SecurityScorecard

SecurityScorecard rates cybersecurity postures of corporate entities through completing scored analysis of cyber threat intelligence signals for the purposes of third party management and IT risk management.

Types of Assets Fetched

This adapter fetches the following types of assets:

• Devices

Parameters

1. SecurityScorecard Domain (required, default: api.securityscorecard.io) - The hostname or IP address of the SecurityScorecard server.
2. Token (required) - An API Key associated with a user account that has permissions to fetch assets.
3. Portfolios (optional) - Specify the portfolio ID or portfolio name for each portfolio that you want to fetch. If more than one value is specifed, separate each value by a comma. If no portfolios are specified, all portfolios are fetched.
4. Companies (optional) - Specify the scorecard identifier or company name for each company that you want to fetch. If more than one value is specified, separate each value by a comma. If no companies are specified, all companies belonging to the specified portfolios are fetched. If Portfolios and Companies parameters are both empty, all companies are fetched, regardless of their associated portfolio.
5. Verify SSL - Select to verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.
6. HTTPS Proxy (optional) - A proxy to use when connecting to the value supplied in Host Name or IP Address.
7. HTTPS Proxy User Name (optional) - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
8. HTTPS Proxy Password (optional) - The password to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.
9. To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

• Fetch IP addresses from portfolio (optional) - Select whether to fetch IP addresses from a portfolio.

APIs

Axonius uses the SecurityScorecard API.

Supported From Version

Supported from Axonius version 4.5