Companies API Endpoint

⇤ Endpoints

Get information about a company (including companies your organization and companies in your portfolio) and manage company information. The information includes:

• 4th Party
• Company Data
• Cyber Insurance
• Findings and Observations
• Infrastructure
• Issue Tracking
• Peer Analytics
• Portfolio
• Statistics

4th Party

GET: Products in a Ratings Tree

Get service provider products that are used by companies in a ratings tree.

Path: /v1/companies/company_guid/company-tree/products

GET: Product Usage of Companies in a Ratings Tree

List the third parties in a Ratings Tree that use a particular service provider product.

Path: /v1/companies/company_guid/company-tree/products/product_guid/companies

GET: Product Types in a Ratings Tree

List the product types used by all companies in the Ratings Tree of a third party.

Path: /v1/companies/company_guid/company-tree/product-types

GET: Service Providers of a Third Party

Get all service providers for the entire ratings tree of one of the companies you’re monitoring.

Path: /v1/companies/company_guid/company-tree/providers

GET: Dependency on a Specific Service Provider in a Ratings Tree

Get the companies in a ratings tree that depend on a specific service provider.

Path: /v1/companies/company_guid/company-tree/providers/provider_guid/companies

GET: Products of a Specific Service Provider in a Ratings Tree

Get the products provided to companies within a ratings tree by a specific service provider.

Path: /v1/companies/company_guid/company-tree/providers/provider_guid/products

GET: Enterprise Products Used by a Single Domain

Get the enterprise products that are used by a particular company from a single domain.

Path: /v1/companies/company_guid/domains/DOMAIN.TLD/products

GET: Service Providers for a Specific Domain

Get the service providers of the products used in a specific domain.

Path: /v1/companies/company_guid/domains/domain_name/providers

GET: Products of a Company

Get the enterprise products used at the domains of a particular company.

Path: /v1/companies/company_guid/products

POST: Products of a Company

Get the enterprise products used at the domains of a particular company.

Path: /v1/companies/company_guid/products

GET: Domains of a Company Using a Specific Product

List the domains that belong to a company using a specific service provider product.

Path: /v1/companies/company_guid/products/product_guid/domains

GET: Service Providers of a Specific Company

Get the service providers that a specific company depends on.

Path: /v1/companies/company_guid/providers

GET: Shared Service Provider Domains

Get the domains that are shared by a company and their service provider.

Path: /v1/companies/company_guid/providers/provider_guid/domains

Company Data

GET: Company Details

Get a company’s details, including: Their rating, rating history, risk vector grades, company info and relationship.

Path: /v1/companies/company_guid

GET: Country Details

Get 1 year of Bitsight data of subscribed countries.

Path: /v1/companies/country_guid

GET: Assets

Get a company’s asset information (domains and IP addresses), including asset importance and the number of findings.

Path: /v1/companies/company_guid/assets

GET: Asset Risk Matrix

Get the counts and the severity of security findings for a given company.

Path: /v1/companies/company_guid/assets/statistics

GET: Ratings Tree

Retrieve a company’s information, followed by all of its subsidiaries. Since subsidiaries may also possess its own subsidiary that are related to the parent company as part of the bundle, this path continues past the first generation when returning subsidiary data.

Path: /v1/companies/company_guid/company-tree

GET: IP Address by Country

Get the number of IP addresses for an organization’s IP address space by country.

Path: /v1/companies/company_guid/countries

GET: Download NIST CSF Report

Get a high-level summary of an organization‘s alignment with the US National Institute of Standards and Technology’s cybersecurity Framework (NIST CSF) using Bitsight risk vectors and existing data as evidence.

Path: /v1/companies/company_guid/regulatory/nist

GET: Preview Report with Industry Comparison

Get a synopsis of how a company is performing compared to its industry peers.

Path: /v1/companies/company_guid/reports/company-preview

GET: Ratings History

Get a CSV file containing a history of a particular company’s security ratings over the past year.

Path: /v1/companies/company_guid/reports/ratings-history?format=csv

GET: Risk Vectors Summary

Get a summary of a company’s risk vector performance. A CSV will be downloaded to your desktop.

Path: /v1/companies/company_guid/risk-vectors/summaries

GET: Company Requests Summary

Get a summary of your organization’s company requests.

Path: /v1/companies/infrastructure/requests/summaries

Cyber Insurance

GET: Compare Client to the Underwriting Guidelines

Compare a client’s risk vectors and their grades to your underwriting guidelines.

Path: /v1/companies/client_guid/underwriting-guidelines

Portfolio

PATCH: Highlight Primary or Assign Custom ID

Highlight a primary for your organization or assign a custom ID for a portfolio company.

Path: /v1/companies/company_guid

GET: Tiering Recommendation

Get tiering recommendations.

Path: /v1/companies/company_guid/tier/recommendation

GET: Rating Distribution by Rating Category

Get the rating distribution for all companies in the Bitsight inventory by rating category. This helps compare your own portfolio composition against the Bitsight ecosystem.

Path: /v1/companies/distribution

GET: Company Search

Search for a company in the Bitsight inventory by name or domain.

Path: /v1/companies/search?query_parameter

GET: Trending Companies

See 20 companies that have been actively searched and viewed by other Bitsight users during the past week, as presented in the Trending Vendors card in the Portfolio Dashboard.

Path: /v1/companies/search/trending

Statistics

GET: Diligence Finding Counts of a Company

Get the number of Diligence findings of a company.

Path: /v1/companies/company_guid/diligence/historical-statistics

GET: Diligence Statistics

Get Diligence statistics of a company.

Path: /v1/companies/company_guid/diligence/statistics

GET: Industry Statistics

Get industry statistics for a company.

Path: /v1/companies/company_guid/industries/statistics

GET: Statistics

Get Compromised Systems statistics of a company during the past 1 year. The data includes the number of findings by risk vector and the average event duration in days.

Path: /v1/companies/company_guid/observations/statistics?fields=risk_types

GET: User Behavior Statistics

Get User Behavior statistics of a company.

Path: /v1/companies/company_guid/user-behavior/statistics

Findings and Observations

GET: Finding Details

Get an organization’s finding (events and records) details.

Path: /v1/companies/company_guid/findings

GET: Findings Statistics

Get findings statistics of a company.

Path: /v1/companies/company_guid/findings/statistics

GET: Findings Summaries

Summarized findings data for a company in your ratings tree.

Path: /v1/companies/company_guid/findings/summaries

GET: Findings Summary of a Company

See the presence of infection, server software, or vulnerability findings in a company.

Path: /v1/companies/company_guid/findings/summary

GET: Detailed Company Observations

View detailed observations for a company.

Path: /v1/companies/company_guid/observations

Infrastructure

GET: Asset Summaries

Summarized asset data for a company in your ratings tree.

Path: /v1/companies/company_guid/assets/summaries

GET: My Infrastructure Report

Get or download a CSV of your infrastructure information.

Path: /v1/companies/company_guid/infrastructure

GET: Infrastructure Changes

See changes in your organization’s infrastructure and details about the change.

Path: /v1/companies/company_guid/infrastructure/changes

GET: Infrastructure Attribution Reasons

View the reason why an IP or CIDR has been attributed to your organization from the Attribution tab.

Path: /v1/companies/company_guid/infrastructure/reasons

GET: My Infrastructure

Identify IP addresses and domains attributed to your organization in an automated way, stay informed of existing infrastructure elements and new items that are added to the list, and also work with registrars (if applicable) to keep registrations up-to-date.

Recommended: GET: My Infrastructure Report is available and is recommended over this endpoint.

Path: /v1/companies/company_guid/reports/infrastructure

GET: Company-Provided Assets

See your Company-Provided Assets.

Path: /v1/companies/infrastructure/requests/

POST: Add Assets in Bulk

Set an end date for infrastructure or add assets to your infrastructure. The source of added assets are considered to be "company"-provided.”

Path: /v1/companies/infrastructure/bulk

POST: Set an End Date for Company-Provided Assets

Set an end date for a company-provided asset.

Path: /v1/companies/infrastructure/expiration

Issue Tracking

GET: Finding Comments

View finding comments, which can be used to track remediation changes.

Path: /v1/companies/company_guid/findings/rolledup_observation_id/comments

Peer Analytics

GET: Peer Group Information

Get your peer group information.

Path: /v1/companies/entity_guid/peer-analytics/peer-group/count