks, connectors, DNS, routes, and acces...15.5 Wiz GraphQL APIGraphQL API for querying and managing cloud security inventory, issues, vulnerabilities, misconfigurations,...14.5

Companies reaching this through an API (3)

These companies publish an API, specification or operation carrying “Cloud Security” but do not classify their business under it. Listed unranked and kept out of the count above, because one tagged operation is not a statement about what a company does.

Datadog Symantec Zero Trust Architecture

Score breakdown

Frequency

59.5

log-scaled weighted occurrences

Breadth

3.2

spread across providers

Quality lift

35.2

mean composite of providers using it

Cohesion

12.3

strength of nearest seed neighbor

Where this tag sits

124 providers carry this tag directly, and 125 counting the 1 narrower tag below — 1 more to reach.

Security broader CSPM 12 providers

Where this tag comes from

Provider tag124

Api tag27

Cohort brief

Auto-generated

The 113 providers in the APIs.io catalog tagged Cloud Security, scored on the Kin Score. Every figure below is computed from the catalog — nothing here is written.

Providers

113

all scored

Mean Kin Score

29.5

+6.6 vs catalog 22.9

Mean Agent Readiness

14.5

+2.6 vs catalog 11.9

Spread

2.4–76.9

median 29.4 · σ 18.1

How the 113 split by band

Exemplar 4Strong 7Developing 24Thin 27Emerging 30Minimal 21

Facet averages, against the whole catalog

Facet	This cohort	Catalog	Difference	Scored
Developer Ergonomics	32.5	23.2	+9.3	113
Operational Transparency	20.6	13.7	+6.9	113
Contract Quality	24	17.6	+6.4	113
Discoverability	62.7	58.1	+4.6	113
Contract Governance	10.4	6.3	+4.1	113
Access Clarity	29.6	26.5	+3.1	113

A facet is averaged over the members that carry it, not over the whole cohort — the “Scored” column is that count. Averaging an absent facet as zero would score our own coverage gaps as the providers’ posture.

What this cohort publishes

Artifact	This cohort	Catalog	Difference
MCP server (any)	21%	14%	+7
MCP server (first-party)	17%	12%	+5
Agent Skills	0%	0%	0
OAuth scopes	13%	11%	+2
Security	93%	98%	-5
Arazzo workflows	3%	2%	+1
Governance rules	22%	14%	+8

mcp_pct counts any mcp/ artifact including ones API Evangelist derived from the provider OpenAPI; mcp_first_party_pct counts only servers the provider publishes. Prefer the latter.

Top by Kin Score

1 Palo Alto Networks 76.9
2 Aembit 72.6
3 Tenable 67.5
4 CrowdStrike 67.1
5 Cisco Umbrella 62.1
6 Azure Key Vault 60.6
7 Armor 59.4
8 3-shake 57
9 Cisco Secure Firewall 56.4
10 JupiterOne 55.8

Work with this as data

Every tag here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for tags

7 MCP tools reach this

find_tagsBrowse and filter every tag in the catalog.
get_cohortThis tag as a scored cohort — every provider carrying it, with scores.
cohort_statsPRO — the distribution across this tag: mean, median, band split, adoption rates.
cohort_rankingsPRO — the leaderboard, on composite AND agent-readiness axes.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This tag

curl "https://apis.io/api/v1/tags/cloud-security"

All tags

curl "https://apis.io/api/v1/tags?limit=25"

As a scored cohort

curl "https://apis.io/api/v1/cohorts/tag/cloud-security"

The distribution (Pro)

curl "https://apis.io/api/v1/cohorts/tag/cloud-security/stats" \
  -H "X-API-Key: $APIS_IO_KEY"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

Cloud Security

Providers using this tag (124)

APIs with this tag (27)